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DATA SHEET DESIGNATIONS 


Intel uses various data sheet markings to designate each phase of the document as it 
relates to the product. The marking appears in the upper, right-hand corner of the data 
sheet. The following is the definition of these markings: 


Data Sheet Marking Description 


Product Preview Contains information on products in the design phase of 
development. Do not finalize a design with this 
information. Revised information will be published when 
the product becomes available. 


Advanced Information Contains information on products being sampled or in 
the initial production phase of development.* 


Preliminary Contains preliminary information on new products in 
production.* 


No Marking Contains information on products in full production.* 


*Specifications within these data sheets are subject to change without notice. Verify with your local Intel sales 
office that you have the latest data sheet before finalizing a design. 
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intel. Intel386™ DX MICROPROCESSOR 
32-BIT CHMOS MICROPROCESSOR 
WITH INTEGRATED MEMORY MANAGEMENT 


m@ Flexible 32-Bit Microprocessor = Optimized for System Performance 
— 8, 16, 32-Bit Data Types — Pipelined Instruction Execution 
— 8 General Purpose 32-Bit Registers — On-Chip Address Translation Caches 

m Very Large Address Space | — 20, 25 and 33 MHz Clock 
— 4 Gigabyte Physical — 40, 50 and 66 Megabytes/Sec Bus 
— 64 Terabyte Virtual Bandwidth 

_ — 4 Gigabyte Maximum Segment Size = Numerics Support via Intel387™ DX 

m Integrated Memory Management Unit Math Coprocessor 
— Virtual Memory Support m Complete System Development 
— Optional On-Chip Paging Support 
— 4 Levels of Protection — Software: C, PL/M, Assembler 
— Fully Compatible with 80286 System Generation Tools 

m Object Code Compatible with All 8086 — Debuggers: PSCOPE, ICE™-386 
Family Microprocessors = High Speed CHMOS IV Technology 


@ Virtual 8086 Mode Allows Running of , , 
8086 Software in a Protected and pits is erie mreny Ragnnge 
Paged System @ 132 Pin Plastic Quad Flat Package 

mg Hardware Debu g gi ng Su pp ort (See Packaging Specification, Order #231369) 

The Intel386 DX Microprocessor is an entry-level 32-bit microprocessor designed for single-user applications 

and operating systems such as MS-DOS and Windows. The 32-bit registers and data paths support 32-bit 

addresses and data types. The processor addresses up to four gigabytes of physical memory and 64 terabytes 

(2**46) of virtual memory. The integrated memory management and protection architecture includes address 

translation registers, multitasking hardware and a protection mechanism to support operating systems. Instruc- 

tion pipelining, on-chip address translation, ensure short average instruction execution times and maximum 
system throughput. 


The Intel386 DX CPU offers new testability and debugging features. Testability features include a self-test and 
direct access to the page translation cache. Four new breakpoint registers provide breakpoint traps on code 
execution or data accesses, for powerful debugging of even ROM-based systems. 


Object-code compatibility with all 8086 family members (8086, 8088, 80186, 80188, 80286) means the 
Intel386 DX offers immediate access to the world’s largest microprocessor software base. 
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NOTE: 


This is revision 011; This supercedes all previous revisions. 
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1. PIN ASSIGNMENT 


The Intel386 DX pinout as viewed from the top side 
of the component is shown by Figure 1-1. Its pinout 
as viewed from the Pin side of the component is 
Figure 1-2. 
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Figure 1-1. Intel386™ DX PGA 
Pinout—View from Top Side 
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Vcc and GND connections must be made to multi- 
ple Vcc and Vss (GND) pins. Each Vcc and Vss 
must be connected to the appropriate voltage level. 
The circuit board should include Vcc and GND 
planes for power distribution and all Voc and Vss 


pins must be connected to the appropriate plane. 


NOTE: 


Pins identified as ‘‘N.C.” should remain completely 


unconnected. 
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Figure 1-2. Intel386™ DX PGA 
Pinout—View from Pin Side 
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1.1 PIN DESCRIPTION TABLE 


The following table lists a brief description of each pin on the Intel386 DX. The following definitions are used in 
these descriptions: 


# The named signal is active LOW. 
| Input signal. ; 

O Output signal. 

I/O Input and Output signal. 

— No electrical connection. 


For a more complete description refer to Section 5.2 Signal Description. 


Name and Function 
CLK2 provides the fundamental timing for the Intel386 DX. 


DATA BUS inputs data during memory, I/O and interrupt acknowledge 
read cycles and outputs data during memory and |/O write cycles. 


ADDRESS BUS outputs physical memory or port |/O addresses. 


BEO 4 -BE3# BYTE ENABLES indicate which data bytes of the data bus take part in 
a bus cycle. 

W/R# WRITE/READ is a bus cycle definition pin that distinguishes write 
cycles from read cycles. 


DATA/CONTROL is a bus cycle definition pin that distinguishes data 
cycles, either memory or I/O, from control cycles which are: interrupt 
acknowledge, halt, and instruction fetching. 


MEMORY !/O is a bus cycle definition pin that distinguishes memory 


cycles from input/output cycles. . ; 


BUS LOCK is a bus cycle definition pin that indicates that other 
system bus masters are denied access to the system bus while it is 
active. 


ADDRESS STATUS indicates that a valid bus cycle definition and 
address (W/R#, D/C#, M/IO#, BEO#, BE1#, BE2#, BE3# and 
A31—Agz2) are being driven at the Intel386 DX pins. 


NEXT ADDRESS is used to request address pipelining. 
READY # BUS READY terminates the bus cycle. 


BUS SIZE 16 input allows direct connection of 32-bit and 16-bit data 
buses. 

BUS HOLD REQUEST input allows another bus master to request 
control of the local bus. 
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1.1 PIN DESCRIPTION TABLE (Continued) 


| Symbol | Type Name and Function 
HLDA BUS HOLD ACKNOWLEDGE output indicates that the Intel886 DX 
has surrendered control of its local bus to another bus master 


BUSY # BUSY signals a busy condition from a processor extension. 


ERROR # ERROR signals an error condition from a processor extension 
PROCESSOR EXTENSION REQUEST indicates that the processor 
extension has data to be transferred by the Intel386 DX. 
INTERRUPT REQUEST is a maskable input that signals the Intel386 


DX to suspend execution of the current program and execute an 
interrupt acknowledge function. 


NON-MASKABLE INTERRUPT REQUEST is a non-maskable input 
that signals the Intel386 DX to suspend execution of the current 
program and execute an interrupt acknowledge function. 


RESET suspends any operation in progress and places the Intel386 
DX in a known reset state. See Interrupt Signals for additional 
information. 


NO CONNECT should always remain unconnected. Connection of a 
N/C pin may cause the processor to malfunction or‘be incompatible ~ 
with future steppings of the Intel386 DX. 


SYSTEM POWER provides the +5V nominal D.C. supply input. 


Vss SYSTEM GROUND provides OV connection from which all inputs and 
outputs are measured. 
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2. BASE ARCHITECTURE 


2.1 INTRODUCTION 


The Intel886 DX consists of a central processing 
unit, a memory management unit and a bus inter- 
face. 


The central processing unit consists of the execu- 
tion unit and instruction unit. The execution unit con- 
tains the eight 32-bit general purpose registers 
which are used for both address calculation, data 
operations and a 64-bit barrel shifter used to speed 
shift, rotate, multiply, and divide operations. The 
multiply and divide logic uses a 1-bit per cycle algo- 
rithm. The multiply algorithm stops the iteration 
when the most significant bits of the multiplier are all 
zero. This allows typical 32-bit multiplies to be exe- 
cuted in under one microsecond. The instruction unit 
decodes the instruction opcodes and stores them in 
the decoded instruction queue for immediate use by 
the execution unit. 


The memory management unit (MMU) consists of a 
segmentation unit and a paging unit. Segmentation 
allows the managing of the logical address space by 
providing an extra addressing component, one that 
allows easy code and data relocatability, and effi- 
cient sharing. The paging mechanism operates be- 
neath and is transparent to the segmentation pro- 
cess, to allow management of the physical address 
space. Each segment is divided into one or more 4K 
byte pages. To implement a virtual memory system, 
the Intel386 DX supports full restartability for all 
page and segment faults. 


Memory is organized into one or more variable 
length segments, each up to four gigabytes in size. A 
given region of the linear address space, a segment, 
can have attributes associated with it. These attri- 
butes include its location, size, type (i.e. stack, code 
or data), and protection characteristics. Each task 
on an Intel3886 DX can have a maximum of 16,381 
_ segments of up to four gigabytes each, thus provid- 
ing 64 terabytes (trillion bytes) of virtual memory to 
each task. 


The segmentation unit provides four-levels of pro- 
tection for isolating and protecting applications and 
the operating system from each other. The hardware 
enforced protection allows the design of systems 
with a high degree of integrity. 


The Intel386 DX has two modes of operation: Real 
Address Mode (Real Mode), and Protected Virtual 
Address Mode (Protected Mode). In Real Mode the 
Intel386 DX operates as a very fast 8086, but with 
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32-bit extensions if desired. Real Mode is required 
primarily to setup the processor for Protected Mode 
operation. Protected Mode provides access to the 
sophisticated memory management, paging and 
privilege capabilities of the processor. 


Within Protected Mode, software can perform a task 
switch to enter into tasks designated as Virtual 8086 
Mode tasks. Each such task behaves with 8086 se- 
mantics, thus allowing 8086 software (an application 
program, or an entire operating system) to execute. 
The Virtual 8086 tasks can be isolated and protect- 
ed from one another and the host Intel886 DX oper- 
ating system, by the use of paging, and the I/O Per- 
mission Bitmap. 


Finally, to facilitate high performance system hard- 
ware designs, the Intel386 DX bus interface offers 
address pipelining, dynamic data bus sizing, and di- 
rect Byte Enable signals for each byte of the data 
bus. These hardware features are described fully be- 
ginning in Section 5. 


2.2 REGISTER OVERVIEW 


The Intel886 DX has 32 register resources in the 
following categories: 


e General Purpose Registers 
¢ Segment Registers 

e Instruction Pointer and Flags 
¢ Control Registers 

e System Address Registers 

e Debug Registers 

e Test Registers. 


The registers are a superset of the 8086, 80186 and 
80286 registers, so all 16-bit 8086, 80186 and 
80286 registers are contained within the 32-bit In- 
tel386 DX. 


Figure 2-1 shows all of Intel386 DX base architec- 
ture registers, which include the general address 
and data registers, the instruction pointer, and the 
flags register. The contents of these registers are 
task-specific, so these registers are automatically 
loaded with a new context upon a task switch opera- 
tion. 


The base architecture also includes six directly ac- 
cessible segments, each up to 4 Gbytes in size. The 
segments are indicated by the selector values 
placed in Intel886 DX segment registers of Figure 
2-1. Various selector values can be loaded as a pro- 
gram executes, if desired. 
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GENERAL DATA AND ADDRESS REGISTERS 
16 15 


SEGMENT SELECTOR REGISTERS 
15 0 


CS 
SS 
DS 
ES 
FS 
GS 


INSTRUCTION POINTER 
AND FLAGS REGISTER 
31 16 15 


EIP 
FLAGS. | EFLAGS~ 


Figure 2-1. Intel386™ DX Base 
Architecture Registers 


The selectors are also task-specific, so the segment 
registers are automatically loaded with new context 
upon a task switch operation. 


The other types of registers, Control, System Ad- 
dress, Debug, and Test, are primarily used by sys- 
tem software. 


2.3 REGISTER DESCRIPTIONS 


2.3.1 General Purpose Registers 


General Purpose Registers: The eight general pur- 
pose registers of 32 bits hold data or address quanti- 
ties. The general registers, Figure 2-2, support data 
operands of 1, 8, 16, 32 and 64 bits, and bit fields of 
1 to 32 bits. They support address operands of 16 
and 32 bits. The 32-bit registers are named EAX, 
EBX, ECX, EDX, ESI, EDI, EBP, and ESP. 


The least significant 16 bits of the registers can be 
accessed separately. This is done by using the 16- 
bit names of the registers AX, BX, CX, DX, Sl, DI, 
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BP, and SP. When accessed as a 16-bit operand, 


the upper 16 bits of the register are neither used nor 
changed. 


Finally 8-bit operations can individually access the 
lowest byte (bits 0-7) and the higher byte (bits 8- 
15) of general purpose registers AX, BX, CX and DX. 
The lowest bytes are named AL, BL, CL and DL, 
respectively. The higher bytes are named AH, BH, 
CH and DH, respectively. The individual byte acces- 
sibility offers additional flexibility for data operations, 
but is not used for effective address calculation. 


6. 8 08 0 


Figure 2-2. General Registers 
and Instruction Pointer 


2.3.2 Instruction Pointer 


The instruction pointer, Figure 2-2, is a 32-bit regis- 
ter named EIP. EIP holds the offset of the next in- 
struction to be executed. The offset is always rela- 
tive to the base of the code segment (CS). The low- 
er 16 bits (bits 0-15) of EIP contain the 16-bit in- 
struction pointer named IP, which is used by 16-bit 
addressing. | 


2.3.3 Flags Register 


The Flags Register is a 32-bit register named 
EFLAGS. The defined bits and bit fields within 
EFLAGS, shown in Figure 2-3, control certain opera- 
tions and indicate status of the Intel386 DX. The 
lower 16 bits (bit 0-15) of EFLAGS contain the 
16-bit flag register named FLAGS, which is most 
useful when executing 8086 and 80286 code. 


indicates Intel reserved: do not define; see section 2.3.10. 
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Figure 2-3. Flags Register 


(Virtual 8086 Mode, bit 17) 


The VM bit provides Virtual 8086 Mode within 
Protected Mode. If set while the Intel886 DX 
is in Protected Mode, the Intel386 DX will 
switch to Virtual 8086 operation, handling 
segment loads as the 8086 does, but gener- 
ating exception 13 faults on privileged op- 
codes. The VM bit can be set only in Protect- 
ed Mode, by the IRET instruction (if current 
privilege level = 0) and by task switches at 
any privilege level. The VM bit is unaffected 
by POPF. PUSHF always pushes a 0 in this 
bit, even if executing in virtual 8086 Mode. 
The EFLAGS image pushed during interrupt 
processing or saved during task switches will 
contain a 1 in this bit if the interrupted code 
was executing as a Virtual 8086 Task. 


(Resume Flag, bit 16) 


The RF flag is used in conjunction with the 
debug register breakpoints. It is checked at 
instruction boundaries before breakpoint pro- 
cessing. When FF is set, it causes any debug 
fault to be ignored on the next instruction. RF 
is then automatically reset at the successful 
completion of every instruction (no faults are 
signalled) except the IRET instruction, the 
POPF instruction, (and JMP, CALL, and INT 
instructions causing a task switch). These in- 
structions set RF to the value specified by the 
memory image. For example, at the end of 
the breakpoint service routine, the IRET 


NT 


lIOPL 


instruction can pop an EFLAG image having 
the RF bit set and resume the program’s exe- 
cution at the breakpoint address without gen- 
erating another breakpoint fault on the same 
location. 


(Nested Task, bit 14) 


This flag applies to Protected Mode. NT is set 
to indicate that the execution of this task is 
nested within another task. If set, it indicates 
that the current nested task’s Task State 
Segment (TSS) has a valid back link to the 
previous task’s TSS. This bit is set or reset by 
control transfers to other tasks. The value of 
NT in EFLAGS is tested by the IRET instruc- 
tion to determine whether to do an inter-task 
return or an intra-task return. A POPF or an 
IRET instruction will affect the setting of this 
bit according to the image popped, at any 
privilege level. — 


(Input/Output Privilege Level, bits 12-13) 


This two-bit field applies to Protected Mode. 
IOPL indicates the numerically maximum CPL 
(current privilege level) value permitted to ex- 
ecute I/O instructions without generating an 
exception 13 fault or consulting the I/O Per- 
mission Bitmap. It also indicates the maxi- 
mum CPL value allowing alteration of the IF 
(INTR Enable Flag) bit when new values are 
popped into the EFLAG register. POPF and 
IRET instruction can alter the IOPL field when 
executed at CPL = 0. Task switches can al- 
ways alter the IOPL field, when the new flag 
image is loaded from the incoming task’s 
TSS. 
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OF 


DF 


TF 


SF 


PO, Oe 


15 


(Overflow Flag, bit 11) 


OF is set if the operation resulted in a signed 
overflow. Signed overflow occurs when the 
operation resulted in carry/borrow into the 
sign bit (high-order bit) of the result but did 
not result in a carry/borrow out of the high- 
order bit, or vice-versa. For 8/16/32 bit oper- 
ations, OF is set according to overflow at bit 
7/15/31, respectively. 


(Direction Flag, bit 10) 


DF defines whether ESI and/or EDI registers 
postdecrement or postincrement during the 
string instructions. Postincrement occurs if 
DF is reset. Postdecrement occurs if DF is 
set. 


(INTR Enable Flag, bit 9) 


The IF flag, when set, allows recognition of 
external interrupts signalled on the INTR pin. 
When IF is reset, external interrupts signalled 
on the INTR are not recognized. IOPL indi- 
cates the maximum CPL value allowing alter- 
ation of the IF bit when new values are 
popped into EFLAGS or FLAGS. 


(Trap Enable Flag, bit 8) 


TF controls the generation of exception 1 
trap when single-stepping through code. 
When TF is set, the Intel886 DX generates an 
exception 1 trap after the next instruction is 
executed. When TF is reset, exception 1 
traps occur only as a function of the break- 
point addresses loaded into debug registers 
DRO-DR3. 


(Sign Flag, bit 7) 
SF is set if the high-order bit of the result is 
set, it is reset otherwise. For 8-, 16-, 32-bit 


operations, SF reflects the state of bit 7, 15, 
31 respectively. 


SEGMENT 
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(Zero Flag, bit 6) 


ZF is set if all bits of the result are 0. Other- 
wise it is reset. 


(Auxiliary Carry Flag, bit 4) 


The Auxiliary Flag is used to simplify the addi- 
tion and subtraction of packed BCD quanti- 
ties. AF is set if the operation resulted in a 
carry out of bit 3 (addition) or a borrow into bit 
3 (subtraction). Otherwise AF is reset. AF is 
affected by carry out of, or borrow into bit 3 
only, regardless of overall operand length: 8, 
16 or 32 bits. 


(Parity Flags, bit 2) 


PF is set if the low-order eight bits of the op- 
eration. contains an even number of “1’s” 
(even parity). PF is reset if the low-order eight 
bits have odd parity. PF is a function of only 
the low-order eight bits, regardless of oper- 
and size. 


(Carry Flag, bit 0) 


CF is set if the operation resulted in a carry 
out of (addition), or a borrow into (subtraction) 
the high-order bit. Otherwise CF is reset. For 
8-, 16- or 32-bit operations, CF is set accord- 
ing to carry/borrow at bit 7, 15 or 31, respec- 
tively. 


Note in these descriptions, ‘‘set’’ means “set to 1,” 
and “reset” means “reset to 0.” 


2.3.4 Segment Registers 


Six 16-bit segment registers hold segment selector 
values identifying the currently addressable memory 
segments. Segment registers are shown in Figure 2- 
4. In Protected Mode, each segment may range in 
size from one byte up to the entire linear and physi- 
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cal space of the machine, 4 Gbytes (232 bytes). If a 
maximum sized segment is used (limit = 
FFFFFFFFH) it should be Dword aligned (i.e., the 
least two significant bits of the segment base should 
be zero). This will avoid a segment limit violation (ex- 
ception 13) caused by the wrap around. In Real Ad- 
‘dress Mode, the maximum segment size is fixed at 
64 Kbytes (216 bytes). 


The six segments addressable at any given moment 
are defined by the segment registers CS, SS, DS, 
ES, FS and GS. The selector in. CS indicates the 
current code segment; the selector in SS indicates 
the current stack segment; the selectors in DS, ES, 
FS and GS indicate the current data segments. 


2.3.5 Segment Descriptor Registers 


The segment descriptor registers are not program- 
mer visible, yet it is very useful to understand their 
content. Inside the Intel386 DX, a descriptor register 
(programmer invisible) is associated with each pro- 
grammer-visible segment register, as shown by Fig- 
ure 2-4. Each descriptor register holds a 32-bit seg- 
ment base address, a 32-bit segment limit, and the 
other necessary segment attributes. 


When a selector value is loaded into a segment reg- 
ister, the associated descriptor register is automati- 
cally updated with the correct information. In Real 
Address Mode, only the base address is updated 
directly (by shifting the selector value four bits to the 
left), since the segment maximum limit and attributes 
are fixed in Real Mode. In Protected Mode, the base 
address, the limit, and the attributes are all updated 
per the contents of the segment descriptor indexed 
by the selector. 


Whenever a memory reference occurs, the segment 
descriptor register associated with the segment be- 
ing used is automatically involved with the memory 
reference. The 32-bit segment base address be- 
comes a component of the linear address calcula- 
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tion, the 32-bit limit is used for the limit-check opera- 
tion, and the attributes are checked against the type 
of memory reference requested. 


2.3.6 Control Registers 


The Intel386 DX has three control registers of 32 
bits, CRO, CR2 and CR3, to hold machine state of a 
global nature (not specific to an individual task). 
These registers, along with System Address Regis- 
ters described in the next section, hold machine 
state that affects all tasks in the system. To access 
the Control Registers, load and store instructions 
are defined. 


CRO: Machine Control Register (includes 80286 
Machine Status Word) 


CRO, shown in Figure 2-5, contains 6 defined bits for 
control and status purposes. The low-order 16 bits 
of CRO are also known as the Machine Status Word, 
MSW, for compatibility with 80286 Protected Mode. 
LMSW and SMSW instructions are taken as special 
aliases of the load and store CRO operations, where 
only the low-order 16 bits of CRO are involved. For 
compatibility with 80286 operating systems the In- 
tel386 DX LMSW instructions work in an identical 
fashion to the LMSW instruction on the 80286. (i.e. It 
only operates on the low-order 16-bits of CRO and it 
ignores the new bits in CRO.) New Intel386 DX oper- 
ating systems should use the MOV CRO, Reg in- 
struction. 


The defined CRO bits are described below. 

PG (Paging Enable, bit 31) 
the PG bit is set to enable the on-chip paging 
unit. It is reset to disable the on-chip paging 
unit. 

R (reserved, bit 4) 


This bit is reserved by Intel. When loading CRO 
care should be taken to not alter the value of 
this bit. 


Figure 2-5. Control Register 0 
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TS (Task Switched, bit 3) 


TS is automatically set whenever a task switch 
operation is performed. If TS is set, a coproces- 
sor ESCape opcode will cause a Coprocessor 
Not Available trap (exception 7). The trap han- 
dler typically saves the Intel887 DX coproces- 


sor context belonging to a previous task, loads: 


the Intel387 DX coprocessor state belonging to 
the current task, and clears the TS bit before 
returning to the faulting coprocessor opcode. 


EM (Emulate Coprocessor, bit 2) 


The EMulate coprocessor bit is set to cause all 
coprocessor opcodes to generate a Coproces- 
sor Not Available fault (exception 7). It is reset 
to allow coprocessor opcodes to be executed 
on an actual Intel3887 DX coprocessor (this is 
the default case after reset). Note that the 
WAIT opcode is not affected by the EM bit set- 
ting. 
MP (Monitor Coprocessor, bit 1) 


The MP bit is used in conjunction with the TS 
bit to determine if the WAIT opcode will gener- 
ate a Coprocessor Not Available fault (excep- 
tion 7) when TS = 1. When both MP = 1 and 
TS = 1, the WAIT opcode generates a trap. 
Otherwise, the WAIT opcode does not gener- 
ate a trap. Note that TS is automatically set 
whenever a task switch operation is performed. 
PE (Protection Enable, bit 0) 

The PE bit is set to enable the Protected Mode. 
lf PE is reset, the processor operates again in 
Real Mode. PE may be set by loading MSW or 
CRO. PE can be reset only by a load into CRO. 
Resetting the PE bit is typically part of a longer 
instruction sequence needed for proper tran- 
sition from Protected Mode to Real Mode. Note 
that for strict 80286 compatibility, PE cannot be 
reset by the LMSW instruction. 


CR1: reserved 
CR1 is reserved for use in future Intel processors. 
CR2: Page Fault Linear Address 


CR2, shown in Figure 2-6, holds the 32-bit linear ad- 
dress that caused the last page fault detected. The 
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error code pushed onto the page fault handler’s 
stack when it is invoked provides additional status 
information on this page fault. 


CR3: Page Directory Base Address 


CR3, shown in Figure 2-6, contains the physical 
base address of the page directory table. The In- 
tel386 DX page directory table is always page- 
aligned (4 Kbyte-aligned). Therefore the lowest 
twelve bits of CR3 are ignored when written and 
they store as undefined. 


A task switch through a TSS which changes the 
value in CR3, or an explicit load into CR3 with any 
value, will invalidate all cached page table entries in 
the paging unit cache. Note that if the value in CR3 
does not change during the task switch, the cached 
page table entries are not flushed. 


2.3.7 System Address Registers 


Four special registers are defined to reference the 
tables or segments supported by the 80286 CPU 
and Intel386 DX protection model. These tables or 
segments are: 


GDT (Global Descriptor Table), 
IDT (Interrupt Descriptor Table), 
LDT (Local Descriptor Table), 
TSS (Task State Segment). 


The addresses of these tables and segments are 
stored in special registers, the System Address and 
System Segment Registers illustrated in Figure 2-7. 
These registers are named GDTR, IDTR, LDTR and 
TR, respectively. Section 4 Protected Mode Archi- 
tecture describes the use of these registers. 


GDTR and IDTR 


These registers hold the 32-bit linear base address 
and 16-bit limit of the GDT and IDT, respectively. 


The GDT and IDT segments, since they are global to 
all tasks in the system, are defined by 32-bit linear 
addresses (subject to page translation if paging is 
enabled) and 16-bit limit values. 


PAGE FAULT LINEAR ADDRESS REGISTER 


Figure 2-6. Control Registers 2 and 3 
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DESCRIPTOR REGISTERS (AUTOMATICALLY LOADED) 
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Figure 2-7. System Address and System Segment Registers 


LDTR and TR 


These registers hold the 16-bit selector for the LDT 
descriptor and the TSS descriptor, respectively. 


The LDT and TSS segments, since they are task- 
specific segments, are defined by selector values 
stored in the system segment registers. Note that a 
segment descriptor register (programmer-invisible) 
is associated with each system segment register. 


2.3.8 Debug and Test Registers 


Debug Registers: The six programmer accessible 
debug registers provide on-chip support for debug- 
‘ging. Debug Registers DRO-3 specify the four linear 
breakpoints. The Debug Control Register DR7 is 
used to set the breakpoints and the Debug Status 
Register DR6, displays the current state of the 
breakpoints. The use of the debug registers is de- 
scribed in section 2.12 Debugging support. 


DEBUG REGISTERS 
31 0 


Intel reserved. Do not define | 
BREAKPOINT STATUS 
BREAKPOINT CONTROL 


TEST REGISTERS (FOR PAGE CACHE) 
31 0 


TEST CONTROL TR6 
TEST STATUS TR7 


Figure 2-8. Debug and Test Registers 


Test Registers: Two registers are used to control 
the testing of the RAM/CAM (Content Addressable 
Memories) in the Translation Lookaside Buffer por- 
tion of the Intel886 DX. TR6 is the command test 
register, and TR7 is the data register which contains 
the data of the Translation Lookaside buffer test. 
Their use is discussed in section 2.11 Testability. 


Figure 2-8 shows the Debug and Test registers. 


2.3.9 Register Accessibility 


There are a few differences regarding the accessibil- 
ity of the registers in Real and Protected Mode. Ta- 
ble 2-1 summarizes these differences. See Section 
4 Protected Mode Architecture for further details. 


2.3.10 Compatibility 


VERY IMPORTANT NOTE: 
COMPATIBILITY WITH FUTURE PROCESSORS 


in the preceding register descriptions, note cer- 
tain Intel386 DX register bits are Intel reserved. 
When reserved bits are called out, treat them as 
fully undefined. This is essential for your soft- 
ware compatibility with future processors! Fol- 
low the guidelines below: 


1) Do not depend on the states of any unde- | 
fined bits when testing the values of defined 
register bits. Mask them out when testing. 


2) Do not depend on the states of any unde- 
fined bits when storing them to memory or 
another register. 


3) Do not depend on the ability to retain infor- 
mation written into any undefined bits. 


4) When loading registers always load the unde- 
fined bits as zeros. 
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Table 2-1. Register Usage 


General Registers 
Segment Registers 


GDTR 


NOTES: 


Use in Use in Use in 
: Real Mode Protected Mode Virtual 8086 Mode 
Register 


SS) 


PL = 0: The registers can be accessed only when the current privilege level is zero. 
*IOPL: The PUSHF and POPF instructions are made |/O Privilege Level sensitive in Virtual 8086 Mode. 


5) However, registers which have been previ- 
ously stored may be reloaded without mask- 
ing. 


Depending upon the values of undefined regis- 
ter bits will make your software dependent upon 
the unspecified Intel386 DX handling of these 
bits. Depending on undefined values risks mak- 
ing your software incompatible with future proc- 
essors that define usages for the Intel386 DX- 
undefined bits. AVOID ANY SOFTWARE DEPEN- 
DENCE UPON THE STATE OF UNDEFINED In- 
tel386 DX REGISTER BITS. 


2.4 INSTRUCTION SET 


2.4.1 Instruction Set Overview 
The instruction set is divided into nine categories of 
operations: 

Data Transfer 

Arithmetic 

Shift/Rotate 

String Manipulation 

Bit Manipulation 

Control Transfer 

High Level Language Support 

Operating System Support 

Processor Control 


These Intel886 DX instructions are listed in Table 
2-2. 


All Intel386 DX instructions operate on either 0, 1, 2, 
or 3 operands; where an operand resides in a regis- 
ter, in the instruction itself, or in memory. Most zero 
operand instructions (e.g. CLI, STI) take only one 
byte. One operand instructions generally are two 
bytes long. The average instruction is 3.2 bytes long. 
Since the Intel886 DX has a 16-byte instruction 
queue, an average of 5 instructions will be pre- 
fetched. The use of two operands permits the follow- 
ing types of common instructions: 


Register to Register 
Memory to Register 
Immediate to Register 
Register to Memory 
Immediate to Memory. 


The operands can be either 8, 16, or 32 bits long. As 
a general rule, when executing code written for the 
Intel386 DX (32-bit code), operands are 8 or 32 bits; 
when executing existing 80286 or 8086 code (16-bit 
code), operands are 8 or 16 bits. Prefixes can be 
added to all instructions which override the default 
length of the operands, (i.e. use 32-bit operands for 
16-bit code, or 16-bit operands for 32-bit code). 


For a more elaborate description of the instruction 
set, refer to the /nte/386 DX Programmer's Refer- 
ence Manual. 


~~” <r 
Atk > 
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2.4.2 Intel386™ DX Instructions 


Table 2-2a. Data Transfer 
GENERAL PURPOSE 
Move operand 

Push operand onto stack 
Pop operand off stack 
USHA _ {Push all registers on stack 
OPA Pop all registers off stack 


CHG Exchange Operand, Register 
LAT 


OV 
USH 


extension 

extended 
Convert byte to Word, or Word to Dword 
ie Input operand from I/O space 
Output operand to I/O space 
Load effective address 
Load pointer into D segment register 
LES 
LGS Load pointer into G segment register’ 


LSS Load pointer into S (Stack) segment 
register 


| 
POPFD 
Set Direction Flag 
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Table 2-2b. Arithmetic Instructions 


DAA ecimal adjust for addition 


SUBTRACTION 
Subtract operands 


Subtract with borrow 


Decrement operand by 1 


BB 
EC 
EG 
MP 
AS 
S 


D 
N 
C 
D 
AA 


ASCII Adjust for subtraction 
MUL 
AAM 


DIV Divide unsigned 


Integer Divide 
AAD ASCII adjust before division 


ODS Load byte or Word, Dword string 


STOS Store byte or Word, Dword string 


Table 2-2d. Logical Instructions 


LOGICALS 
“NOT” operands 
“AND” operands 


“Inclusive OR” operands 


“Exclusive OR” operands 


Test “Test” operands 


“+> - 


Intel386™ DX MICROPROCESSOR 


Table 2-2d. Logical Instructions (Continued) 


SHIFTS 
SHL/SHR | Shift logical left or right 
SAL/SAR | Shift arithmetic left or right 


SHLD/ 
SHRD Double shift left or right 


Table 2-2e. Bit Manipulation Instructions 
) 


Table 2-2f. Program Control Instructions 
ETCC Set byte equal to condition code 
A/JNBE | Jump if above/not below nor equal 


AE/JNB | Jump if above or equal/not below 
B/JNAE |Jump if below/not above nor equal 


iF 


=. 


: 


JBE/JNA | Jump if below or equal/not above 

Jump if carry 

Jump if equal/zero 

JG/JNLE 


GE/JNL | Jump if greater or equal/not less 

L/JNGE | Jump if less/not greater nor equal 

LE/JNG |Jump if less or equal/not greater 
J 
J 
J 


wey ay (ay ee 
z 
© 


ump if not carry 
ump if not equal/not zero 
ump if not overflow 


= 


NE/JNZ 
NO 

NP/JPO | Jump if not parity/parity odd 

NS 


P/JPE 


“IR A TBR, IO ag 
n O 


STR 
SLDT 
LGDT 
[LIDT 
LTR 
LAR. 
LSL 
VERW Verify Segment for Reading or Writing 
16 bits of CRO) : 
SMSW 


Table 2-2f. Program Control Instructions 
(Continued) 


UNCONDITIONAL TRANSFERS 
Call procedure/task 
Return from procedure 
Jump 
ITERATION CONTROLS 


m 
=f 


TF 
U By 
a 


DOOR 


oo 
fe) 
(2) 

a?) 


Loop if equal/zero 


LOOPNZ 
CXZ 


Loop if not equal/not zero 
JUMP if register CX=0 


co Pane i 1h 
fa 
O1O O 
Ui;u0 U0 
ZiINM 
m a 
=, 


Table 2-2g. High Level Language Instructions 


BOUND  |Check Array Bounds 
ENTER | Setup Parameter Block for Entering 


Procedure 
LEAVE 


Leave Procedure 
Table 2-2h. Protection Model 


Table 2-2i. Processor Control Instructions 
HLT 


’ 
> 
= 


Wait until BUSY # negated 
ESC Escape 
OCK Lock Bus 


; 
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2.5 ADDRESSING MODES 


2.5.1 Addressing Modes Overview 


The Intel386 DX provides a total of 11 addressing 
modes for instructions to specify operands. The ad- 
dressing modes are optimized to allow the efficient 
execution of high level languages such as C and 
FORTRAN, and they cover the vast majority of data 
references needed by high-level languages. 


2.5.2 Register and Immediate Modes 


Two of the addressing modes provide for instruc- 
tions that operate on register or immediate oper- 
ands: 


Register Operand Mode: The operand is located 
in one of the 8-, 16- or 32-bit general registers. 


immediate Operand Mode: The operand is in- 
cluded in the instruction as part of the opcode. 


2.5.3 32-Bit Memory Addressing 
Modes 


The remaining 9 modes provide a mechanism for 
specifying the effective address of an operand. The 
linear address consists of two components: the seg- 
ment base address and an effective address. The 
effective address is calculated by using combina- 
tions of the following four address elements: 


DISPLACEMENT: An 8-, or 32-bit immediate value, 
following the instruction. 


BASE: The contents of any general purpose regis- 
ter. The base registers are generally used by compil- 
ers to point to the start of the local variable area. 


INDEX: The contents of any general purpose regis- 
ter except for ESP. The index registers are used to 
access the elements of an array, or a string of char- 
acters. 


SCALE: The index register’s value can be multiplied 
by a scale factor, either 1, 2, 4 or 8. Scaled index 
mode is especially useful for accessing arrays or 
structures. 


Combinations of these 4 components make up the 9 
additional addressing modes. There is no perform- 
ance penalty for using any of these addressing com- 
binations, since the effective address calculation is 
pipelined with the execution of other instructions. 
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The one exception is the simultaneous use of Base 
and Index components which requires one addition- 
al clock. 


As shown in Figure 2-9, the effective address (EA) of 
an operand is calculated according to the phe 
formula. 


EA= Base Reg + (Index Reg * Scaling) + Displacement 


Direct Mode: The operand’s offset is contained as 
part of the instruction as an 8-, 16- or 32-bit dis- 
placement. 

EXAMPLE: INC Word PTR [500] 


Register Indirect Mode: A BASE register contains 
the address of the operand. 
EXAMPLE: MOV [ECX], EDX 


Based Mode: A BASE register’s contents is added 
to a DISPLACEMENT to form the operands offset. 
EXAMPLE: MOV ECX, [EAX+ 24] 


Index Mode: An INDEX register’s contents is added 
to a DISPLACEMENT to form the operands offset. 
EXAMPLE: ADD EAX, TABLE[ESI] 


Scaled Index Mode: An INDEX register’s contents is 
multiplied by a scaling factor which is added to a 
DISPLACEMENT to form the operands offset. 
EXAMPLE: IMUL EBX, TABLE[ESI*4],7 


Based Index Mode: The contents of a BASE register 
is added to the contents of an INDEX register to 
form the effective address of an operand. 
EXAMPLE: MOV EAX, [ESI] [EBX] 


Based Scaled Index Mode: The contents of an IN- 
DEX register is multiplied by a SCALING factor and 
the result is added to the contents of a BASE regis- 
ter to obtain the operands offset. 

EXAMPLE: MOV ECX, [EDX*8] [EAX] 


Based Index Mode with Displacement: The contents 
of an INDEX Register and a BASE register’s con- 
tents and a DISPLACEMENT are all summed to- 
gether to form the operand offset. 

EXAMPLE: ADD EDX, [ESI] [EBP + OOFFFFFOH] 


Based Scaled Index Mode with Displacement: The 
contents of an INDEX register are multiplied by a 
SCALING factor, the result is added to the contents 
of a BASE register and a DISPLACEMENT to form 
the operand’s offset. 

EXAMPLE: MOV EAX, LOCALTABLE[EDI*4] 
[EBP + 80] 
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Figure 2-9. Addressing Mode Calculations 


2.5.4 Differences Between 16 and 32 
Bit Addresses 


In order to provide software compatibility with the 
80286 and the 8086, the Intel886 DX can execute 
16-bit instructions in Real and Protected Modes. The 
processor determines the size of the instructions it is 
executing by examining the D bit in the CS segment 
Descriptor. If the D bit is 0 then all operand lengths 
and effective addresses are assumed to be 16 bits 
_long. If the D bit is 1 then the default length for oper- 
ands and addresses is 32 bits. In Real Mode the 
default size for operands and addresses is 16-bits. 


Regardless of the default precision of the operands 
or addresses, the Intel386 DX is able to execute ei- 
ther 16 or 32-bit instructions. This is specified via the 
use of override prefixes. Two prefixes, the Operand 
Size Prefix and the Address Length Prefix, over- 
ride the value of the D bit on an individual instruction 
basis. These prefixes are automatically added by In- 
tel assemblers. 


Example: The processor is executing in Real Mode > 


and the programmer needs to access the EAX regis- 


ters. The assembler code for this might be MOV 
EAX, 32-bit MEMORYOP, ASM386 Macro Assem- 
bler automatically determines that an Operand Size 
Prefix is needed and generates it. 


Example: The D bit is 0, and the programmer wishes 
to use Scaled Index addressing mode to access an 
array. The Address Length Prefix allows the use of 
MOV DX, TABLE[ESI*2]. The assembler uses an 
Address Length Prefix since, with D=0, the default 
addressing mode is 16-bits. 


Example: The D bit is 1, and the program wants to 
store a 16-bit quantity. The Operand Length Prefix is 
used to specify only a 16-bit value; MOV MEM16, 
DX. 


Intel386™ DX MICROPROCESSOR 


Table 2-3. BASE and INDEX Registers for 16- and 32-Bit Addresses 


| | 46 Bit Addressing 32-Bit Addressing 


BASE REGISTER 
INDEX REGISTER 


BX,BP 
SI,DI 


SCALE FACTOR 
DISPLACEMENT 


none 


Any 32-bit GP Register 
Any 32-bit GP Register 


Except ESP 
1,2,4,8 


The OPERAND LENGTH and Address Length Pre- 
fixes can be applied separately or in combination to 
any instruction. The Address Length Prefix does not 
allow addresses over 64K bytes to be accessed in 
Real Mode. A memory address which exceeds 
FFFFH will result in a General Protection Fault. An 
Address Length Prefix only allows the use of the ad- 
ditional Intel886 DX addressing modes. 


When executing 32-bit code, the Intel386 DX uses 
either 8-, or 32-bit displacements, and any register 
can be used as base or index registers. When exe- 
cuting 16-bit code, the displacements are either 8, or 
16 bits, and the base and index register conform to 
the 80286 model. Table 2-3 illustrates the differenc- 
es. 


2.6 DATA TYPES 


The Intel386 DX supports all of the data types com- 
monly used in high level languages: 


Bit: A single bit quantity. 


Bit Field: A group of up to 32 contiguous bits, 
which spans a maximum of four bytes. 


Bit String: A set of contiguous bits, on the Intel386 
DX bit strings can be up to 4 gigabits long. 


Byte: A signed 8-bit quantity. 

Unsigned Byte: An unsigned 8-bit quantity. 
Integer (Word): A signed 16-bit quantity. 

Long Integer (Double Word): A signed 32-bit quan- 
tity. All operations assume a 2’s complement rep- 


resentation. 


Unsigned Integer (Word): An unsigned 16-bit 
quantity. 


0, 8, 16 bits 


0, 8, 32 bits 


Unsigned Long Integer (Double Word): An un- 
signed 32-bit quantity. 


Signed Quad Word: A signed 64-bit quantity. 


Unsigned Quad Word: An unsigned 64-bit quanti- 
ty. 


Offset: A 16- or 32-bit offset only quantity which 
indirectly references another memory location. 


Pointer: A full pointer which consists of a 16-bit 
segment selector and either a 16- or 32-bit offset. 


Char: A byte representation of an ASCII Alphanu- 
meric or control character. 


String: A contiguous sequence of bytes, words or 
dwords. A string may contain between 1 byte and 
4 Gbytes. 


BCD: A byte (unpacked) representation of decimal 
digits 0-9. 


Packed BCD: A byte (packed) representation of 
two decimal digits 0-9 storing one digit in each 
nibble. 


When the Intel386 DX is coupled with an Intel387 
DX Numerics Coprocessor then the following com- 
mon Floating Point types are supported. 


Floating Point: A signed 32-, 64-, or 80-bit real 
number representation. Floating point numbers 
are supported by the Intel387 DX numerics co- 
processor. 


Figure 2-10 illustrates the data types supported by 
the Intel386 DX and the Intel887 DX numerics co- 
processor. 
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Figure 2-10. Intel386™ DX Supported Data Types 
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2.7 MEMORY ORGANIZATION 


2.7.1 Introduction 


Memory on the Intel386 DX is divided up into 8-bit 
quantities (bytes), 16-bit quantities (words), and 
32-bit quantities (dwords). Words are stored in two 
consecutive bytes in memory with the low-order byte 
at the lowest address, the high order byte at the high 
address. Dwords are stored in four consecutive 
bytes in memory with the low-order byte at the low- 
est address, the high-order byte at the highest ad- 
dress. The address of a word or dword is the byte 
address of the low-order byte. 


In addition to these basic data types, the Intel386 
DX supports two larger units of memory: pages and 
segments. Memory can be divided up into one or 
more variable length segments, which can be 
swapped to disk or shared between programs. Mem- 
ory can also be organized into one or more 4K byte 
pages. Finally, both segmentation and paging can 
be combined, gaining the advantages of both sys- 
tems. The Intel386 DX supports both pages and 
segments in order to provide maximum flexibility to 
the system designer. Segmentation and paging are 
complementary. Segmentation is useful for organiz- 
ing memory in logical modules, and as such is a tool 
for the application programmer, while pages are use- 
ful for the system programmer for managing the 
physical memory of a system. 


2.7.2 Address Spaces 


The Intel386 DX has three distinct address spaces: 
logical, linear, and physical. A logical address 


EFFECTIVE ADDRESS CALCULATION 
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(also known as a virtual address) consists of a se- 
lector and an offset. A selector is the contents of a 
segment register. An offset is formed by summing all 
of the addressing components (BASE, INDEX, DIS- 
PLACEMENT) discussed in section 2.5.3 Memory 
Addressing Modes into an effective address. Since 
each task on Intel3886 DX has a maximum of 16K 
(214 —1) selectors, and offsets can be 4 gigabytes, 
(282 bits) this gives a total of 246 bits or 64 terabytes 
of logical address space per task. The programmer 
sees this virtual address space. 


The segmentation unit translates the logical ad- 
dress space into a 32-bit linear address space. If the 
paging unit is not enabled then the 32-bit linear ad- 
dress corresponds to the physical address. The 
paging unit translates the linear address space into 
the physical address space. The physical address 
is what appears on the address pins. 


The primary difference between Real Mode and Pro- 
tected Mode is how the segmentation unit performs 
the translation of the logical address into the linear 
address. In Real Mode, the segmentation unit shifts 
the selector left four bits and adds the result to the 
offset to form the linear address. While in Protected 
Mode every selector has a linear base address as- 
sociated with it. The linear base address is stored in 
one of two operating system tables (i.e. the Local 
Descriptor Table or Global Descriptor Table). The 
selector’s linear base address is added to the offset 
to form the final linear address. 


Figure 2-11 shows the relationship between the vari- 
ous address spaces. 
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‘Figure 2-11. Address Translation 
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2.7.3 Segment Register Usage 


The main data structure used to organize memory is 
the segment. On the Intel386 DX, segments are vari- 
able sized blocks of linear addresses which have 
certain attributes associated with them. There are 
two main types of segments: code and data, the 
segments are of variable size and can be as small 
as 1 byte or as large as 4 gigabytes (232 bytes). 


In order to provide compact instruction encoding, 
and increase processor performance, instructions 
do not need to explicitly specify which segment reg- 
ister is used. A default segment register is automati- 
cally chosen according to the rules of Table 2-4 
(Segment Register Selection Rules). In general, data 
references use the selector contained in the DS reg- 
ister; Stack references use the SS register and In- 
struction fetches use the CS register. The contents 
of the Instruction Pointer provides the offset. Special 
segment override prefixes allow the explicit use of a 
given segment register, and override the implicit 
rules listed in Table 2-4. The override prefixes also 
allow the use of the ES, FS and GS segment regis- 
ters. 


: % re . : ‘ 
® Q | 
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There are no restrictions regarding the overlapping 
of the base addresses of any segments. Thus, all 6 
segments could have the base address set to zero 
and create a system with a four gigabyte linear ad- 
dress space. This creates a system where the virtual 
address space is the same as the linear address 
space. Further details of segmentation are dis- 
cussed in section 4.1. : 


2.8 1/0 SPACE 


The Intel386 DX has two distinct physical address 
spaces: Memory and |/O. Generally, peripherals are 
placed in I/O space although the Intel886 DX also 
supports memory-mapped peripherals. The I/O 
space consists of 64K bytes, it can be divided into 
64K 8-bit ports, 32K 16-bit ports, or 16K 32-bit ports, 
or any combination of ports which add up to less 
than 64K bytes. The 64K I/O address space refers 
to physical memory rather than linear address since 
I/O instructions do not go through the segmentation 
or paging hardware. The M/IO# pin acts as an addi- 
tional address line thus allowing the system designer 
to easily determine which address space the proces- 
sor is accessing. 


Table 2-4. Segment Register Selection Rules 

Type of Implied (Default) Segment Override 
. Memory Reference Segment Use Prefixes Possible 
Destination of PUSH, PUSHF, INT, SS 
CALL, PUSHA Instructions 
Source of POP, POPA, POPF, SS 
IRET, RET instructions 

Ro eG 


Destination of STOS, MOVS, REP 
STOS, REP MOVS Instructions 
(DI is Base Register) 


Other Data References, with 
‘Effective Address Using Base 
Register of: 

[EAX] 

[EBX] 

[ECX] 

[EDX] 

[ESI] 

[EDI] 

[EBP] 

[ESP] 
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DS,CS,SS,ES,FS,GS 
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DS,CS,SS,ES,FS,GS 
DS,CS,SS,ES,FS,GS 
DS,CS,SS,ES,FS,GS 
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The I/O ports are accessed via the IN and OUT I/O 
instructions, with the port address supplied as an 
immediate 8-bit constant in the instruction or in the 
DX register. All 8- and 16-bit port addresses are zero 


extended on the upper address lines. The I/O in- 
structions cause the M/IO# pin to be driven low. 


I/O port addresses OOF8H through OOFFH are re- 
served for use by Intel. 


2.9 INTERRUPTS 


2.9.1 Interrupts and Exceptions 


Interrupts and exceptions alter the normal program 
flow, in order to handle external events, to report 
errors or exceptional conditions. The difference be- 
tween interrupts and exceptions is that interrupts are 
used to handle asynchronous external events while 
exceptions handle instruction faults. Although a pro- 
gram can generate a software interrupt via an INT N 
instruction, the processor treats software interrupts 
as exceptions. 


Hardware interrupts occur as the result of an exter- 
nal event and are classified into two types: maskable 
or non-maskable. Interrupts are serviced after the 
execution of the current instruction. After the inter- 
rupt handler is finished servicing the interrupt, exe- 
cution proceeds with the instruction immediately af- 
ter the interrupted instruction. Sections 2.9.3 and 
2.9.4 discuss the differences between Maskable and 
Non-Maskable interrupts. 


Exceptions are classified as faults, traps, or aborts 
depending on the way they are reported, and wheth- 
er or not restart of the instruction causing the excep- 
tion is supported. Faults are exceptions that are de- 
tected and serviced before the execution of the 
faulting instruction. A fault would occur in a virtual 
memory system, when the processor referenced a 
page or a segment which was not present. The oper- 
ating system would fetch the page or segment from 
disk, and then the Intel386 DX would restart the in- 
struction. Traps are exceptions that are reported im- 
mediately after the execution of the instruction 
which caused the problem. User defined interrupts 
are examples of traps. Aborts are exceptions which 
do not permit the precise location of the instruction 
causing the exception to be determined. Aborts are 
used to report severe errors, such as a hardware 
error, or illegal values in system tables. 


Thus, when an interrupt service routine has been 
completed, execution proceeds from the instruction 
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immediately following the interrupted instruction. On 
the other hand, the return address from an excep- 
tion fault routine will always point at the instruction 
causing the exception and include any leading in- 
struction prefixes. Table 2-5 summarizes the possi- 
ble interrupts for the Intel886 DX and shows where 
the return address points. 


The Intel386 DX has the ability to handle up to 256 
different interrupts/exceptions. In order to service 
the interrupts, a table with up to 256 interrupt vec- 
tors must be defined. The interrupt vectors are sim- 
ply pointers to the appropriate interrupt service rou- 
tine. In Real Mode (see section 3.1), the vectors are 
4 byte quantities, a Code Segment plus a 16-bit off- 
set; in Protected Mode, the interrupt vectors are 8 
byte quantities, which are put in an Interrupt Descrip- 
tor Table (see section 4.1). Of the 256 possible inter- 
rupts, 32 are reserved for use by Intel, the remaining 
224 are free to be used by the system designer. 


2.9.2 Interrupt Processing 


When an interrupt occurs the following actions hap- 
pen. First, the current program address and the 
Flags are saved on the stack to allow resumption of 
the interrupted program. Next, an 8-bit vector is sup- 
plied to the Intel386 DX which identifies the appro- 
priate entry in the interrupt table. The table contains 
the starting address of the interrupt service routine. 


' Then, the user supplied interrupt service routine is 


executed. Finally, when an IRET instruction is exe- 
cuted the old processor state is restored and pro- 
gram execution resumes at the appropriate instruc- 
tion. 


The 8-bit interrupt vector is supplied to the Intel386 
DX in several different ways: exceptions supply the 
interrupt vector internally; software INT instructions 
contain or imply the vector; maskable hardware in- 
terrupts supply the 8-bit vector via the interrupt ac- 
knowledge bus sequence. Non-Maskable hardware 
interrupts are assigned to interrupt vector 2. 


2.9.3 Maskable Interrupt 


Maskable interrupts are the most common way used 
by the Intel3886 DX to respond to asynchronous ex- 
ternal hardware events. A hardware interrupt occurs 
when the INTR is pulled high and the Interrupt Flag 
bit (IF) is enabled. The processor only responds to 
interrupts between instructions, (REPeat String in- 
structions, have an “interrupt window’’, between 
memory moves, which allows interrupts during long 
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Table 2-5. Interrupt Vector Assignments 


Interrupt 
Number 


Instruction Which 
Can Cause 


Return Address 
Points to 
Faulting 


Exception Instruction 


INT 2 or NMI 
INT 


Interrupt on Overflow 
Array Bounds Check 
Invalid OP-Code 
Device Not Available 
Double Fault 


* Some debug exceptions may report both traps on the previous instruction, and faults on the next instruction. 


string moves). When an interrupt occurs the proces- 
sor reads an 8-bit vector supplied by the hardware 
which identifies the source of the interrupt, (one of 
224 user defined interrupts). The exact nature of the 
interrupt sequence is discussed in section 5. 


The IF bit in the EFLAG registers is reset when an 
interrupt is being serviced. This effectively disables 
servicing additional interrupts during an interrupt 
service routine. However, the IF may be set explicitly 
by the interrupt handler, to allow the nesting of inter- 
rupts. When an IRET instruction is executed the 
Original state of the IF is restored. 


2.9.4 Non-Maskable Interrupt 


Non-maskable interrupts provide a method of servic- 
ing very high priority interrupts. A common example 
of the use of a non-maskable interrupt (NMI) would 
be to activate a power failure routine. When the NMI 
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input is pulled high it causes an interrupt with an 
internally supplied vector value of 2. Unlike a normal 
hardware interrupt, no interrupt acknowledgment se- 
quence is performed for an NMI. 


While executing the NMI servicing procedure, the In- 
tel386 DX will not service further NMI requests, until 
an interrupt return (IRET) instruction is executed or 
the processor is reset. If NMI occurs while currently 
servicing an NMI, its presence will be saved for serv- 
icing after executing the first IRET instruction. The IF 
bit is cleared at the beginning of an NMI interrupt to 
inhibit further INTR interrupts. 


2.9.5 Software Interrupts 


A third type of interrupt/exception for the Intel386 
DX is the software interrupt. An INT n instruction 
causes the processor to execute the interrupt serv- 
ice routine pointed to by the nth vector in the inter- 
rupt table. 


Cee 
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A special case of the two byte software interrupt INT 
n is the one byte INT 3, or breakpoint interrupt. By 
inserting this one byte instruction in a program, the 


user can set breakpoints in his program as a debug- 
ging tool. 


A final type of software interrupt, is the single step 
interrupt. It is discussed in section 2.12. 


2.9.6 Interrupt and Exception 
Priorities 


Interrupts are externally-generated events. Maska- 
ble Interrupts (on the INTR input) and Non-Maskable 
Interrupts (on the NMI input) are recognized at in- 
struction boundaries. When NMI and maskable 
INTR are both recognized at the same instruction 
boundary, the Intel386 DX invokes the NMI service 
routine first. If, after the NMI service routine has 
been invoked, maskable interrupts are still enabled, 
then the Intel386 DX will invoke the appropriate in- 
terrupt service routine. 


Table 2-6a. Intel386™ DX Priority for 
invoking Service Routines in Case of 
Simultaneous External Interrupts 


1. NMI 
2. INTR 


Exceptions are internally-generated events. Excep- 
tions are detected by the Intel386 DX if, in the 
course of executing an instruction, the Intel386 DX 
detects a problematic condition. The Intel886 DX 
then immediately invokes the appropriate exception 
service routine. The state of the Intel886 DX is such 
that the instruction causing the exception can be re- 
started. If the exception service routine has taken 
care of the problematic condition, the instruction will 
execute without causing the same exception. 


It is possible for a single instruction to generate sev- 
eral exceptions (for example, transferring a single 
operand could generate two page faults if the oper- 
and location spans two “not present’ pages). How- 
ever, only one exception is generated upon each at- 
tempt to execute the instruction. Each exception 
service routine should correct its corresponding ex- 
ception, and restart the instruction. In this manner, 
exceptions are serviced until the instruction exe- 
cutes successfully. 


As the Intel386 DX executes instructions, it follows a 
consistent cycle in checking for exceptions, as 
shown in Table 2-6b. This cycle is repeated 
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as each instruction is executed, and occurs in paral- 
lel with instruction decoding and execution. 


Table 2-6b. Sequence of Exception Checking 


Consider the case of the Intel3886 DX having just 
completed an instruction. It then performs the 
following checks before reaching the point where 
the next instruction is completed: 


1. Check for Exception 1 Traps from the instruc- 
tion just completed (single-step via Trap Flag, 
or Data Breakpoints set in the Debug Regis- 
ters). 


. Check: for Exception 1 Faults in the next in- 
struction (Instruction Execution Breakpoint set 
in the Debug Registers for the next instruc- 
tion). 

. Check for external NMI and INTR. 


. Check for Segmentation Faults that prevented 
fetching the entire next instruction (exceptions 
17 or 13). 


. Check for Page Faults that prevented fetching 
the entire next instruction (exception 14). 


. Check for Faults decoding the next instruction 
(exception 6 if illegal opcode; exception 6 if in 
Real Mode or in Virtual 8086 Mode and at- 
tempting to execute an instruction for Protect- 
ed Mode only (see 4.6.4); or exception 13 if 
instruction is longer than 15 bytes, or privilege 
violation in Protected Mode (i.e. not at IOPL or 


at CPL=0). 


. lf WAIT opcode, check if TS=1 and MP=1 
(exception 7 if both are 1). 


. If ESCAPE opcode for numeric coprocessor, 
check if EM=1 or TS=1 (exception 7 if either 
are 1). 


. If WAIT opcode or ESCAPE opcode for nu- 
meric coprocessor, check ERROR # input sig- 
nal (exception 16 if ERROR# input is assert- 
ed). 

10. Check in the following order for each memo- 
ry reference required by the instruction: 


a. Check for Segmentation Faults that pre- 
vent transferring the entire memory quanti- 
ty (exceptions 11, 12, 13). 


b. Check for Page Faults that prevent trans- 
ferring the entire memory quantity (excep- 
tion 14). : 


Note that the order stated supports the concept 
of the paging mechanism being “underneath’’ 
the segmentation mechanism. Therefore, for any 
given code or data reference in memory, seg- 
mentation exceptions are generated before pag- 
ing exceptions are generated. © 
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2.9.7 Instruction Restart 


The Intel386 DX fully supports restarting all instruc- 
tions after faults. If an exception is detected in the 
instruction to be executed (exception categories 4 
through 10 in Table 2-6b), the Intel886 DX invokes 
the appropriate exception service routine. The In- 
tel386 DX is in a state that permits restart of the 
instruction, for all cases but those in Table 2-6c. 
Note that all such cases are easily avoided by prop- 
er design of the operating system. 


Table 2-6c. Conditions Preventing 
Instruction Restart 


A. An instruction causes a task switch to a task 
whose Task State Segment is partially ‘‘not 
present’. (An entirely “not present” TSS is re- 
startable.) Partially present TSS’s can be 
avoided either by keeping the TSS’s of such 
tasks present in memory, or by aligning TSS 
segments to reside entirely within a single 4K 
page (for TSS segments of 4K bytes or less). 


. A coprocessor operand wraps around the top 
of a 64K-byte segment or a 4G-byte segment, 
and spans three pages, and the page holding 


the middle portion of the operand is ‘“‘not pres- 
ent.” This condition can be avoided by starting 
at a page boundary any segments containing 
coprocessor operands if the segments are ap- 
proximately 64K-200 bytes or larger (i.e. large 
enough for wraparound of the coprocessor 
operand to possibly occur). 


Note that these conditions are avoided by using 
the operating system designs mentioned in this 
table. 


2.9.8 Double Fault 


A Double Fault (exception 8) results when the proc- 
essor attempts to invoke an exception service rou- 
tine for the segment exceptions (10, 11, 12 or 13), 
but in the process of doing so, detects an exception 
other than a Page Fault (exception 14). 


A Double Fault (exception 8) will also be generated 
when the processor attempts to invoke the Page 
Fault (exception 14) service routine, and detects an 
exception other than a second Page Fault. In any 
functional system, the entire Page Fault service rou- 
tine must remain “present” in memory. 


Double page faults however do not raise the double 
fault exception. If a second page fault occurs while 
the processor is attempting to enter the service rou- 
tine for the first time, then the processor will invoke 
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the page fault (exception 14) handler a second time, 


rather than the double fault (exception 8) handler. A 
subsequent fault, though, will lead to shutdown. 


When a Double Fault occurs, the Intel886 DX in- 
vokes the exception service routine for exception 8. 


2.10 RESET AND INITIALIZATION 


When the processor is initialized or Reset the regis- 
ters have the values shown in Table 2-7. The In- 
tel386 DX will then start executing instructions near 
the top of physical memory, at location FFFFFFFOH. 
When the first InterSegment Jump or Call is execut- 
ed, address lines A20-31 will drop low for CS-rela- 
tive memory cycles, and the Intel3886 DX will only 
execute instructions in the lower one megabyte of 
physical memory. This allows the system designer to 
use a ROM at the top of physical memory to initialize 

the system and take care of Resets. | 


RESET forces the Intel386 DX to terminate all exe- 
cution and local bus activity. No instruction execu- 
tion or bus activity will occur as long as Reset is 
active. Between 350 and 450 CLK2 periods after 
Reset becomes inactive the Intel886 DX will start 
executing instructions at the top of physical memory. 


Table 2-7. Register Values after Reset 


Flag Word UUUU0002H Note 1 
Machine Status Word (CRO)}| VUUUUUUU0H Note 2 
Instruction Pointer OOOOFFFOH 
Code Segment FOOOH Note 3 
Data Segment 0000H 
Stack Segment 0000H 
O0000H 
0000H 
0000H 
component and 
stepping ID Note 5 
undefined Note 4 


Extra Segment (ES) 
Extra Segment (FS) 
Extra Segment (GS) 
DX register 


All other registers 


NOTES: 

1. EFLAG Register. The upper 14 bits of the EFLAGS reg- 
ister are undefined, VM (Bit 17) and RF (BIT) 16 are O as 
are all other defined flag bits. 

2. CRO: (Machine Status Word). All of the defined fields in 
the CRO are 0 (PG Bit 31, TS Bit 3, EM Bit 2, MP Bit 1, and 
PE Bit 0). 

3. The Code Segment Register (CS) will have its Base Ad- 
dress set to FFFFOOOOH and Limit set to OFFFFH. 

4. All undefined bits are Intel Reserved and should not be 
used. 

5. DX register always holds component and stepping iden- 
tifier (see 5.7). EAX register holds self-test signature if self- 
test was requested (see 5.6). 
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2.11 TESTABILITY 


2.11.1 Self-Test 


The Intel386 DX has the capability to perform a self- 
test. The self-test checks the function of all of the 
Control ROM and most of the non-random logic of 
the part. Approximately one-half of the Intel886 DX 
can be tested during self-test. 


Self-Test is initiated on the Intel886 DX when the 
RESET pin transitions from HIGH to LOW, and the 
BUSY # pin is low. The self-test takes about 2**19 
clocks, or approximately 26 milliseconds with a 
20 MHz Intel386 DX. At the completion of self-test 
the processor performs reset and begins normal op- 
eration. The part has successfully passed self-test if 
the contents of the EAX register are zero (0). If the 
results of EAX are not zero then the self-test has 
detected a flaw in the part. 


2.11.2 TLB Testing 


The Intel3886 DX provides a mechanism for testing 
the Translation Lookaside Buffer (TLB) if desired. 
This particular mechanism is unique to the Intel386 
DX and may not be continued in the same way in 
future processors. When testing the TLB paging 
must be turned off (PG = 0 in CRO) to enable the 
TLB testing hardware and avoid interference with 
the test data being written to the TLB. 


There are two TLB testing operations: 1) write en- 
tries into the TLB, and, 2) perform TLB lookups. Two 
Test Registers, shown in Figure 2-12, are provided 
for the purpose of testing. TR6 is the “test command 
register’, and TR7 is the ‘test data register’. The 
fields within these registers are defined below. 


C: This is the command bit. For a write into TR6 to 
cause an immediate write into the TLB entry, write a 
0 to this bit. For a write into TR6 to cause an immedi- 
ate TLB lookup, write a 1 to this bit. 


Linear Address: This is the tag field of the TLB. On 
a TLB write, a TLB entry is allocated to this linear 
address and the rest of that TLB entry is set per the 
value of TR7 and the value just written into TR6. On 
a TLB lookup, the TLB is interrogated per this value 
and if one and only one TLB entry matches, the rest 
of the fields of TR6 and TR7 are set from the match- 
ing TLB entry. 


Physical Address: This is the data field of the TLB. 
On a write to the TLB, the TLB entry allocated to the 
linear address in TR6 is set to this value. On a TLB 
lookup, the data field (physical address) from the 
TLB is read out to here. 
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PL: On a TLB write, PL=1 causes the REP field of 
TR7 to select which of four associative blocks of the 
TLB is to be written, but PL=O allows the internal 
pointer in the paging unit to select which TLB block 
is written. On a TLB lookup, the PL bit indicates 
whether the lookup was a hit (PL gets set to 1) ora 
miss (PL gets reset to 0). 


V: The valid bit for this TLB entry. All valid bits can 
also be cleared by writing to CR3. 


D, D#: The dirty bit for/from the TLB entry. 
U, U#: The user bit for/from the TLB entry. 
W, W#: The writable bit for/from the TLB entry. 


For D, U and W, both the attribute and its comple- 
ment are provided as tag bits, to permit the option of 
a “don’t care” on TLB lookups. The meaning of 
these pairs of bits is given in the following table: 


X# Effect During Value of Bit 
TLB Lookup X after TLB Write 


Miss All Bit X Becomes Undefined 
Match if X = 0 Bit X Becomes 0 
Match if X = 1 Bit X Becomes 1 

Match all Bit X Becomes Undefined 


For writing a TLB entry: 


1. Write TR7 for the desired physical address, PL 
and REP values. 


2. Write TR6 with the appropriate linear address, 
etc. (be sure to write C = O for “write” com- 
mand). 


* For looking up (reading) a TLB entry: 


1. Write TR6 with the appropriate linear address (be 
sure to write C=1 for “lookup” command). 


2. Read TR7 and TRE6. If the PL bit in TR7 indicates 
a hit, then the other values reveal the TLB con- 
tents. If PL indicates a miss, then the other values 
in TR7 and TR6 are indeterminate. 


2.12 DEBUGGING SUPPORT 


The Intel386 DX provides several features which 
simplify the debugging process. The three catego- 
ries of on-chip debugging aids are: 


1) the code execution breakpoint opcode (OCCH), 


2) the single-step capability provided by the TF bit in 
_the flag register, and 


3) the code and data breakpoint capability provided 
by the Debug Registers DRO-3, DR6, and DR7. 
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LINEAR ADDRESS WEBBER 


PHYSICAL ADDRESS : 


| 0 7 indicates Intel reserved: Do not define; SEE SECTION 2.3.10 


Figure 2-12. Test Registers 


2.12.1 Breakpoint Instruction 


A single-byte-opcode breakpoint instruction is avail- 
able for use by software debuggers. The breakpoint 
opcode is OCCh, and generates an exception 3 trap 
when executed. In typical use, a debugger program 
can “plant” the breakpoint instruction at all desired 
code execution breakpoints. The single-byte break- 
point opcode is an alias for the two-byte general 
software interrupt instruction, INT n, where n=3. 
The only difference between INT 3 (OCCh) and INT n 
is that INT 3 is never |OPL-sensitive but INT n is 
lOPL-sensitive in Protected Mode and Virtual 8086 
Mode. 


2.12.2 Single-Step Trap 


If the single-step flag (TF, bit 8) in the EFLAG regis- 
ter is found to be set at the end of an instruction, a 
single-step exception occurs. The single-step ex- 
ception is auto vectored to exception number 1. Pre- 
cisely, exception 1 occurs as a trap after the instruc- 
tion following the instruction which set TF. In typical 
practice, a debugger sets the TF bit of a flag register 
image on the debugger’s stack. It then typically 
transfers control to the user program and loads the 
flag image with a signal instruction, the IRET instruc- 
tion. The single-step trap occurs after executing one 
instruction of the user program. 


Since the exception 1 occurs as a trap (that is, it 
occurs after the instruction has already executed), 
the CS:EIP pushed onto the debugger’s stack points 
to the next unexecuted instruction of the program 
being debugged. An exception 1 handler, merely by 
ending with an IRET instruction, can therefore effi- 
ciently support single-stepping through a user pro- 
gram. 


2.12.3 Debug Registers 


The Debug Registers are an advanced debugging 
feature of the Intel886 DX. They allow data access 
breakpoints as well as code execution breakpoints. 
Since the breakpoints are indicated by on-chip regis- 
ters, an instruction execution breakpoint can be 
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placed in ROM code or in code shared by several 
tasks, neither of which can be supported by the INT3 
breakpoint opcode. 


The Intel386 DX contains six Debug Registers, pro- 
viding the ability to specify up to four distinct break- 
points addresses, breakpoint control options, and 
read breakpoint status. Initially after reset, break- 
points are in the disabled state. Therefore, no break- 
points will occur unless the debug registers are pro- 
grammed. Breakpoints set up in the Debug Regis- 
ters are autovectored to exception number 1. 


2.12.3.1 LINEAR ADDRESS BREAKPOINT 
REGISTERS (DRO-DR3) 


Up to four breakpoint addresses can be specified by 
writing into Debug Registers DRO-DR3, shown in 
Figure 2-13. The breakpoint addresses specified are 
32-bit linear addresses. Intel386 DX hardware con- 
tinuously compares the linear breakpoint addresses 
in DRO—DR3 with the linear addresses generated by 
executing software (a linear address is the result of 
computing the effective address and adding the 
32-bit segment base address). Note that if paging is 
not enabled the linear address equals the physical 
address. If paging is enabled, the linear address is 
translated to a physical 32-bit address by the on- 
chip paging unit. Regardless of whether paging is 
enabled or not, however, the breakpoint registers 
hold linear addresses. 


2.12.3.2 DEBUG CONTROL REGISTER (DR7) 


A Debug Control Register, DR7 shown in Figure 
2-13, allows several debug control functions such as 
enabling the breakpoints and setting up other con- 
trol options for the breakpoints. The fields within the 
Debug Control Register, DR7, are as follows: 


LENi (breakpoint length specification bits) 


A 2-bit LEN field exists for each of the four break- 
points. LEN specifies the length of the associated 
breakpoint field. The choices for data breakpoints 
are: 1 byte, 2 bytes, and 4 bytes. Instruction execu- 
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BREAKPOINT 0 LINEAR ADDRESS 


BREAKPOINT 1 LINEAR ADDRESS 
BREAKPOINT 2 LINEAR ADDRESS 
BREAKPOINT 3 LINEAR ADDRESS 
Intel reserved. Do not define. 


Intel reserved. Do not define. 


ata el 
lela 0/0 


16 15 


indicates Intel reserved: Do not define; SEE SECTION 2.3.10 


Figure 2-13. Debug Registers 


tion breakpoints must have a length of 1 (LENi = 
00). Encoding of the LENi field is as follows: 


Usage of Least 
Significant Bits in 
Breakpoint Address 
Register i, (i= 0-3) 


1 byte All 32-bits used to 
specify a single-byte 
breakpoint field. 


2 bytes A1-A31 used to 
specify a two-byte, 
word-aligned 
breakpoint field. AO in 
Breakpoint Address 
Register is not used. 


come | 
do not use 
omen i: mie f 


7 _ 


The LENi field controls the size of breakpoint field i 
by controlling whether all low-order linear address 
bits in the breakpoint address register are used to 
detect the breakpoint event. Therefore, all break- 
point fields are aligned; 2-byte breakpoint fields be- 
gin on Word boundaries, and 4-byte breakpoint 
fields begin on Dword boundaries. 


Breakpoint 
Encoding | Field Width 


A2-A31 used to 
specify a four-byte, 
dword-aligned 
breakpoint field. AO 
and A1 in Breakpoint 
Address Register are 
not used. 


The following is an example of various size break- 
point fields. Assume the breakpoint linear address in 
DR2 is OOOOOOOSH. In that situation, the following 
illustration indicates the region of the breakpoint 
field for lengths of 1, 2, or 4 bytes. 


DR2=00000005H; LEN2 = 00B 


|| | __fooo00008e 
| ___[bkptfid2|___fooo00004H 
| | |___Joo000000H 


DR2=00000005H; LEN2 = 01B 


31 


DR2=00000005H; LEN2 = 11B 


31 


00000008H 
00000004H 


<— bkpt fld2 
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RWi (memory access qualifier bits) — 


A 2-bit RW field exists for each of the four break- 
points. The 2-bit RW field specifies the type of usage 
which must occur in order to activate the associated 
breakpoint. 


RW Usage 
Encoding Causing Breakpoint 


00 Instruction execution only 


01 Data writes only 
10 Undefined—do not use this encoding 
11 Data reads and writes only 


RW encoding 00 is used to set up an instruction 
execution breakpoint. RW encodings 01 or 11 are 
used to set up write-only or read/write data break- 
points. 


Note that instruction execution breakpoints are 
taken as faults (i.e. before the instruction exe- 
cutes), but data breakpoints are taken as traps 
(i.e. after the data transfer takes place). 


Using LENi and RWi to Set Data Breakpoint i 


A data breakpoint can be set up by writing the linear 
address into DRi (i = O-3). For data breakpoints, 
RWi can = 01 (write-only) or 11 (write/read). LEN 
can = 00, 01, or 11. 


lf a data access entirely or partly falls within the data 
breakpoint field, the data breakpoint condition has 
occurred, and if the breakpoint is enabled, an excep- 
tion 1 trap will occur. 


Using LENi and RWi to Set Instruction Execution 
Breakpoint i 


An instruction execution breakpoint can be set up by 
writing address of the beginning of the instruction 
(including prefixes if any) into DRi (i = 0-3). RWi 
must = 00 and LEN must = 00 for instruction exe- 
cution breakpoints. 


If the instruction beginning at the breakpoint address 
is about to be executed, the instruction execution 
breakpoint condition has occurred, and if the break- 
point is enabled, an exception 1 fault will occur be- 
fore the instruction is executed. 


Note that an instruction execution breakpoint ad- 
dress must be equal to the beginning byte address 
of an instruction (including prefixes) in order for the 
instruction execution breakpoint to occur. 

GD (Global Debug Register access detect) 


The Debug Registers can only be accessed in Real 
Mode or at privilege level 0 in Protected Mode. The 
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GD bit, when set, provides extra protection against 
any Debug Register access even in Real Mode or at 
privilege level 0 in Protected Mode. This additional 
protection feature is provided to guarantee that a 
software debugger (or ICET-386) can have full con- 
trol over the Debug Register resources when re- 
quired. The GD bit, when set, causes an exception 1 
fault if an instruction attempts to read or write any 
Debug Register. The GD bit is then automatically 
cleared when the exception 1 handler is invoked, 
allowing the exception 1 handler free access to the 
debug registers. 


GE and LE (Exact data breakpoint match, global and 
local) 


lf either GE or LE is set, any data breakpoint trap will 
be reported exactly after completion of the instruc- 
tion that caused the operand transfer. Exact report- 
ing is provided by forcing the Intel386 DX execution 
unit to wait for completion of data operand transfers 
before beginning execution of the next instruction. 


lf exact data breakpoint match is not selected, data 
breakpoints may not be reported until several in- 
structions later or may not be reported at all. When 
enabling a data breakpoint, it is therefore recom- 
mended to enable the exact data breakpoint match. 


When the Intel386 DX performs a task switch, the 
LE bit is cleared. Thus, the LE bit supports fast task 
switching out of tasks, that have enabled the exact 
data breakpoint match for their task-local break- 
points. The LE bit is cleared by the processor during 
a task switch, to avoid having exact data breakpoint 
match enabled in the new task. Note that exact data 
breakpoint match must be re-enabled under soft- 
ware control. 


The Intel386 DX GE bit is unaffected during a task 
switch. The GE bit supports exact data breakpoint 
match that is to remain enabled during all tasks exe- 
cuting in the system. 


Note that instruction execution breakpoints are al- 
ways reported exactly, whether or not exact data 
breakpoint match is selected. 


Gi and Li (breakpoint enable, global and local) 


lf either Gi or Li is set then the associated breakpoint 
(as defined by the linear address in DRi, the length 
in LENi and the usage criteria in RWi) is enabled. If 
either Gi or Li is set, and the Intel386 DX detects the 
ith breakpoint condition, then the exception 1 han- 
dler is invoked. 


When the Intel3886 DX performs a task switch to a 
new Task State Segment (TSS), all Li bits are 
cleared. Thus, the Li bits support fast task switching 
out of tasks that use some task-local breakpoint 
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registers. The Li bits are cleared by the processor 
during a task switch, to avoid spurious exceptions in 


the new task. Note that the breakpoints must be re- 
enabled under software control. 


All Intel386 DX Gi bits are unaffected during a task 
switch. The Gi bits support breakpoints that are ac- 
tive in all tasks executing in the system. 


2.12.3.3 DEBUG STATUS REGISTER (DR6) 


A Debug Status Register, DR6 shown in Figure 2-13, 
allows the exception 1 handler to easily determine 
why it was invoked. Note the exception 1 handler 
can be invoked as a result of one of several events: 


1) DRO Breakpoint fault/trap. 
2) DR1 Breakpoint fault/trap. 
3) DR2 Breakpoint fault/trap. 
4) DR3 Breakpoint fault/trap. 
5) Single-step (TF) trap. 

6) Task switch trap. 


7) Fault due to attempted debug register access 
when GD=1. 


The Debug Status Register contains single-bit flags 
for each of the possible events invoking exception 1. 
Note below that some of these events are faults (ex- 


ception taken before the instruction is executed), © 


while other events are traps (exception taken after 
the debug events occurred). 


The flags in DR6 are set by the hardware but never 
cleared by hardware. Exception 1 handler software 
should clear DR6 before returning to the user pro- 
gram to avoid future confusion in identifying the 
source of exception 1. 


The fields within the Debug Status Register, DR6, 
are as follows: 


Bi (debug fault/trap due to breakpoint 0-3) 


Four breakpoint indicator flags, BO-B3, correspond 
one-to-one with the breakpoint registers in DRO- 
DR3. A flag Bi is set when the condition described 
by DRi, LENi, and RWi occurs. 


If Gi or Li is set, and if the ith breakpoint is detected, 
the processor will invoke the exception 1 handler. 
The exception is handled as a fault if an instruction 
execution breakpoint occurred, or as a trap if a data 
breakpoint occurred. 


IMPORTANT NOTE: A flag Bi is set whenever the 
hardware detects a match condition on enabled 
breakpoint i. Whenever a match is detected on at 
least one enabled breakpoint i, the hardware imme- 
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diately sets all Bi bits corresponding to breakpoint 
conditions matching at that instant, whether enabled 
or not. Therefore, the exception 1 handler may see 
that multiple Bi bits are set, but only set Bi bits corre- 
sponding to enabled breakpoints (Li or Gi set) are 
true indications of why the exception 1 handler was 
invoked. , 


BD (debug fault due to attempted register access 
when GD bit set) 


This bit is set if the exception 1 handler was invoked 
due to an instruction attempting to read or write to 
the debug registers when GD bit was set. If such an 
event occurs, then the GD bit is automatically 
cleared when the exception 1 handler is invoked, 
allowing handler access to the debug registers. 


BS (debug trap due to single-step) 


This bit is set if the exception 1 handler was invoked 
due to the TF bit in the flag register being set (for 
single-stepping). See section 2.12.2. 


BT (debug trap due to task switch) 


This bit is set if the exception 1 handler was invoked 
due to a task switch occurring to a task having an 
Intel386 DX TSS with the T bit set. (See Figure 
4-15a). Note the task switch into the new task oc- 
curs normally, but before the first instruction of the 
task is executed, the exception 1 handler is invoked. 
With respect to the task switch operation, the opera- 
tion is considered to be a trap. 


2.12.3.4 USE OF RESUME FLAG (RF) IN FLAG 
REGISTER 


The Resume Flag (RF) in the flag word can sup- 
press an instruction execution breakpoint when the 
exception 1 handler returns to a user program at a 
user address which is also an instruction execution 
breakpoint. See section 2.3.3. 


3. REAL MODE ARCHITECTURE 


3.1 REAL MODE INTRODUCTION 


When the processor is reset or powered up it is ini- 
tialized in Real Mode. Real Mode has the same base 
architecture as the 8086, but allows access to the 
32-bit register set of the Intel886 DX. The address- 
ing mechanism, memory size, interrupt handling, are 
all identical to the Real Mode on the 80286. 
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SEGMENT 
SELECTOR i aids 


MAX LIMIT 
FIXED AT 64K IN 
REAL MODE 


MEMORY OPERAND 


SELECTED 
SEGMENT 


SEGMENT BASE 


Figure 3-1. Real Address Mode Addressing 


All of the Intel386 DX instructions are available in 
Real Mode (except those instructions listed in 4.6.4). 
The default operand size in Real Mode is 16-bits, 
just like the 8086. In order to use the 32-bit registers 
and addressing modes, override prefixes must be 
used. In addition, the segment size on the Intel386 
DX in Real Mode is 64K bytes so 32-bit effective 
addresses must have a value less the OOOOFFFFH. 
The primary purpose of Real Mode is to set up the 
processor for Protected Mode Operation. 


The LOCK prefix on the Intel386 DX, even in Real 
Mode, is more restrictive than on the 80286. This is 
due to the addition of paging on the Intel386 DX in 
Protected Mode and Virtual 8086 Mode. Paging 
makes it impossible to guarantee that repeated 
string instructions can be LOCKed. The Intel386 DX 
can’t require that all pages holding the string be 
physically present in memory. Hence, a Page Fault 
(exception 14) might have to be taken during the 
repeated string instruction. Therefore the LOCK pre- 
fix can’t be supported during repeated string instruc- 
tions. 


These are the only instruction forms where the 
LOCK prefix is legal on the Intel386 DX: 


Operands 


BIT Test and 
SET/RESET/COMPLEMENT 


Mem, Reg/immed 


Reg, Mem 
Mem, Reg 
Mem, Reg/immed 


ADD, OR, ADC, SBB, 
AND, SUB, XOR 
NOT, NEG, INC, DEC 


Mem 


An exception 6 will be generated if a LOCK prefix is 
placed before any instruction form or opcode not 
listed above. The LOCK prefix allows indivisible 
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read/modify/write operations on memory operands 
using the instructions above. For example, even the 
ADD Reg, Mem is not LOCKable, because the Mem 
operand is not the destination (and therefore no 
memory read/modify/operation is being performed). 


Since, on the Intel386 DX, repeated string instruc- 
tions are not LOCKable, it is not possible to LOCK 
the bus for a long period of time. Therefore, the 
LOCK prefix is not IOPL-sensitive on the Intel386 
DX. The LOCK prefix can be used at any privilege 
level, but only on the instruction forms listed above. 


3.2 MEMORY ADDRESSING 


In Real Mode the maximum memory size is limited to 
1 megabyte. Thus, only address lines A2-A19 are 
active. (Exception, the high address lines A20-A31 
are high during CS-relative memory cycles until an 
intersegment jump or call is executed (see section 
2.10)). 


Since paging is not allowed in Real Mode the linear 
addresses are the same as physical addresses. 
Physical addresses are formed in Real Mode by 
adding the contents of the appropriate segment reg- 
ister which is shifted left by four bits to an effective 
address. This addition results in a physical address 
from OOOO00000H to 0010FFEFH. This is compatible 
with 80286 Real Mode. Since segment registers are 
shifted left by 4 bits this implies that Real Mode seg- 
ments always start on 16 byte boundaries. 


All segments in Real Mode are exactly 64K bytes 
long, and may be read, written, or executed. The 
Intel386 DX will generate an exception 13 if a data 
operand or instruction fetch occurs past the end of a 
segment. (i.e. if an operand has an offset greater 
than FFFFH, for example a word with a low byte at 
FFFFH and the high byte at OOOOH.) 


a 
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Segments may be overlapped in Real Mode. Thus, if 
a particular segment does not use all 64K bytes an- 
other segment can be overlayed on top of the un- 
used portion of the previous segment. This allows 


the programmer to minimize the amount of physical 
memory needed for a program. 


3.3 RESERVED LOCATIONS 


There are two fixed areas in memory which are re- 
served in Real address mode: system initialization 
area and the interrupt table area. Locations O0000H 
through OO3FFH are reserved for interrupt vectors. 
Each one of the 256 possible interrupts has a 4-byte 
jump vector reserved for it. Locations FFFFFFFOH 
through FFFFFFFFH are reserved for system initiali- 
zation. 


3.4 INTERRUPTS 


Many of the exceptions shown in Table 2-5 and dis- 
cussed in section 2.9 are not applicable to Real 
Mode operation, in particular exceptions 10, 11, 14, 
will not happen in Real Mode. Other exceptions 
have slightly different meanings in Real Mode; Table 
3-1 identifies these exceptions. 


3.5 SHUTDOWN AND HALT 


The HLT instruction stops program execution and 
prevents the processor from using the local bus until 
restarted. Either NMI, INTR with interrupts enabled 
(IF=1), or RESET will force the Intel886 DX out of 
halt. If interrupted, the saved CS:IP will point to the 
next instruction after the HLT. 


Shutdown will occur when a severe error is detected 


that prevents further processing. In Real Mode, 


shutdown can occur under two conditions: 


An interrupt or an exception occur (Exceptions 8 
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Interrupt Descriptor Table (i.e. There is not an in- 
-terrupt handler for the interrupt). 


A CALL, INT or PUSH instruction attempts to wrap 
around the stack segment when SP is not even. 
(e.g. pushing a value on the stack when SP = 
0001 resulting in a stack segment greater tha 
FFFFH) . 


An NMI input can bring the processor out of shut- 
down if the Interrupt Descriptor Table limit is large 
enough to contain the NMI interrupt vector (at least 
0017H) and the stack has enough room to contain 
the vector and flag information (i.e. SP is greater 
than 0005H). Otherwise shutdown can only be exit- 
ed via the RESET input. 


4. PROTECTED MODE 
ARCHITECTURE 


4.1 INTRODUCTION 


The complete capabilities of the Intel886 DX are un- 
locked when the processor operates in Protected 
Virtual Address Mode (Protected Mode). Protected 
Mode vastly increases the linear address space to 
four gigabytes (232 bytes) and allows the running of 
virtual memory programs of almost unlimited size 
(64 terabytes or 246 bytes). In addition Protected 
Mode allows the Intel386 DX to run all of the existing 
8086 and 80286 software, while providing a sophisti- 
cated memory management and a hardware-assist- 
ed protection mechanism. Protected Mode allows 
the use of additional instructions especially opti- 
mized for supporting multitasking operating systems. 
The base architecture of the Intel3886 DX remains 
the same, the registers, instructions, and addressing 
modes described in the previous sections are re- 
tained. The main difference between Protected 
Mode, and Real Mode from a programmer’s view is 
the increased address space, and a different ad- 
dressing mechanism. 


Table 3-1 


or 13) and the interrupt vector is larger than the 
Interrupt 


| Fametion Number 


Related Return 
Instructions Address Location 


Before 
Instruction 


Before 
Instruction 


Interrupt table limit too small INT Vector is not 
within table limit 


CS, DS, ES, FS, GS 13 Word memory reference 
Segment overrun exception beyond offset = FFFFH. 


An attempt to execute 
SS Segment overrun exception 


past the end of CS segment. 
iz Stack Reference Before 
beyond offset = FFFFH Instruction 
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4.2 ADDRESSING MECHANISM 


Like Real Mode, Protected Mode uses two compo- 
nents to form the logical address, a 16-bit selector is 
used to determine the linear base address of a seg- 
ment, the base address is added to a 32-bit effective 
address to form a 32-bit linear address. The linear 
address is then either used as the 32-bit physical 
address, or if paging is enabled the paging mecha- 
nism maps the 32-bit linear address into a 32-bit 
physical address. 


The difference between the two modes lies in calcu- 
lating the base address. In Protected Mode the se- 
lector is used to specify an index into an operating 


48/32 BIT POINTER 


SELECTOR OFFSET 


ACCESS RIGHTS 
LIMIT 
BASE ADDRESS 


SEGMENT 
DESCRIPTOR 


MEMORY OPERAND | 


UP TO 
4GB 


SEGMENT BASE 
ADDRESS 


intel. 
system defined table (see Figure 4-1). The table 
contains the 32-bit base address of a given seg- 


ment. The physical address is formed by adding the 
base address obtained from the table to the offset. 


Paging provides an additional memory management 
mechanism which operates only in Protected Mode. 
Paging provides a means of managing the very large 
segments of the Intel886 DX. As such, paging oper- 
ates beneath segmentation. The paging mechanism 
translates the protected linear address which comes 
from the segmentation unit into a physical address. 
Figure 4-2 shows the complete Intel386 DX address- 
ing mechanism with paging enabled. 


SEGMENT LIMIT 


SELECTED 
SEGMENT 
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Figure 4-1. Protected Mode Addressing 
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Figure 4-2. Paging and Segmentation 
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4.3 SEGMENTATION 


4.3.1 Segmentation Introduction 


Segmentation is one method of memory manage- 
ment. Segmentation provides the basis for protec- 
tion. Segments are used to encapsulate regions of 
memory which have common attributes. For exam- 
ple, all of the code of a given program could be con- 
tained in a segment, or an operating system table 
may reside in a segment. All information about a 
segment is stored in an 8 byte data structure called 
a descriptor. All of the descriptors in a system are 
contained in tables recognized by hardware. 


4.3.2 Terminology 


_ The following terms are used throughout the discus- 
sion of descriptors, privilege levels and protection: 


PL: Privilege Level—One of the four hierarchical 
privilege levels. Level 0 is the most privileged level 
and level 3 is the least privileged. More privileged 
levels are numerically smaller than less privileged 
levels. 


RPL: Requestor Privilege Level—The privilege level 
of the original supplier of the selector. RPL is deter- 
mined by the least two significant bits of a selector. 


DPL: Descriptor Privilege Level—This is the least 
privileged level at which a task may access that de- 
scriptor (and the segment associated with that de- 
scriptor). Descriptor Privilege Level is determined by 
bits 6:5 in the Access Right Byte of a descriptor. 


CPL: Current Privilege Level—The privilege level at 
which a task is currently executing, which equals the 
privilege level of the code segment being executed. 
CPL can also be determined by examining the low- 
est 2 bits of the CS register, except for conforming 
code segments. 


EPL: Effective Privilege Level—The effective privi- 
lege level is the least privileged of the RPL and DPL. 
Since smaller privilege level values indicate greater 
privilege, EPL is the numerical maximum of RPL and 
GFL. 


Task: One instance of the execution of a program. 
Tasks are also referred to as processes. 
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4.3.3 Descriptor Tables 


4.3.3.1 DESCRIPTOR TABLES INTRODUCTION 


The descriptor tables define all of the segments 
which are used in an Intel386 DX system. There are 
three types of tables on the Intel886 DX which hold 
descriptors: the Global Descriptor Table, Local De- 
scriptor Table, and the Interrupt Descriptor Table. All 
of the tables are variable length memory arrays. 
They can range in size between 8 bytes and 64K 
bytes. Each table can hold up to 8192 8 byte de- 
scriptors. The upper 13 bits of a selector are used as 
an index into the descriptor table. The tables have 
registers associated with them which hold the 32-bit 


- linear base address, and the 16-bit limit of each ta- 


ble. 


Each of the tables has a register associated with it 
the GDTR, LDTR, and the IDTR (see Figure 4-3). 
The LGDT, LLDT, and LIDT instructions, load the 
base and limit of the Global, Local, and Interrupt De- 
scriptor Tables, respectively, into the appropriate 
register. The SGDT, SLDT, and SIDT instructions 
store the base and limit values. These tables are 
manipulated by the operating system. Therefore, the 
load descriptor table instructions are privileged in- 
structions. | 


4.3.3.2 GLOBAL DESCRIPTOR TABLE 


The Global Descriptor Table (GDT) contains de- 
scriptors which are possibly available to all of the 
tasks in a system. The GDT can contain any type of 
segment descriptor except for descriptors which are 
used for servicing interrupts (i.e. interrupt and trap 
descriptors). Every Intel886 DX system contains a 
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Figure 4-3. Descriptor Table Registers 
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GDT. Generally the GDT contains code and data 
segments used by the operating systems and task 
state segments, and descriptors for the LDTs ina 
system. 


The first slot of the Global Descriptor Table corre- 
sponds to the null selector and is not used. The null 
selector defines a null pointer value. 


4.3.3.3 LOCAL DESCRIPTOR TABLE 


LDTs contain descriptors which are associated with 
a given task. Generally, operating systems are de- 
signed so that each task has a separate LDT. The 
LDT may contain only code, data, stack, task gate, 
and call gate descriptors. LDTs provide a mecha- 
nism for isolating a given task’s code and data seg- 
ments from the rest of the operating system, while 
the GDT contains descriptors for segments which 
are common to all tasks. A segment cannot be ac- 
cessed by a task if its segment descriptor does not 
exist in either the current LDT or the GDT. This pro- 
vides both isolation and protection for a task’s seg- 
ments, while still allowing global data to be shared 
among tasks. 


Unlike the 6 byte GDT or IDT registers which contain 
a base address and limit, the visible portion of the 
LDT register contains only a 16-bit selector. This se- 
lector refers to a Local Descriptor Table descriptor in 
the GDT. 


4.3.3.4 INTERRUPT DESCRIPTOR TABLE 


The third table needed for Intel3886 DX systems is 
the Interrupt Descriptor Table. (See Figure 4-4.) The 
IDT contains the descriptors which point to the loca- 
tion of up to 256 interrupt service routines. The IDT 


SEGMENT BASE 15. 


Base Address of the segment 

The length of the segment 

Present Bit 1=Present O=Not Present 
Descriptor Privilege Level 0-3 
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may contain only task gates, interrupt gates, and 
trap gates. The IDT should be at least 256 bytes in 
size in order to hold the descriptors for the 32 Intel 
Reserved Interrupts. Every interrupt used by a sys- 
tem must have an entry in the IDT. The IDT entries 
are referenced via INT instructions, external inter- 
rupt vectors, and exceptions. (See 2.9 Interrupts). 
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Figure 4-4. Interrupt Descriptor 
Table Register Use 


4.3.4 Descriptors 
4.3.4.1 DESCRIPTOR ATTRIBUTE BITS 


The object to which the segment selector points to 
is called a descriptor. Descriptors are eight byte 
quantities which contain attributes about a given re- 
gion of linear address space (i.e. a segment). These 
attributes include the 32-bit base linear address of 
the segment, the 20-bit length and granularity of the 
segment, the protection level, read, write or execute 
privileges, the default size of the operands (16-bit or 


BYTE | 
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Segment Descriptor O=System Descriptor 1=Code or Data Segment Descriptor 


Type of Segment 
Accessed Bit 
Granularity Bit 1=Segment length is page granular 


NOTE: 


0= Segment length is byte granular 
Default Operation Size (recognized in code segment descriptors only) 1=32-bit segment 0O= 16-bit segment 
Bit must be zero (0) for compatibility with future processors 

AVL Available field for user or OS 


In a maximum-size segment (ie. a segment with G=1 and segment limit 19...0= FFFFFH), the lowest 12 bits of the 
segment base should be zero (ie. segment base 11...000 =000H). 


Figure 4-5. Segment Descriptors 
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32-bit), and the type of segment. All of the attribute 
information about a segment is contained in 12 bits 
in the segment descriptor. Figure 4-5 shows the gen- 
eral format of a descriptor. All segments on the In- 
tel386 DX have three attribute fields in common: the 
P bit, the DPL bit, and the S bit. The Present P bit is 
1 if the segment is loaded in physical memory, if 
P=0 then any attempt to access this segment caus- 
es a not present exception (exception 11). The De- 
scriptor Privilege Level DPL is a two-bit field which 
specifies the protection level 0-3 associated with a 
segment. 


The Intel886 DX has two main categories of seg- 
ments system segments and non-system segments 


SEGMENT BASE 15. 


24 |G" O/B 


BASE 31. 


D/B 1=Default Instructions Attributes are 32-Bits 
0 = Default Instruction Attributes are 16-Bits 
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NOTE: 
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(for code and data). The segment S bit in the seg- 
ment descriptor determines if a given segment is a_ 
system segment or a code or data segment. If the S 
bit is 1 then the segment is either a code or data 
segment, if it is 0 then the segment is a system seg- 
ment. 


4.3.4.2 Intel386™ DX CODE, DATA 
DESCRIPTORS (S= 1) 


Figure 4-6 shows the general format of a code and 
data descriptor and Table 4-1 illustrates how the bits 
in the Access Rights Byte are interpreted. 


ACCESS 
RIGHTS 
BYTE 
G Granularity Bit 1=Segment length is page granular 


0= Segment length is byte granular 
Bit must be zero (0) for compatibility with future processors 


In a maximum-size segment (ie. a segment with G=1 and segment limit 19...0=FFFFFH), the lowest 12 bits of the 
segment base should be zero (ie. segment base 11...000 =000H). 


Figure 4-6. Segment Descriptors 


Table 4-1. Access Rights Byte Definition for Code and Data Descriptions 


Present (P) Segment is mapped into physical memory. 
No mapping to physical memory exits, base and limit are not 
used. 
Descriptor Privilege Segment privilege attribute used in privilege tests. 
Level (DPL) 
Segment Descrip- Code or Data (includes stacks) segment descriptor 
tor (S) System Segment Descriptor or Gate Descriptor 
Executable (E) Descriptor type is data segment: 
Expansion Direc- Expand up segment, offsets must be < limit. 
tion (ED) Expand down segment, offsets must be > limit. 
Writeable (W) Data segment may not be written into. 
Type Data segment may be written into. 
Field Executable (E) Descriptor type is code segment: 
Definition 


Conforming (C) 


Readable (R) 


Accessed (A) 


Code segment may only be executed when Code 
CPL => DPL and CPL remains unchanged. | 
Code segment may not be read. (S = 
Code segment may be read. 


Segment 


E = 1) 


Segment has not been accessed. 


Segment selector has been loaded into segment register or 
used by selector test instructions. 
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Code and data segments have several descriptor 
fields in common. The accessed A bit is set whenev- 
er the processor accesses a descriptor. The A bit is 
used by operating systems to keep usage statistics 
on a given segment. The G bit, or granularity bit, 
specifies if a segment length is byte-granular or 
page-granular. Intel3886 DX segments can be one 
megabyte long with byte granularity (G=0) or four 
gigabytes with page granularity (G=1), (i.e., 220 
pages each page is 4K bytes in length). The granu- 
larity is totally unrelated to paging. An Intel886 DX 
system can consist of segments with byte granulari- 
ty, and page granularity, whether or not paging is 
enabled. 


The executable E bit tells if a segment is a code or 
data segment. A code segment (E= 1, S= 1) may be 
execute-only or execute/read as determined by the 
Read R bit. Code segments are execute only if 
R=0, and execute/read if R=1. Code segments 
may never be written into. 


NOTE: 
Code segments may be modified via aliases. Alias- 
es are writeable data segments which occupy the 
same range of linear address space as the code 
segment. 


The D bit indicates the default length for operands 
and effective addresses. If D=1 then 32-bit oper- 
ands and 32-bit addressing modes are assumed. If 
D=0 then 16-bit operands and 16-bit addressing 
modes are assumed. Therefore all existing 80286 
code segments will execute on the Intel386 DX as- 
suming the D bit is set 0. 


Another attribute of code segments is determined by 
the conforming C bit. Conforming segments, C= 1, 
can be executed and shared by programs at differ- 
ent privilege levels. (See section 4.4 Protection.) 
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Segments identified as data segments (E=0, S= 1) 
are used for two types of Intel886 DX segments: 
stack and data segments. The expansion direction 
(ED) bit specifies if a segment expands downward 
(stack) or upward (data). If a segment is a stack seg- 
ment all offsets must be greater than the segment 
limit. On a data segment all offsets must be less 
than or equal to the limit. In other words, stack seg- 
ments start at the base linear address plus the maxi- 
mum segment limit and grow down to the base linear 
address plus the limit. On the other hand, data seg- 
ments start at the base linear address and expand to 
the base linear address plus limit. 


The write W bit controls the ability to write into a 
segment. Data segments are read-only if W=0. The 
stack segment must have W= 1. 


The B bit controls the size of the stack pointer regis- 
ter. If B= 1, then PUSHes, POPs, and CALLs all use 
the 32-bit ESP register for stack references and as- 
sume an upper limit of FFFFFFFFH. lf B=0, stack 
instructions all use the 16-bit SP register and as- 
sume an upper limit of FFFFH. 


4.3.4.3 SYSTEM DESCRIPTOR FORMATS 


System segments describe information about oper- 
ating system tables, tasks, and gates. Figure 4-7 
shows the general format of system segment de- 
scriptors, and the various types of system segments. 
Intel8386 DX system descriptors contain a 32-bit 
base linear address and a 20-bit segment limit. 
80286 system descriptors have a 24-bit base ad- 
dress and a 16-bit segment limit. 80286 system de- 
scriptors are identified by the upper 16 bits being all 
zero. 
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Figure 4-7. System Segments Descriptors 
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4.3.4.4 LDT DESCRIPTORS (S=0, TYPE = 2) 


LDT descriptors (S=0 TYPE= 2) contain informa- 
tion about Local Descriptor Tables. LDTs contain a 
table of segment descriptors, unique to a particular 
task. Since the instruction to load the LDTR is only 
available at privilege level 0, the DPL field is ignored. 
LDT descriptors are only allowed in the Global De- 
scriptor Table (GDT). 


4.3.4.5 TSS DESCRIPTORS (S=0, 
TYPE = 1, 3, 9, B) 


A Task State Segment (TSS) descriptor contains in- 
formation about the location, size, and privilege level 
of a Task State Segment (TSS). A TSS in turn is a 
special fixed format segment which contains all the 
state information for a task and a linkage field to 
permit nesting tasks. The TYPE field is used to indi- 
cate whether the task is currently BUSY (i.e. on a 
chain of active tasks) or the TSS is available. The 
TYPE field also indicates if the segment contains a 
80286 or an Intel386 DX TSS. The Task Register 
(TR) contains the selector which points to the cur- 
rent Task State Segment. 


4.3.4.6 GATE DESCRIPTORS (S=0, 
TYPE = 4-7, C, F) 


Gates are used to control access to entry points 
within the target code segment. The various types of 
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gate descriptors are call gates, task gates, inter- 
rupt gates, and trap gates. Gates provide a level of 
indirection between the source and destination of 
the control transfer. This indirection allows the proc- 
essor to automatically perform protection checks. It 
also allows system designers to control entry points 
to the operating system. Call gates are used to 
change privilege levels (see section 4.4 Protection), 
task gates are used to perform a task switch, and 
interrupt and trap gates are used to specify interrupt 
service routines. 


Figure 4-8 shows the format of the four types of gate 
descriptors. Call gates are primarily used to transfer 


program control to a more privileged level. The call . 


gate descriptor consists of three fields: the access 
byte, a long pointer (selector and offset) which 
points to the start of a routine and a word count 
which specifies how many parameters are to be cop- 
ied from the caller’s stack to the stack of the called 
routine. The word count field is only used by call 
gates when there is a change in the privilege level, 
other types of gates ignore the word count field. 


Interrupt and trap gates use the destination selector 
and destination offset fields of the gate descriptor as 


a pointer to the start of the interrupt or trap handler » 


routines. The difference between interrupt gates and 
trap gates is that the interrupt gate disables inter- 
rupts (resets the IF bit) while the trap gate does not. 


OFFSET 15. 


WORD 
OFFSET 31. TYPE ees +4 


Gate Descriptor Fields 


< 
2 
e 
® 


80286 call gate 


80286 interrupt gate 
80286 trap gate 


Description 


Task gate (for 80286 or Intel386™ DX task) 


1 


Intel386™ DX call gate 
Intel386™ DX interrupt gate 
Intel386™ DX trap gate 
Descriptor contents are not valid 
Descriptor contents are valid 


P 


4 
5 
6 
7 
Cc 
E 
F 
0 
1 


DPL—least privileged level at which a task may access the gate. WORD COUNT 0-31—the number of parameters to copy from caller's stack 
to the called procedure’s stack. The parameters are 32-bit quantities for Intel386™ DX gates, and 16-bit quantities for 80286 gates. 


DESTINATION 16-bit Selector to the target code segment 
SELECTOR selector or 
Selector to the target task state segment for task gate 


DESTINATION 
OFFSET 


offset Entry point within the target code segment 
16-bit 80286 


32-bit Intel386™ DX 


Figure 4-8. Gate Descriptor Formats 
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_ Task gates are used to switch tasks. Task gates 
may only refer to a task state segment (see section 
4.4.6 Task Switching) therefore only the destination 
selector portion of a task gate descriptor is used, 
and the destination offset is ignored. 


Exception 13 is generated when a destination selec- 
tor does not refer to a correct descriptor type, i.e., a 
~ code segment for an interrupt, trap or call gate, a 
TSS for a task gate. 


The access byte format is the same for all gate de- 
scriptors. P=1 indicates that the gate contents are 
valid. P=0 indicates the contents are not valid and 
Causes exception 11 if referenced. DPL is the de- 
scriptor privilege level and specifies when this de- 
scriptor may be used by a task (see section 4.4 Pro- 
tection). The S field, bit 4 of the access rights byte, 
must be 0 to indicate a system control descriptor. 
The type field specifies the descriptor type as indi- 
cated in Figure 4-8. 


4.3.4.7 DIFFERENCES BETWEEN Intel386™ DX 
AND 80286 DESCRIPTORS 


In order to provide operating system compatibility 
between the 80286 and Intel386 DX, the Intel386 
DX supports all of the 80286 segment descriptors. 
Figure 4-9 shows the general format of an 80286 
system segment descriptor. The only differences be- 
tween 80286 and Intel386 DX descriptor formats are 
that the values of the type fields, and the limit and 
base address fields have been expanded for the In- 
tel886 DX. The 80286 system segment descriptors 
contained a 24-bit base address and 16-bit limit, 
while the Intel886 DX system segment descriptors 
have a 32-bit base address, a 20-bit limit field, and a 
granularity bit. 


By supporting 80286 system segments the Intel386 
DX is able to execute 80286 application programs 
on an Intel386 DX operating system. This is possible 
because the processor automatically understands 
which descriptors are 80286-style descriptors and 
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which descriptors are Intel386 DX-style descriptors. 
In particular, if the upper word of a descriptor is zero, 
then that descriptor is a 80286-style descriptor. 


The only other differences between 80286-style de- 
scriptors and Intel386 DX descriptors is the interpre- 
tation of the word count field of call gates and the B 
bit. The word count field specifies the number of 
16-bit quantities to copy for 80286 call gates and 
32-bit quantities for Intel386 DX call gates. The B bit 
controls the size of PUSHes when using a call gate; 
if B=O PUSHes are 16 bits, if B= 1 PUSHes are 32 
bits. 


4.3.4.8 SELECTOR FIELDS 


A selector in Protected Mode has three fields: Local 
or Global Descriptor Table Indicator (Tl), Descriptor 
Entry Index (Index), and Requestor (the selector’s) 
Privilege Level (RPL) as shown in Figure 4-10. The 
Tl bits select one of two memory-based tables of 
descriptors (the Global Descriptor Table or the Local 
Descriptor Table). The Index selects one of 8K de- 
scriptors in the appropriate descriptor table. The 
RPL bits allow high speed testing of the selector’s 
privilege attributes. 


4.3.4.9 SEGMENT DESCRIPTOR CACHE 


In addition to the selector value, every segment reg- 
ister has a segment descriptor cache register asso- 
ciated with it. Whenever a segment register’s con- 
tents are changed, the 8-byte descriptor associated 
with that selector is automatically loaded (cached) 
on the chip. Once loaded, all references to that seg- 
ment use the cached descriptor information instead 
of reaccessing the descriptor. The contents of the 
descriptor cache are not visible to the programmer. 
Since descriptor caches only change when a seg- 
ment register is changed, programs which modify 
the descriptor tables must reload the appropriate 
segment registers after changing a descriptor’s 
value. 


SEGMENT BASE 15. SEGMENT LIMIT 15. 


Intel Reserved ee 
ry 


Base Address of the segment 
The length of the segment 
Present Bit 1=Present O=Not Present 


Descriptor Privilege Level 0-3 
System Descriptor O=System 1=User 


Aan Type of Segment 


Figure 4-9. 80286 Code and Data Segment Descriptors 
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SELECTOR 


SEGMENT 
REGISTER 


TABLE 
INDICATOR 


DESCRIPTOR 
NUMBER 


LOCAL GLOBAL 
DESCRIPTOR DESCRIPTOR 
TABLE TABLE 


Figure 4-10. Example Descriptor Selection 


231630-59 
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4.3.4.10 SEGMENT DESCRIPTOR REGISTER 
SETTINGS 


The contents of the segment descriptor cache vary 
depending on the mode the Intel386 DX is operating 
in. When operating in Real Address Mode, the seg- 
ment base, limit, and other attributes within the seg- 
ment cache registers are defined as shown in Figure 
4-11. 


SEGMENT 


32 - BIT BASE 


(UPDATED DURING SELECTOR 
LOAD INTO SEGMENT REGISTER) 


CONFORMING PRIVILEGE 
STACK SIZE 
EXECUTABLE 
WRITEABLE 

READABLE 

EXPANSION DIRECTION 
GRANULARITY 
ACCESSED 

PRIVILEGE LEVEL 


= “ 

intel. 
For compatiblity with the 8086 architecture, the base 
is set to sixteen times the current selector value, the 
limit is fixed at OOOOFFFFH, and the attributes are 
fixed so as to indicate the segment is present and 
fully usable. In Real Address Mode, the internal 
“privilege level’ is always fixed to the highest level, 


level 0, so I/O and other privileged opcodes may be 
executed. 


DESCRIPTOR CACHE REGISTER CONTENTS 
32 = BIT LIMIT 


OTHER ATTRIBUTES 


(FIXED) (FIXED) 


16X CURRENT ES SELECTOR OOOOFFFFH /|Y 
16X CURRENT FS SELECTOR OOOOFFFFH |Y 


16X CURRENT GS SELECTOR 
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*Except the 32-bit CS base is initialized to FFFFFOOOH after reset until first intersegment control transfer (e.g. intersegment CALL, or 


intersegment JMP, or INT). (See Figure 4-13 Example.) 
Key: yes 

no 

privilege level 0 

privilege level 1 

privilege level 2 

privilege level 3 

expand up 


expand down 

byte granularity 

page granularity 

push/pop 16-bit words 

= push/pop 32-bit dwords 

= does not apply to that segment cache register 


Hou te tl 


Figure 4-11. Segment Descriptor Caches for Real Address Mode 
(Segment Limit and Attributes are Fixed) 
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When operating in Protected Mode, the segment 


base, limit, and other attributes within the segment 
cache registers are defined as shown in Figure 4-12. 
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according to the contents of the segment descriptor 
indexed by the selector value loaded into the seg- 
ment register. 


In Protected Mode, each of these fields are defined 


SEGMENT 
32 = BIT BASE 


(UPDATED DURING 
SELECTOR LOAD INTO 
SEGMENT REGISTER) 


CONFORMING PRIVILEGE 
STACK SIZE 
EXECUTABLE 
WRITEABLE 

READABLE 

EXPANSION DIRECTION 
GRANULARITY 
ACCESSED 

PRIVILEGE LEVEL 


DESCRIPTOR CACHE REGISTER CONTENTS 


32 = BIT LIMIT 


(UPDATED DURING 
SELECTOR LOAD INTO 
SEGMENT REGISTER) 


OTHER ATTRIBUTES 


(UPDATED DURING 
SELECTOR LOAD INTO 
SEGMENT REGISTER) 


LIMIT PER SEG DESCR 


BASE PER SEG DESCR LIMIT PER SEG DESCR 
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Y = fixed yes 

N = fixed no 

d = per segment descriptor 

p = per segment descriptor; descriptor must indicate ‘‘present” to avoid exception 11 
(exception 12 in case of SS) 

r = per segment descriptor, but descriptor must indicate “readable” to avoid exception 13 
(special case for SS) 

w = per segment descriptor, but descriptor must indicate “writable” to avoid exception 13 
(special case for SS) 

- = does not apply to that segment cache register 


Figure 4-12. Segment Descriptor Caches for Protected Mode (Loaded per Descriptor) 
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When operating in a Virtual 8086 Mode within the OOOOFFFFH, and the attributes are fixed so as to 


Protected Mode, the segment base, limit, and other indicate the segment is present and fully usable. The 
attributes within the segment cache registers are de- virtual program executes at lowest privilege level, 
fined as shown in Figure 4-13. For compatibility with level 3, to allow-trapping of all |OPL-sensitive in- 


the 8086 architecture, the base is set to sixteen structions and level-0-only instructions. 
times the current selector value, the limit is fixed at | 


SEGMENT DESCRIPTOR CACHE REGISTER CONTENTS 
32 - BIT BASE 32 = BIT LIMIT OTHER ATTRIBUTES 


(UPDATED DURING SELECTOR (FIXED) (FIXED) 
LOAD INTO SEGMENT REGISTER) 


CONFORMING PRIVILEGE 
STACK SIZE 
EXECUTABLE 
WRITEABLE 

READABLE 

EXPANSION DIRECTION 
GRANULARITY 
ACCESSED 

PRIVILEGE LEVEL 


231630-62 


expand down 

byte granularity 

page granularity 

push/pop 16-bit words 

push/pop 32-bit dwords 

does not apply to that segment cache register 


privilege level 0 
privilege level 1 
privilege level 2 
privilege level 3 
expand up 


Figure 4-13. Segment Descriptor Caches for Virtual 8086 Mode within Protected Mode 
(Segment Limit and Attributes are Fixed) . 
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4.4 PROTECTION 


4.4.1 Protection Concepts 


APPLICATIONS 
CPU 
ENFORCED 
SOFTWARE 


INTERFACES OS EXTENSIONS 


HIGH SPEED 
OPERATING 
SYSTEM 
INTERFACE 


231630-63 


Figure 4-14. Four-Level Hierachical Protection 


The Intel386 DX has four levels of protection which 
are optimized to support the needs of a multi-tasking 
operating system to isolate and protect user pro- 
grams from each other and the operating system. 
The privilege levels control the use of privileged in- 
structions, |/O instructions, and access to segments 
and segment descriptors. Unlike traditional micro- 
processor-based systems where this protection is 
achieved only through the use of complex external 
hardware and software the Intel386 DX provides the 
protection as part of its integrated Memory Manage- 
ment Unit. The Intel386 DX offers an additional type 
of protection on a page basis, when paging is en- 
abled (See section 4.5.3 Page Level Protection). 


The four-level hierarchical privilege system is illus- 
trated in Figure 4-14. It is an extension of the user/ 
supervisor privilege mode commonly used by mini- 
computers and, in fact, the user/supervisor mode is 
fully supported by the Intel886 DX paging mecha- 
nism. The privilege levels (PL) are numbered 0 
through 3. Level 0 is the most privileged or trusted 
level. 


4.4.2 Rules of Privilege 


The Intel386 DX controls access to both data and 
procedures between levels of a task, according to 
the following rules. 


e Data stored in a segment with privilege level p can 
be accessed only by code executing at a privilege 
level at least as privileged as p. 


e A code segment/procedure with privilege level p 
can only be called by a task executing at the same 
or a lesser privilege level than p. 
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4.4.3 Privilege Levels 


4.4.3.1 TASK PRIVILEGE 


At any point in time, a task on the Intel386 DX al- 
ways executes at one of the four privilege levels. 
The Current Privilege Level (CPL) specifies the 
task’s privilege level. A task’s CPL may only be 
changed by control transfers through gate descrip- 
tors to a code segment with a different privilege lev- 
el. (See section 4.4.4 Privilege Level Transfers) 
Thus, an application program running at PL = 3 may 
call an operating system routine at PL = 1 (viaa 
gate) which would cause the task’s CPL to be set to 
1 until the operating system routine was finished. 


4.4.3.2 SELECTOR PRIVILEGE (RPL) 


The privilege level of a selector is specified by the 
RPL field. The RPL is the two least significant bits of 
the selector. The selector’s RPL is only used to es- 
tablish a less trusted privilege level than the current 
privilege level for the use of a segment. This level is 
called the task’s effective privilege level (EPL). The 
EPL is defined as being the least privileged (i.e. nu- 
merically larger) level of a task’s CPL and a selec- 
tor’s RPL. Thus, if selector’s RPL = 0 then the CPL 
always specifies the privilege level for making an ac- 
cess using the selector. On the other hand if RPL = 
3 then a selector can only access segments at level 
3 regardless of the task’s CPL. The RPL is most 
commonly used to verify that pointers passed to an 
operating system procedure do not access data that 
is of higher privilege than the procedure that origi- 
nated the pointer. Since the originator of a selector 
can specify any RPL value, the Adjust RPL (ARPL) 
instruction is provided to force the RPL bits to the 
originator’s CPL. 


4.4.3.3 1/O PRIVILEGE AND I/O PERMISSION 
BITMAP 


The |/O privilege level (IOPL, a 2-bit field in the 
EFLAG register) defines the least privileged level at 
which |/O instructions can be unconditionally per- 
formed. |/O instructions can be unconditionally per- 
formed when CPL < IOPL. (The I/O instructions are 
IN, OUT, INS, OUTS, REP INS, and REP OUTS.) 
When CPL > IOPL, and the current task is associat- 
ed with a 286 TSS, attempted I/O instructions cause 
an exception 13 fault. When CPL > IOPL, and the 
current task is associated with an Intel386 DX TSS, 
the I/O Permission Bitmap (part of an Intel3886 DX 
TSS) is consulted on whether I/O to the port is al- 
lowed, or an exception 13 fault is to be generated 
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instead. For diagrams of the |/O Permission Bitmap, 
refer to Figures 4-15a and 4-15b. For further infor- 
mation on how the I/O Permission Bitmap is used in 
Protected Mode or in Virtual 8086 Mode, refer to 
section 4.6.4 Protection and I/O Permission Bitmap. 


The I/O privilege level (IOPL) also affects whether 
several other instructions can be executed or cause 
an exception 13 fault instead. These instructions are 
called ‘“IOPL-sensitive” instructions and they are 
CLI and STI. (Note that the LOCK prefix is not |OPL- 
sensitive on the Intel386 DX.) 


The IOPL also affects whether the IF (interrupts en- 
able flag) bit can be changed by loading a value into 
the EFLAGS register. When CPL < IOPL, then the 
IF bit can be changed by loading a new value into 
the EFLAGS register. When CPL > IOPL, the IF bit 
cannot be changed by a new value POP’ed into (or 
otherwise loaded into) the EFLAGS register; the IF 
bit merely remains unchanged and no exception is 
generated. 


Table 4-2. Pointer Test Instructions 


Instruction|Operands| Function 


Selector, | Adjust Requested Privi- 

Register |lege Level: adjusts the 
RPL of the selector to the 
numeric maximum of 
current selector RPL value 
and the RPL value in the 
register. Set zero flag if. 
selector RPL was 
changed. 


VERify for Read: sets the 
zero flag if the segment 
referred to by the selector 
can be read. 


VERify for Write: sets the 
zero flag if the segment 
referred to by the selector 
can be written. 


Selector 


Selector 


Register, 
Selector 


Load Segment Limit: reads 
the segment limit into the 
register if privilege rules 
and descriptor type allow. 
Set zero flag if successful. 


Load Access Rights: reads 
the descriptor access 
rights byte into the register 
if privilege rules allow. Set 
zero flag if successful. 
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The Intel886 DX provides several instructions to 
speed pointer testing and help maintain system in- 
tegrity by verifying that the selector value refers to” 
an appropriate segment. Table 4-2 summarizes the 
selector validation procedures available for the In- 
tel386 DX. 


4.4.3.4 PRIVILEGE VALIDATION 


This pointer verification prevents the common prob- 
lem of an application at PL = 3 calling a operating 
systems routine at PL = O and passing the operat- 
ing system routine a “bad”’ pointer which corrupts a 
data structure belonging to the operating system. If 
the operating system routine uses the ARPL instruc- 
tion to ensure that the RPL of the selector has no 
greater privilege than that of the caller, then this 
problem can be avoided. 


4.4.3.5 DESCRIPTOR ACCESS 


There are basically two types of segment accesses: 
those involving code segments such as control 
transfers, and those involving data accesses. Deter- 
mining the ability of a task to access a segment in- 
volves the type of segment to be accessed, the in- 
struction used, the type of descriptor used and CPL, 
RPL, and DPL as described above. 


Any time an instruction loads data segment registers 
(DS, ES, FS, GS) the Intel386 DX makes protection 
validation checks. Selectors loaded in the DS, ES, 
FS, GS registers must refer only to data segments or 
readable code segments. The data access rules are 
specified in section 4.2.2 Rules of Privilege. The 
only exception to those rules is readable conforming 
code segments which can be accessed at any privi- 
lege level. 


Finally the privilege validation checks are performed. 
The CPL is compared to the EPL and if the EPL is 
more privileged than the CPL an exception 13 (gen- 
eral protection fault) is generated. 


The rules regarding the stack segment are slightly 
different than those involving data segments. In- 
structions that load selectors into SS must refer to 
data segment descriptors for writeable data seg- 
ments. The DPL and RPL must equal the CPL. All 
other descriptor types or a privilege level violation 
will cause exception 13. A stack not present fault 
causes exception 12. Note that an exception 11 is 
used for a not-present code or data segment. 


4.4.4 Privilege Level Transfers 


Inter-segment control transfers occur when a selec- 
tor is loaded in the CS register. For a typical system 
most of these transfers are simply the result of a call 
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Table 4-3. Descriptor Types Used for Control Transfer 
Descriptor 


Descriptor 
Operation Types inter oneal 


JMP, CALL, RET, IRET* | Code Segment | GDT/LDT 
CALL Call Gate GDT/LDT 


Interrupt Instruction, inne 


Intersegment to the same or higher privilege level 
Interrupt within task may change CPL 


Trap or 


Exception, External 
Interrupt 


Interrupt 
Gate 


RET, IRET* Code Segment | GDT/LDT 
CALL, JMP Task State 
Segment 


CALL, JMP GDT/LDT 


Task Switch 


*NT (Nested Task bit of flag register) = 0 
**NT (Nested Task bit of flag register) = 1 


or a jump to another routine. There are five types of 
control transfers which are summarized in Table 4-3. 
Many of these transfers result in a privilege level 
transfer. Changing privilege levels is done only via 
control transfers, by using gates, task switches, and 
interrupt or trap gates. : 


Control transfers can only occur if the operation 
which loaded the selector references the correct de- 
scriptor type. Any violation of these descriptor usage 


rules will cause an exception 13 (e.g. JMP through a 


call gate, or IRET from a normal subroutine call). 


In order to provide further system security, all control 
transfers are also subject to the privilege rules. 


The privilege rules require that: 


— Privilege level transitions can only occur via 
gates. 


— JMPs can be made to a non-conforming code 
segment with the same privilege or to a conform- 
ing code segment with greater or equal privilege. 


— CALLs can be made to a non-conforming code 
segment with the same privilege or via a gate toa 
more privileged level. 


— Interrupts handled within the task obey the same 
privilege rules as CALLs. 


— Conforming Code segments are accessible by 
privilege levels which are the same or less privi- 
leged than the conforming-code segment’s DPL. 


— Both the requested privilege level (RPL) in the 
selector pointing to the gate and the task’s CPL 


IDT 
GDT 
IRET** Task Gate 


Interrupt Instruction, 
Exception, External 
Interrupt ° 
must be of equal or greater privilege than the 
gate’s DPL. 
— The code segment selected in the gate must be 
the same or more privileged than the task’s CPL. 


— Return instructions that do not switch tasks can 
only return control to a code segment with same 
or less privilege. 


— Task switches can be performed by a CALL, 
JMP, or INT which references either a task gate 
or task state segment who’s DPL is less privi- 
leged or the same privilege as the old task’s CPL. 


Any control transfer that changes CPL within a task 
causes a change of stacks as a result of the privi- 
lege level change. The initial values of SS:ESP for 
privilege levels 0, 1, and 2 are retained in the task 
state segment (see section 4.4.6 Task Switching). 
During a JMP or CALL control transfer, the new 
stack pointer is loaded into the SS and ESP regis- 
ters and the previous stack pointer is pushed onto 
the new stack. 


When RETurning to the original privilege level, use 
of the lower-privileged stack is restored as part of 
the RET or IRET instruction operation. For subrou- 
tine calls that pass parameters on the stack and 
cross privilege levels, a fixed number of words, (as 
specified in the gate’s word count field) are copied 
from the previous stack to the current stack. The 
inter-segment RET instruction with a stack adjust- 
ment value will correctly restore the previous stack 
pointer upon return. 
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0000000000000000 


0000000000000000 


STACKS 


0000000000000000 


0000000000000000 


0000000000000000 
0000000000000000 
0000000000000000 
0000000000000000 
0000000000000000 
0000000000000000 
0000000000000000 
BIT_MAP_OFFSET( 15:0) 
AVAILABLE 


rc 
o 
4 


0000000000000000 


SYSTEM STATUS, ETC. 
IN intei386™ px CPU TSS 


NOTE: BIT_MAP_OFFSET 
BIT_.MAP__OFFSET 


must be < DFFFH OFFSET + C . 


OFFSET + 10 


1/0 PERMISSION BITMAP 

(ONE BIT PER BYTE 1/0 OFFSET + 1FEC 
PORT. BITMAP MAY BE 

Ret = TRLMICATED USI TSS LAT.) [emma OFFSET * 1FFO 


TASK REGISTER OFFSET + 1FF4 


65472 | OFFSET + 1FF8 
| seuscron | 
OFFSET + 1FFC 


L__"rrH” | oFFset + 2000 


‘TSS LIMIT = OFFSET # 2000H 
intei386™ px CPU TSS DESCRIPTOR (IN GDT) 0 


SEGMENT BASE 15...0 SEGMENT LIMIT 15..0 


LIMIT BASE 
Lsose 31.24 fo] spol sss Pome] ree | ate 


= 9: Available Intel386™ DX TSS, , 231630-64 
= B: Busy Intel386™ DX TSS 


Figure 4-15a. Intel386™ DX TSS and TSS Registers 
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Figure 4-15b. Sample I/O Permission Bit Map 


4.4.5 Call Gates 


Gates provide protected, indirect CALLs. One of the 
major uses of gates is to provide a secure method of 
privilege transfers within a task. Since the operating 
system defines all of the gates in a system, it can 
ensure that all gates only allow entry into a few trust- 
ed procedures (such as those which allocate memo- 
ry, or perform I/O). 


Gate descriptors follow the data access rules of priv- 
ilege; that is, gates can be accessed by a task if the 
EPL, is equal to or more privileged than the gate 
descriptor’s DPL. Gates follow the control transfer 
rules of privilege and therefore may only transfer 
control to a more privileged level. 


Call Gates are accessed via a CALL instruction and 
are syntactically identical to calling a normal subrou- 
tine. When an inter-level Intel386 DX call gate is ac- 
tivated, the following actions occur. 


1. Load CS:EIP from gate check for validity 
2. SS is pushed zero-extended to 32 bits 
3. ESP is pushed 


4. Copy Word Count 32-bit parameters from the 
old stack to the new stack 


5. Push Return address on stack 


The procedure is identical for 80286 Call gates, ex- 
cept that 16-bit parameters are copied and 16-bit 
registers are pushed. 


Interrupt Gates and Trap gates work in a similar 
fashion as the call gates, except there is no copying 
of parameters. The only difference between Trap 
and Interrupt gates is that control transfers through 
an Interrupt gate disable further interrupts (i.e. the IF 
bit is set to 0), and Trap gates leave the interrupt 
status unchanged. 


4.4.6 Task Switching 


A very important attribute of any multi-tasking/multi- 
user operating systems is its ability to rapidly switch 
between tasks or processes. The Intel386 DX direct- 
ly supports this operation by providing a task switch 
instruction in hardware. The Intel386 DX task switch 
operation saves the entire state of the machine 


(all of the registers, address space, and a link to the 
previous task), loads a new execution state, per- 
forms protection checks, and commences execution 
in the new task, in about 17 microseconds. Like 
transfer of control via gates, the task switch opera- 
tion is invoked by executing an inter-segment JMP 
or CALL instruction which refers to a Task State 
Segment (TSS), or a task gate descriptor in the GDT 
or LDT. An INT n instruction, exception, trap, or ex- 
ternal interrupt may also invoke the task switch op- 
eration if there is a task gate descriptor in the asso- 
ciated IDT descriptor slot. 


The TSS descriptor points to a segment (see Figure 
4-15) containing the entire Intel886 DX execution 
state while a task gate descriptor contains a TSS 
selector. The Intel886 DX supports both 80286 and 
Intel386 DX style TSSs. Figure 4-16 shows a 80286 
TSS. The limit of an Intel886 DX TSS must be great- 
er than 0064H (002BH for a 80286 TSS), and can be 
as large as 4 Gigabytes. In the additional TSS 
space, the operating system is free to store addition- 
al information such as the reason the task is inac- 
tive, time the task has spent running, and open files 
belong to the task. 


Each task must have a TSS associated with it. The 
current TSS is identified by a special register in the 
Intel386 DX called the Task State Segment Register 
(TR). This register contains a selector referring to 
the task state segment descriptor that defines the 
current TSS. A hidden base and limit register associ- 
ated with TR are loaded whenever TR is loaded with 
a new selector. Returning from a task is accom- 
plished by the IRET instruction. When IRET is exe- 
cuted, control is returned to the task which was in- 
terrupted. The current executing task’s state is 
saved in the TSS and the old task state is restored 
from its TSS. 


Several bits in the flag register and machine status 
word (CRO) give information about the state of a 
task which are useful to the operating system. The 
Nested Task (NT) (bit 14 in EFLAGS) controls the 
function of the IRET instruction. If NT = 0, the IRET 
instruction performs the regular return; when NT = 
1, IRET performs a task switch operation back to the 
previous task. The NT bit is set or reset in the follow- 
ing fashion: 
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Figure 4-16. 80286 TSS 


When a CALL or INT instruction initiates a task 


switch, the new TSS will be marked busy and the . 


back link field of the new TSS set to the old TSS 
selector. The NT bit of the new task is set by CALL 
or INT initiated task switches. An interrupt that does 
not cause a task switch will clear NT. (The NT bit will 
be restored after execution of the interrupt handler) 
NT may also be set or cleared by POPF or IRET 
instructions. 


The Intel386 DX task state segment is marked busy 
by changing the descriptor type field from TYPE 9H 
to TYPE BH. An 80286 TSS is marked busy by 
changing the descriptor type field from TYPE 1 to 
TYPE 3. Use of a selector that references a busy 
task state segment causes an exception 13. 


The Virtual Mode (VM) bit 17 is used to indicate if a 
task, is a virtual 8086 task. If VM = 1, then the tasks 
will use the Real Mode addressing mechanism. The 
virtual 8086 environment is only entered and exited 
via a task switch (see section 4.6 Virtual Mode). 


The coprocessor’s state is not automatically saved 
when a task switch occurs, because the incoming 
task may not use the coprocessor. The Task 
Switched (TS) Bit (bit 3 in the CRO) helps deal with 
the coprocessor’s state in a multi-tasking environ- 
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ment. Whenever the Intel386 DX switches tasks, it 
sets the TS bit. The Intel386 DX detects the first use 
of a processor extension instruction after a task 
switch and causes the processor extension not 
available exception 7. The exception handler for ex- 
ception 7 may then decide whether to save the state 
of the coprocessor. A processor extension not pres- 
ent exception (7) will occur when attempting to exe- 
cute an ESC or WAIT instruction if the Task 
Switched and Monitor coprocessor extension bits 
are both set (i.e. TS = 1 and MP = 1). 


The T bit in the Intel386 DX TSS indicates that the 
processor should generate a debug exception when 
switching to a task. If T = 1 then upon entry to a 
new task a debug exception 1 will be generated. 


4.4.7 Initialization and Transition to | 
Protected Mode 


Since the Intel386 DX begins executing in Real 
Mode immediately after RESET it is necessary to 
initialize the system tables and registers with the ap- 
propriate values. 


The GDT and IDT registers must refer to a valid GDT 
and IDT. The IDT should be at least 256 bytes long, 
and GDT must contain descriptors for the initial 
code, and data segments. Figure 4-17 shows the 
tables and Figure 4-18 the descriptors needed for a 
simple Protected Mode Intel386 DX system. It has a 
single code and single data/stack segment each 
four gigabytes long and a single privilege level PL = 
0. 


The actual method of enabling Protected Mode is to 
load CRO with the PE bit set, via the MOV CRO, R/M 
instruction. This puts the Intel3886 DX in Protected 
Mode. 


After enabling Protected Mode, the next instruction 
should execute an intersegment JMP to load the CS 
register and flush the instruction decode queue. The 
final step is to load all of the data segment registers 
with the initial selector values. 


An alternate approach to entering Protected Mode 
which is especially appropriate for multi-tasking op- 
erating systems, is to use the built in task-switch to 
load all of the registers. In this case the GDT would 
contain two TSS descriptors in addition to the code 
and data descriptors needed for the first task. The 
first JMP instruction in Protected Mode would jump 
to the TSS causing a task switch and loading all of 
the registers with the values stored in the TSS. The 
Task State Segment Register should be initialized to 
point to a valid TSS descriptor since a task switch 
saves the state of the current task in a task state 
segment. 
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Figure 4-17. Simple Protected System 
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Figure 4-18. GDT Descriptors for Simple System 


4.4.8 Tools for Building Protected 
Systems 


In order to simplify the design of a protected multi- 
tasking system, Intel provides a tool which allows 
the system designer an easy method of constructing 
the data structures needed for a Protected Mode 
Intel386 DX system. This tool is the builder BLD-386. 
BLD-386 lets the operating system writer specify all 
of the segment descriptors discussed in the previous 
sections (LDTs, IDTs, GDTs, Gates, and TSSs) ina 
high-level language. 


4.5 PAGING 


4.5.1 Paging Concepts 


Paging is another type of memory management use- 
ful for virtual memory multitasking operating sys- 
tems. Unlike segmentation which modularizes pro- 
grams and data into variable length segments, 
paging divides programs into multiple uniform size 
pages. Pages bear no direct relation to the logical 
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structure of a program. While segment selectors can 
be considered the logical ‘“‘name” of a program 
module or data structure, a page most likely corre- 
sponds to only a portion of a module or data struc- 
ture. 


By taking advantage of the locality of reference dis- 
played by most programs, only a small number of 
pages from each active task need be in memory at 
any one moment. 


4.5.2 Paging Organization 


4.5.2.1 PAGE MECHANISM 


The Intel386 DX uses two levels of tables to trans- 
late the linear address (from the segmentation unit) 
into a physical address. There are three compo- 
nents to the paging mechanism of the Intel386 DX: 
the page directory, the page tables, and the page 
itself (page frame). All memory-resident elements of 
the Intel886 DX paging mechanism are the same 
size, namely, 4K bytes. A uniform size for all of the 
elements simplifies memory allocation and realloca- 
tion schemes, since there is no problem with memo- 
ry fragmentation. Figure 4-19 shows how the paging 
mechanism works. 


a 
intel. 
4.5.2.2 PAGE DESCRIPTOR BASE REGISTER 


CR2 is the Page Fault Linear Address register. It 
holds the 32-bit linear address which caused the last 
page fault detected. 


CR3 is the Page Directory Physical Base Address 
Register. It contains the physical starting address of 
the Page Directory. The lower 12 bits of CR3 are 
always zero to ensure that the Page Directory is al- 
ways page aligned. Loading it via a MOV CR3, reg 
instruction causes the Page Table Entry cache to be 
flushed, as will a task switch through a TSS which 
changes the value of CRO. (See 4.5.4 Translation 
Lookaside Buffer). 


4.5.2.3 PAGE DIRECTORY 


The Page Directory is 4K bytes long and allows up to 
1024 Page Directory Entries. Each Page Directory 
Entry contains the address of the next level of ta- 
bles, the Page Tables and information about the 
page table. The contents of a Page Directory Entry 
are shown in Figure 4-20. The upper 10 bits of the 
linear address (A22-—A31) are used as an index to 
select the correct Page Directory Entry. 


TWO LEVEL PAGING SCHEME 
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Figure 4-19. Paging Mechanism: 
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Figure 4-20. Page Directory Entry (Points to Page Table) 
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Figure 4-21. Page Table Entry (Points to Page) 


4.5.2.4 PAGE TABLES 


Each Page Table is 4K bytes and holds up to 1024 
Page Table Entries. Page Table Entries contain the 
starting address of the page frame and statistical 
information about the page (see Figure 4-21). Ad- 
dress bits A12-A21 are used as an index to select 
one of the 1024 Page Table Entries. The 20 upper- 
bit page frame address is concatenated with the 
lower 12 bits of the linear address to form the physi- 
cal address. Page tables can be shared between 
tasks and swapped to disks. 


4.5.2.5 PAGE DIRECTORY/TABLE ENTRIES 


The lower 12 bits of the Page Table Entries and 
Page Directory Entries contain statistical information 
about pages and page tables respectively. The P 
(Present) bit 0 indicates if a Page Directory or Page 
Table entry can be used in address translation. If 
P = 1 the entry can be used for address translation; 
if P = 0 the entry can not be used for translation. 
Note that the present bit of the page table entry that 
points to the page where code is‘currently being ex- 
ecuted should always be set. Code that marks its 
own page not present should not be written. All of 
the other bits are available for use by the software. 
For example the remaining 31 bits could be used to 
indicate where on the disk the page is stored. 


The A (Accessed) bit 5, is set by the Intel386 DX for 
both types of entries before a read or write access 
occurs to an address covered by the entry. The D 
(Dirty) bit 6 is set to 1 before a write to an address 
covered by that page table entry occurs. The D bit is 
undefined for Page Directory Entries. When the P, A 
and D bits are updated by the Intel386 DX, the proc- 
essor generates a Read-Modify-Write cycle which 
locks the bus and prevents conflicts with other proc- 
essors or perpherials. Software which modifies 
these bits should use the LOCK prefix to ensure the 
integrity of the page tables in multi-master systems. 


The 3 bits marked OS Reserved in Figure 4-20 and 
Figure 4-21 (bits 9-11) are software definable. OSs 
are free to use these bits for whatever purpose they 
wish. An example use of the OS Reserved bits 
would be to store information about page aging. By 
keeping track of how long a page has been in mem- 
ory since being accessed, an operating system can 
implement a page replacement algorithm like Least 
Recently Used. 


The (User/Supervisor) U/S bit 2 and the (Read/ 
Write) R/W bit 1 are used to provide protection attri- 
butes for individual pages. 


4.5.3 Page Level Protection 
(R/W, U/S Bits) 


The Intel386 DX provides a set of protection attri- 
butes for paging systems. The paging mechanism 
distinguishes between two levels of protection: User 
which corresponds to level 3 of the segmentation 
based protection, and supervisor which encompass- 
es all of the other protection levels (0, 1, 2). Pro- 
grams executing at Level 0, 1 or 2 bypass the page 
protection, although segmentation based protection 
is still enforced by the hardware. 


The U/S and R/W bits are used to provide 
User/Supervisor and Read/Write protection for indi- 
vidual pages or for all pages covered by a Page Ta- 
ble Directory Entry. The U/S and R/W bits in the first 
level Page Directory Table apply to all pages de- 
scribed by the page table pointed to by that directory 
entry. The U/S and R/W bits in the second level 
Page Table Entry apply only to the page described 
by that entry. The U/S and R/W bits for a given 
page are obtained by taking the most restrictive of 
the U/S and R/W from the Page Directory Table 
Entries and the Page Table Entries and using these 
bits to address the page. 


Example: If the U/S and R/W bits for the Page Di- 
rectory entry were 10 and the U/S and R/W bits for 
the Page Table Entry were 01, the access rights for 
the page would be 01, the numerically smaller of the 
two. Table 4-4 shows the affect of the U/S and R/W 
bits on accessing memory. 


Table 4-4. Protection Provided by R/W and U/S 


Permitted | Permitted Access 


None Read/Write 
None Read/Write 
Read-Only Read/Write 


Read/Write Read/Write 


However a given segment can be easily made read- 
only for levei 0, 1, or 2 via the use of segmented 
protection mechanisms. (Section 4.4 Protection). 
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4.5.4 Translation Lookaside Buffer 


The Intel886 DX paging hardware is designed to 
support demand paged virtual memory systems. 
However, performance would degrade substantially 
if the processor was required to access two levels of 
tables for every memory reference. To solve this 
problem, the Intel386 DX keeps a cache of the most 
recently accessed pages, this cache is called the 
Translation Lookaside Buffer (TLB). The TLB is a 
four-way set associative 32-entry page table cache. 
It automatically keeps the most commonly used 
Page Table Entries in the processor. The 32-entry 
TLB coupled with a 4K page size, results in cover- 
age of 128K bytes of memory addresses. For many 
common multi-tasking systems, the TLB will have a 
hit rate of about 98%. This means that the proces- 
sor will only have to access the two-level page struc- 
ture on 2% of all memory references. Figure 4-22 
illustrates how the TLB complements the Intel386 
DX’s paging mechanism. 


4.5.5 Paging Operation 
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Figure 4-22. Translation Lookaside Buffer 


The paging hardware operates in the following fash- 
ion. The paging unit hardware receives a 32-bit lin- 
ear address from the segmentation unit. The upper 
20 linear address bits are compared with all 32 en- 
tries in the TLB to determine if there is a match. If 
there is a match (i.e. a TLB hit), then the 32-bit phys- 
ical address is calculated and will be placed on the 
address bus. 


However, if the page table entry is not in the TLB, 
the Intel386 DX will read the appropriate Page Direc- 
tory Entry. If P = 1 on the Page Directory Entry indi- 
cating that the page table is in memory, then the 
Intel386 DX will read the appropriate Page Table En- 
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try and set the Access bit. If P = 1 on the Page 
Table Entry indicating that the page is in memory, 
the Intel386 DX will update the Access and Dirty bits 
as needed and fetch the operand. The upper 20 bits 
of the linear address, read from the page table, will 
be stored in the TLB for future accesses. However, if 
P = 0 for either the Page Directory Entry or the 
Page Table Entry, then the processor will generate a 
page fault, an Exception 14. 


The processor will also generate an exception 14, 
page fault, if the memory reference violated the 
page protection attributes (i.e. U/S or R/W) (e.g. try- 
ing to write to a read-only page). CR2 will hold the 
linear address which caused the page fault. If a sec- 
ond page fault occurs, while the processor is at- 
tempting to enter the service routine for the first, 
then the processor will invoke the page fault (excep- 
tion 14) handler a second time, rather than the dou- 
ble fault (exception 8) handler. Since Exception 14 is 
classified as a fault, CS: EIP will point to the instruc- 
tion causing the page fault. The 16-bit error code 
pushed as part of the page fault handler will contain 
status bits which indicate the cause of the page 
fault. 


The 16-bit error code is used by the operating sys- 
tem to determine how to handle the page fault Fig- 
ure 4-23A shows the format of the page-fault error 
code and the interpretation of the bits. | 


NOTE: 
Even though the bits in the error code (U/S, W/R, 
and P) have similar names as the bits in the Page 
Directory/Table Entries, the interpretation of the er- 
ror code bits is different. Figure 4-23B indicates 
what type of access caused the page fault. 
a2 1:0 


15 
U 
U}U}U;JU;JU;JU;USU;JU;U;JU;U;JU;U; |W 
! S|R 
Figure 4-23A. Page Fault Error Code Format 


U/S: The U/S bit indicates whether the access 
causing the fault occurred when the processor was 
executing in User Mode (U/S = 1) or in Supervisor 
mode (U/S = 0) 


W/R: The W/R bit indicates whether the access 
causing the fault was a Read (W/R = 0) or a Write 
(W/R = 1) 


P: The P bit indicates whether a page fault was 
caused by a not-present page (P = 0), or by a page 
level protection violation (P = 1) 


U: UNDEFINED 


Access Type 
User Read 
is executing at level 3. 


0 0 Supervisor* Read 
0 1 
: 
User Write 
Figure 4-23B. Type of Access 
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*Descriptor table access will fault with U/S = = 0, even if the program 
Causing Page Fault 


4.5.6 Operating System 
Responsibilities 


The Intel386 DX takes care of the page address 
translation process, relieving the burden from an op- 
erating system in a demand-paged system. The op- 
erating system is responsible for setting up the initial 
page tables, and handling any page faults. The oper- 
ating system also is required to invalidate (i.e. flush) 
the TLB when any changes are made to any of the 
page table entries. The operating system must re- 
load CR3 to cause the TLB to be flushed. 


Setting up the tables is simply a matter of loading 
CR3 with the address of the Page Directory, and 
allocating space for the Page Directory and the 
Page Tables. The primary responsibility of the oper- 
ating system is to implement a swapping policy and 
handle all of the page faults. 


A final concern of the operating system is to ensure 
that the TLB cache matches the information in the 
paging tables. In particular, any time the operating 
system sets the P present bit of page table entry to 
zero, the TLB must be flushed. Operating systems 
may want to take advantage of the fact that CR3 is 
stored as part of a TSS, to give every task or group 
of tasks its own set of page tables. 


4.6 VIRTUAL 8086 ENVIRONMENT 


4.6.1 Executing 8086 Programs 


The Intel386 DX allows the execution of 8086 appli- 
cation programs in both Real Mode and in the Virtual 
8086 Mode (Virtual Mode). Of the two methods, Vir- 
tual 8086 Mode offers the system designer the most 
flexibility. The Virtual 8086 Mode allows the execu- 
tion of 8086 applications, while still allowing the sys- 
tem designer to take full advantage of the Intel386 
DX protection mechanism. In particular, the Intel386 
DX allows the simultaneous execution of 8086 oper- 
ating systems and its applications, and an Intel386 
DX operating system and both 80286 and Intel386 
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DX applications. Thus, in a multi-user Intel886 DX 
computer, one person could be running an MS-DOS 
spreadsheet, another person using MS-DOS, and a 
third person could be running multiple Unix utilities 
and applications. Each person in this scenario would 
believe that he had the computer completely to him- 
self. Figure 4-24 illustrates this concept. 


4.6.2 Virtual 8086 Mode Addressing 
Mechanism 


One of the major differences between Intel3886 DX 
Real and Protected modes is how the segment se- 
lectors are interpreted. When the processor is exe- 
cuting in Virtual 8086 Mode the segment registers 
are used in an identical fashion to Real Mode. The 
contents of the segment register is shifted left 4 bits 
and added to the offset to form the segment base 
linear address. 


The Intel886 DX allows the operating system to 
specify which programs use the 8086 style address 
mechanism, and which programs use Protected 
Mode addressing, on a per task basis. Through the 
use of paging, the one megabyte address space of 
the Virtual Mode task can be mapped to anywhere in 
the 4 gigabyte linear address space of the Intel386 
DX. Like Real Mode, Virtual Mode effective address- 
es (i.e., segment offsets) that exceed 64K byte will 
Cause an exception 13. However, these restrictions 
should not prove to be important, because most 
tasks running in Virtual 8086 Mode will one be 
existing 8086 application programs. 


4.6.3 Paging In Virtual Mode 


The paging hardware allows the concurrent running 
of multiple Virtual Mode tasks, and provides protec- 
tion and operating system isolation. Although it is 
not strictly necessary to have the paging hardware 
enabled to run Virtual Mode tasks, it is needed in 
order to run multiple Virtual Mode tasks or to relo- 
cate the address space of a Virtual Mode task to 
physical address space greater than one megabyte. 


The paging hardware allows the 20-bit linear ad- 
dress produced by a Virtual Mode program to be 
divided into up to 256 pages. Each one of the pages 
can be located anywhere within the maximum 4 giga- 
byte physical address space of the Intel886 DX. In 
addition, since CR3 (the Page Directory Base Regis- 
ter) is loaded by a task switch, each Virtual Mode 
task can use a different mapping scheme to map 
pages to different physical locations. Finally, the 
paging hardware allows the sharing of the 8086 op- 
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Figure 4-24. Virtual 8086 Environment Memory Management 


erating system code between multiple 8086 applica- 
tions. Figure 4-24 shows how the Intel386 DX paging 
hardware enables multiple 8086 programs to run un- 
der a virtual memory demand paged system. 


4.6.4 Protection and I/O Permission 
Bitmap 


All Virtual 8086 Mode programs execute at privilege 
level 3, the level of least privilege. As such, Virtual 
8086 Mode programs are subject to all of the protec- 
tion checks defined in Protected Mode. (This is dif- 
ferent from Real Mode which implicitly is executing 
at privilege level 0, the level of greatest privilege.) 
Thus, an attempt to execute a privileged instruction 
when in Virtual 8086 Mode will cause an exception 
13 fault. 


The following are privileged instructions, which may 
be executed only at Privilege Level 0. Therefore, at- 
tempting to execute these instructions in Virtual 
8086 Mode (or anytime CPL > 0) causes an excep- 
tion 13 fault: 


LLpt ; MOV DRn,reg; MOV reg,DRn; 
LGDT ; MOV TRn,reg; MOV reg,TIRn; 
1-56 


LMSW; 
CLTS: 
HLT ; 


MOV CRn,reg; MOV reg,CRn. 


Several instructions, particularly those applying to 
the multitasking model and protection model, are 
available only in Protected Mode. Therefore, at- 
tempting to execute the following instructions in 
Real Mode or in Virtual 8086 Mode generates an 
exception 6 fault: 


LTR ; SIR ¢ 


LLDT ; SLDT ; 
LAR ; VERR ; 
LSL; VERW ; 
ARPL. 


The instructions which are |OPL-sensitive in Protect- 
ed Mode are: 


IN; WN SE 
OUT ; CLI 
INS; 

OUTS; 

REP INS; 

REP OUTS; 
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In Virtual 8086 Mode, a slightly different set of in- 


structions are made IOPL-sensitive. The following in- — 


structions are IOPL-sensitive in Virtual 8086 Mode: 


INT n; SL. ¢ 
FPUSHF ; CLI 
POPF ; IRET 


The PUSHF, POPF, and IRET instructions are IOPL- 
sensitive in Virtual 8086 Mode only. This provision 
allows the IF flag (interrupt enable flag) to be virtual- 
ized to the Virtual 8086 Mode program. The INT n 
software interrupt instruction is also |OPL-sensitive 
in Virtual 8086 Mode. Note, however, that the INT 3 
(opcode OCCH), INTO, and BOUND instructions are 
not lIOPL-sensitive in Virtual 8086 mode (they aren’t 
IOPL sensitive in Protected Mode either). 


Note that the I/O instructions (IN, OUT, INS, OUTS, 
REP INS, and REP OUTS) are not IOPL-sensitive in 
Virtual 8086 mode. Rather, the |/O instructions be- 
come automatically sensitive to the 1/O Permission 
Bitmap contained in the Intel386 DX Task State 
Segment. The I/O Permission Bitmap, automatically 
used by the Intel386 DX in Virtual 8086 Mode, is 
illustrated by Figures 4.15a and 4-15b. 


The I/O Permission Bitmap can be viewed as a 0- 
64 Kbit bit string, which begins in memory at offset 
Bit_Map__Offset in the current TSS. Bit_Map__ 
Offset must be < DFFFH so the entire bit map and 
the byte FFH which follows the bit map are all at 
offsets < FFFFH from the TSS base. The 16-bit 
pointer Bit_Map__Offset (15:0) is found in the word 
beginning at offset 66H (102 decimal) from the TSS 
base, as shown in Figure 4-15a. 


Each bit in the I/O Permission Bitmap corresponds 
to a single byte-wide I/O port, as illustrated in Figure 


4-15a. lf a bit is 0, 1/O to the corresponding byte-- 


wide port can occur without generating an excep- 
tion. Otherwise the |/O instruction causes an excep- 
tion 13 fault. Since every byte-wide I/O port must be 
protectable, all bits corresponding to a word-wide or 
dword-wide port must be O for the word-wide or 
dword-wide |/O to be permitted. If all the referenced 
bits are 0, the I/O will be allowed. If any referenced 
bits are 1, the attempted I/O will cause an exception 
13 fault. 


Due to the use of a pointer to the base of the I/O 
Permission Bitmap, the bitmap may be located any- 
where within the TSS, or may be ignored completely 
by pointing the Bit_Map__Offset (15:0) beyond the 
limit of the TSS segment. In the same manner, only 
a small portion of the 64K I/O space need have an 
associated map bit, by adjusting the TSS limit to 
truncate the bitmap. This eliminates the commitment 
of 8K of memory when a complete bitmap is not 
required, while allowing the fully general case if 
desired. 
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EXAMPLE OF BITMAP FOR 1|/O PORTS 0-255: 
Setting the TSS limit to {bit_Map__Offset + 31 
+ 1**} [** see note below] will allow a 32-byte bit- 
map for the I/O ports #0-255, plus a terminator 
byte of all 1’s [** see note below]. This allows the 
1/O bitmap to control |1/O Permission to I/O port 0- 
255 while causing an exception 13 fault on attempt- 
ed I/O to any I/O port 80256 through 65,565. 


**IMPORTANT IMPLEMENTATION NOTE: Beyond 
the last byte of |1/O mapping information in the I/O 
Permission Bitmap must be a byte containing all 1’s. 
The byte of all 1’s must be within the limit of the 
Intel386 DX TSS segment (see Figure 4-15a). 


4.6.5 Interrupt Handling 


In order to fully support the emulation of an 8086 
machine, interrupts in Virtual 8086 Mode are han- 
dled in a unique fashion. When running in Virtual 
Mode all interrupts and exceptions involve a privi- 
lege change back to the host Intel886 DX operating 
system. The Intel3886 DX operating system deter- 
mines if the interrupt comes from a Protected Mode 
application or from a Virtual Mode program by exam- 
ining the VM bit in the EFLAGS image stored on the 
stack. 


When a Virtual Mode program is interrupted and ex- 
ecution passes to the interrupt routine at level 0, the 
VM bit is cleared. However, the VM bit is still set in 
the EFLAG image on the stack. 


The Intel386 DX operating system in turn handles 
the exception or interrupt and then returns control to 
the 8086 program. The Intel386 DX operating sys- 
tem may choose to let the 8086 operating system 
handle the interrupt or it may emulate the function of 
the interrupt handler. For example, many 8086 oper- 
ating system calls are accessed by PUSHing param- 
eters on the stack, and then executing an INT n in- 
struction. If the IOPL is set to 0 then all INT n instruc- 
tions will be intercepted by the Intel386 DX Micro- 
processor operating system. The Intel386 DX oper- 
ating system could emulate the 8086 operating sys- 
tem’s call. Figure 4-25 shows how the Intel386 DX 
operating system could intercept an 8086 operating 
system’s call to “Open a File’’. 


An Intel386 DX operating system can provide a Vir- 
tual 8086 Environment which is totally transparent to 
the application software via intercepting and then 
emulating 8086 operating system’s calls, and inter- 
cepting IN and OUT instructions. 
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4.6.6 Entering and Leaving Virtual 
8086 Mode 


Virtual 8086 mode is entered by executing an IRET 
instruction (at CPL=0), or Task Switch (at any CPL) 
to an Intel386 DX task whose Intel386 DX TSS has a 
FLAGS image containing a 1 in the VM bit position 
while the processor is executing in Protected Mode. 
That is, one way to enter Virtual 8086 mode is to 
switch to a task with an Intel886 DX TSS that has a 
1 in the VM bit in the EFLAGS image. The other way 
is to execute a 32-bit IRET instruction at privilege 
level 0, where the stack has a 1 in the VM bit in the 
EFLAGS image. POPF does not affect the VM bit, 
even if the processor is in Protected Mode or level 0, 
and so cannot be used to enter Virtual 8086 Mode. 
PUSHF always pushes a 0 in the VM bit, even if the 
processor is in Virtual 8086 Mode, so that a program 
cannot tell if it is executing in REAL mode, or in Vir- 
tual 8086 mode. 


The VM bit can be set by executing an IRET instruc- 
tion only at privilege level 0, or by any instruction or 
Interrupt which causes a task switch in Protected 
Mode (with VM=1 in the new FLAGS image), and 
can be cleared only by an interrupt or exception in 
Virtual 8086 Mode. IRET and POPF instructions exe- 
cuted in REAL mode or Virtual 8086 mode will not 
change the value in the VM bit. 


The transition out of virtual 8086 mode to Intel386 
DX protected mode occurs only on receipt of an in- 
terrupt or exception (such as due to a sensitive in- 
struction). In Virtual 8086 mode, all interrupts and 
exceptions vector through the protected mode IDT, 
and enter an interrupt handler in protected Intel386 
DX mode. That is, as part of interrupt processing, 
the VM bit is cleared. 


Because the matching IRET must occur from level 0, 
if an Interrupt or Trap Gate is used to field an inter- 
rupt or exception out of Virtual 8086 mode, the Gate 
must perform an inter-level interrupt only to level 0. 
Interrupt or Trap Gates through conforming seg- 
ments, or through segments with DPL> 0, will raise a 
GP fault with the CS selector as the error code. 


4.6.6.1 TASK SWITCHES TO/FROM VIRTUAL 
8086 MODE 


Tasks which can execute in virtual 8086 mode must 
be described by a TSS with the new Intel386 DX 
format (TYPE 9 or 11 descriptor). 


A task switch out of virtual 8086 mode will operate 
exactly the same as any other task switch out of a 
task with an Intel386 DX TSS. All of the programmer 
visible state, including the FLAGS register with the 
VM bit set to 1, is stored in the TSS. The segment 
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registers in the TSS will contain 8086 segment base 
values rather than selectors. 


A task switch into a task described by an Intel386 
DX TSS will have an additional check to determine if 
the incoming task should be resumed in virtual 8086 
mode. Tasks described by 80286 format TSSs can- 
not be resumed in virtual 8086 mode, so no check is 
required there (the FLAGS image in 80286 format 
TSS has only the low order 16 FLAGS bits). Before 
loading the segment register images from an In- 
tel886 DX TSS, the FLAGS image is loaded, so that 
the segment registers are loaded from the TSS im- 
age as 8086 segment base values. The task is now 
ready to resume in virtual 8086 execution mode. 


4.6.6.2 TRANSITIONS THROUGH TRAP AND 
INTERRUPT GATES, AND IRET 


A task switch is one way to enter or exit virtual 8086 
mode. The other method is to exit through a Trap or 
Interrupt gate, as part of handling an interrupt, and 
to enter as part of executing an IRET instruction. 
The transition out must use an Intel386 DX Trap 
Gate (Type 14), or Intel386 DX Interrupt Gate (Type 
15), which must point to a non-conforming level 0 
segment (DPL=0) in order to permit the trap han- 
dier to IRET back to the Virtual 8086 program. The 
Gate must point to a non-conforming level 0 seg- 
ment to perform a level switch to level 0 so that the 
matching IRET can change the VM bit. Intel3886 DX 
gates must be used, since 80286 gates save only 
the low 16 bits of the FLAGS register, so that the VM 
bit will not be saved on transitions through the 
80286 gates. Also, the 16-bit IRET (presumably) 
used to terminate the 80286 interrupt handler will 
pop only the lower 16 bits from FLAGS, and will not 
affect the VM bit. The action taken for an Intel386 
DX Trap or Interrupt gate if an interrupt occurs while 
the task is executing in virtual 8086 mode is given by 
the following sequence. 


(1) Save the FLAGS register in a temp to push later. 
Turn off the VM and TF bits, and if the interrupt is 
serviced by an Interrupt Gate, turn off IF also. 


(2) Interrupt and Trap gates must perform a level 
switch from 3 (where the VM86 program exe- 
cutes) to level 0 (so IRET can return). This pro- 
cess involves a stack switch to the stack given in 
the TSS for privilege level 0. Save the Virtual 
8086 Mode SS and ESP registers to push in a 
later step. The segment register load of SS will 
be done as a Protected Mode segment load, 
since the VM bit was turned off above. 


(3) Push the 8086 segment register values onto the 
new stack, in the order: GS, FS, DS, ES. These 
are pushed as 32-bit quantities, with undefined 
values in the upper 16 bits. Then load these 4 
registers with null selectors (0). 
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Figure 4-25. Virtual 8086 Environment Interrupt and Call Handling 


(4) Push the old 8086 stack pointer onto the new 
stack by pushing the SS register (as 32-bits, high 
bits undefined), then pushing the 32-bit ESP reg- 
ister saved above. 


(5) Push the 32-bit FLAGS register saved in step 1. 


(6) Push the old 8086 instruction pointer onto the 
new stack by pushing the CS register (as 32-bits, 
high bits undefined), then pushing the 32-bit EIP 
register. 


(7) Load up the new CS:EIP value from the interrupt 
gate, and begin execution of the interrupt routine 
in protected Intel3886 DX mode. 


The transition out of virtual 8086 mode performs a 
level change and stack switch, in addition to chang- 
ing back to protected mode. In addition, all of the 
8086 segment register images are stored on the 
stack (behind the SS:ESP image), and then loaded 
with null (0) selectors before entering the interrupt 
handler. This will permit the handler to safely save 
and restore the DS, ES, FS, and GS registers as 
80286 selectors. This is needed so that interrupt 
handlers which don’t care about the mode of the 
interrupted program can use the same prolog and 
epilog code for state saving (i.e. push all registers in 
prolog, pop all in epilog) regardless of whether or not 
a “native” mode or Virtual 8086 mode program was 
interrupted. Restoring null selectors to these regis- 
ters before executing the IRET will not cause a trap 
in the interrupt handler. Interrupt routines which ex- 
pect values in the segment registers, or return val- 
ues in segment registers will have to obtain/return 
values from the 8086 register images pushed onto 


the new stack. They will need to know the mode of 
the interrupted program in order to know where to 
find/return segment registers, and also to know how 
to interpret segment register values. — 


The IRET instruction will perform the inverse of the 
above sequence. Only the extended Intel3886 DXs 
IRET instruction (operand size=32) can be used, 
and must be executed at level 0 to change the VM 
bit to 1. 


(1) If the NT bit in the FLAGs register is on, an inter- 
task return is performed. The current state is 
stored in the current TSS, and the link field in the 
current TSS is used to locate the TSS for the 
interrupted task which is to be resumed. 


Otherwise, continue with the following sequence. 


(2) Read the FLAGS image from SS:8[ESP] into the 
FLAGS register. This will set VM to the value ac- 
tive in the interrupted routine. 


(3) Pop off the instruction pointer CS:EIP. EIP is 
popped first, then a 32-bit word is popped which 
contains the CS value in the lower 16 bits. If 
VM=0, this CS load is done as a protected 
mode segment load. If VM=1, this will be done 
as an 8086 segment load. 


(4) Increment the ESP register by 4 to bypass the 
FLAGS image which was “popped” in step 1. 


(5) If VM=1, load segment registers ES, DS, FS, 
and GS from memory locations SS:[ESP + 8], 
SS:[ESP + 12], SS:[ESP + 16], and 
SS:[ESP + 20], respectively, where the new val- 
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ue of ESP stored in step 4 is used. Since VM= 1, 
these are done as 8086 segment register loads. 


Else if VM=0O, check that the selectors in ES, 
DS, FS, and GS are valid in the interrupted rou- 
tine. Null out invalid selectors to trap if an at- 
tempt is made to access through them. 


(6) If (RPL(CS) > CPL), pop the stack pointer 
SS:ESP from the stack. The ESP register is 
popped first, followed by 32-bits containing SS in 
the lower 16 bits. If VM=0O, SS is loaded as a 
protected mode segment register load. If VM= 1, 
an 8086 segment register load is used. 


(7) Resume execution of the interrupted routine. The 
VM bit in the FLAGS register (restored from the 
interrupt routine’s stack image in step 1) deter- 
mines whether the processor resumes the inter- 
rupted routine in Protected mode of Virtual 8086 
mode. 


5. FUNCTIONAL DATA 


5.1 INTRODUCTION 


The Intel386 DX features a straightforward function- 
al interface to the external hardware. The Intel386 
DX has separate, parallel buses for data and ad- 
dress. The data bus is 32-bits in width, and bidirec- 
tional. The address bus outputs 32-bit address val- 
ues in the most directly usable form for the high- 
speed local bus: 4 individual byte enable signals, 
and the 30 upper-order bits as a binary value. The 
data and address buses are interpreted and con- 
trolled with their associated control signals. 


A dynamic data bus sizing feature allows the proc- 
essor to handle a mix of 32- and 16-bit external bus- 
es on a cycle-by-cycle basis (see 5.3.4 Data Bus 
Sizing). If 16-bit bus size is selected, the Intel386 
DX automatically makes any adjustment needed, 
even performing another 16-bit bus cycle to com- 
plete the transfer if that is necessary. 8-bit peripheral 
devices may be connected to 32-bit or 16-bit buses 
with no loss of performance. A new address pipe- 
lining option is provided and applies to 32-bit and 
16-bit buses for substantially improved memory utili- 
zation, especially for the most heavily used memory 
resources. 


The address pipelining option, when selected, typ- 
ically allows a given memory interface to operate 
with one less wait state than would otherwise be 
required (see 5.4.2 Address Pipelining). The pipe- 
lined bus is also well suited to interleaved memory 
designs. When address pipelining is requested by 
the external hardware, the Intel386 DX will output 
the address and bus cycle definition of the next bus 
cycle (if it is internally available) even while waiting 
for the current cycle to be acknowledged. 
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Non-pipelined address timing, however, is ideal for 
external cache designs, since the cache memory will 
typically be fast enough to allow non-pipelined cy- 
cles. For maximum design flexibility, the address 
pipelining option is selectable on a cycle-by-cycle 
basis. 


The processor’s bus cycle is the basic mechanism 
for information transfer, either from system to proc- 
essor, or from processor to system. Intel886 DX bus 
cycles perform data transfer in a minimum of only 
two clock periods. On a 32-bit data bus, the maxi- 
mum Intel386 DX transfer bandwidth at 20 MHz is 
therefore 40 MBytes/sec, at 25 MHz bandwidth, is 
50 Mbytes/sec, and at 33 MHz bandwidth, is 
66 Mbytes/sec. Any bus cycle will be extended for 
more than two clock periods, however, if external 
hardware withholds acknowledgement of the cycle. 
At the appropriate time, acknowledgement is sig- 
nalled by asserting the Intel886 DX READY # input. 


The Intel886 DX can relinquish control of its local 
buses to allow mastership by other devices, such as 
direct memory access channels. When relinquished, 
HLDA is the only output pin driven by the Intel386 
DX providing near-complete isolation of the proces- 
sor from its system. The near-complete isolation 
characteristic is ideal when driving the system from 
test equipment, and in fault-tolerant applications. 


Functional data covered in this chapter describes 
the processor’s hardware interface. First, the set of 
signals available at the processor pins is described 
(see 5.2 Signal Description). Following that are the 
signal waveforms occurring during bus cycles (see 
5.3 Bus Transfer Mechanism, 5.4 Bus Functional 
Description and 5.5 Other Functional Descrip- 
tions). 


5.2 SIGNAL DESCRIPTION 


5.2.1 Introduction 


Ahead is a brief description of the Intel386 DX input 
and output signals arranged by functional groups. 
Note the # symbol at the end of a signal name indi- 
cates the active, or asserted, state occurs when the 
signal is at a low voltage. When no # is present after 
the signal name, the signal is asserted when at the 
high voltage level. 


Example signal: M/IO # — High voltage indicates 
Memory selected 


— Low voltage indicates 
I/O selected 


2X ar 
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Figure 5-1. Functional Signal Groups 


PROCESSOR CLOCK 


PERIOD 


CLK2 PERIOD | CLK2 
Lig 


INTERNAL Intel386™ px 
MICROPROCESSOR CLOCK 
(HALF THE FREQUENCY 
OF CLK2) 


(33 MHz MAX) 


PROCESSOR CLOCK 
PERIOD 


PERIOD | CLK2 PERIOD | CLK2 PERIOD 
f 1 eZ 


T2 


15ns mie MHz 


i386™ Dx CPU 


40 ns MIN } 25 MHz 


(25 MHz MAX) 


1386™ px cpu 


50ns soa MHz 


(20 MHz MAX) 


i386™ Dx CPU 


231630-2 


Figure 5-2. CLK2 Signal and Internal Processor Clock 


The signal descriptions sometimes refer to AC tim- 
ing parameters, such as “‘to5 Reset Setup Time” and | 
“tog Reset Hold Time.” The values of these parame- 
ters can be found in Tables 7-4 and 7-5. 


5.2.2 Clock (CLK2) 


CLK2 provides the fundamental timing for the In- 
tel386 DX. It is divided by two internally to generate 
the internal processor clock used for instruction exe- 
cution. The internal clock is comprised of two phas- 
es, ‘phase one”’ and “phase two.” Each CLk2 peri- 
od is a phase of the internal clock. Figure 5-2 illus- 
trates the relationship. If desired, the phase of the 
internal processor clock can be synchronized to a 
known phase by ensuring the RESET signal falling 
edge meets its applicable setup and hold times, tos 
and tog. 


5.2.3 Data Bus (DO through D31) 


These three-state bidirectional signals provide the 
general purpose data path between the Intel386 DX 


and other devices. Data bus inputs and outputs indi- 
cate ‘‘1” when HIGH. The data bus can transfer data 
on 32- and 16-bit buses using a data bus sizing fea- 
ture controlled by the BS16# input. See section 
5.2.6 Bus Contol. Data bus reads require that read 
data setup and hold times to; and too be met for 
correct operation. In addition, the Intel386 DX re- 
quires that all data bus pins be at a valid logic state 
(high or low) at the end of each read cycle, when 
READY # is asserted. During any write operation 
(and during halt cycles and shutdown cycles), the 
Intel386 DX always drives all 32 signals of the data 
bus even if the current bus size is 16-bits. 


5.2.4 Address Bus (BEO# through 
BE3#, A2 through A31) 


These three-state outputs provide physical memory 
addresses or I/O port addresses. The address bus 
is capable of addressing 4 gigabytes of physical 
memory space (OOOOOO00H through FFFFFFFFR), 
and 64 kilobytes of |/O address space (OOO00000H 
through OOOOFFFFH) for programmed 1/0. |/O 
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transfers automatically generated for Intel386 DX-to- 
coprocessor communication use I/O addresses 
800000F8H through 800000FFH, so A31 HIGH in 
conjunction with M/IO # LOW allows simple genera- 
tion of the coprocessor select signal. 


The Byte Enable outputs, BEO #-BE3*#, directly in- 
dicate which bytes of the 32-bit data bus are in- 
volved with the current transfer. This is most conve- 
nient for external hardware. 


BEO# applies to DO-D7 
BE1# applies to D8-D15 
BE2# applies to D16-D23 
BE3# applies to D24-D31 


The number of Byte Enables asserted indicates the 
physical size of the operand being transferred (1, 2, 
3, or 4 bytes). Refer to section 5.3.6 Operand Align- 
ment. 


When a memory write cycle or I/O write cycle is in 
progress, and the operand being transferred occu- 
pies only the upper 16 bits of the data bus (D16- 
D31), duplicate data is simultaneously presented on 
the corresponding lower 16-bits of the data bus 
(DO-—D15). This duplication is performed for optimum 
write performance on 16-bit buses. The pattern of 
write data duplication is a function of the Byte En- 
ables asserted during the write cycle. Table 5-1 lists 
the write data present on DO-D31, as a function of 
the asserted Byte Enable outputs BEO#-BE3#. 


intel. 
5.2.5 Bus Cycle Definition Signals 
(W/R#, D/C #, M/IO#, LOCK#) 


These three-state outputs define the type of bus cy- 
cle being performed. W/R# distinguishes between 
write and read cycles. D/C # distinguishes between 
data and control cycles. M/IO# distinguishes be- 
tween memory and I/O cycles. LOCK# distin- 
guishes between locked and unlocked bus cycles. 


The primary bus cycle definition signals are W/R#, 
D/C# and M/IO#, since these are the signals driv- 
en valid as the ADS# (Address Status output) is 
driven asserted. The LOCK # is driven valid at the 
same time as the first locked bus cycle begins, 
which due to address pipelining, could be later than 
ADS # is driven asserted. See 5.4.3.4 Pipelined Ad- 
dress. The LOCK# is negated when the READY # 
input terminates the last bus cycle which was 
locked. 


Exact bus cycle definitions, as a function of W/R#, 
D/C#, and M/IO#, are given in Table 5-2. Note one 
combination of W/R#, D/C# and M/IO# is never 
given when ADS # is asserted (however, that combi- 
nation, which is listed as ‘does not occur,” may oc- 
cur during idle bus states when ADS # is not assert- 
ed). If M/IO#, D/C#, and W/R# are qualified by 
ADS# asserted, then a decoding scheme may be 
simplified by using this definition of the “does not 
occur’ combination. 


Table 5-1. Write Data Duplication as a Function of BEO # -BE3 # 


Intel386™ DX Byte Enables Intel386™ DX Write Data 


D16-D23 


BE3# BE2# BE1# BEO# | D24-D31 


D = logical write data d24-d31 
C = logical write data d16-d23 
B = logical write data d8-d15 
A = logical write data d0-d7 
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Table 5-2. Bus Cycle Definition 


M/lO# 
L 


Low Low 


5.2.6 Bus Control Signals (ADS #, 
READY #, NA#, BS16#) 


5.2.6.1 INTRODUCTION 


The following signals allow the processor to indicate 
when a bus cycle has begun, and allow other system 
hardware to control address pipelining, data bus 
width and bus cycle termination. 


5.2.6.2 ADDRESS STATUS (ADS#) 


This three-state output indicates that a valid bus cy- 
cle definition, and address (W/R#, D/C#, M/IO#, 
BEO#-BE3#, and A2-A31) is being driven at the 
Intel386 DX pins. It is asserted during T1 and T2P 
bus states (see 5.4.3.2 Non-pipelined Address and 
5.4.3.4 Pipelined Address for additional information 
on bus states). 


5.2.6.3 TRANSFER ACKNOWLEDGE (READY #) 


This input indicates the current bus cycle is com- 
plete, and the active bytes indicated by BEO#- 
BE3# and BS16# are accepted or provided. When 
READY # is sampled asserted during a read cycle or 
interrupt acknowledge cycle, the Intel386 DX latches 
the input data and terminates the cycle. When 
READY # is sampled asserted during a write cycle, 
the processor terminates the bus cycle. 


READY # is ignored on the first bus state of all bus 
cycles, and sampled each bus state thereafter until 
asserted. READY # must eventually be asserted to 
acknowledge every bus cycle, including Halt Indica- 
tion and Shutdown Indication bus cycles. When be- 
ing sampled, READY must always meet setup and 


Address = 2 Address = 0 
(BEO# High (BEO# Low 
BE1# High BE1# High 
BE2# Low BE2# High 
BE3# High BE3# High 
A2-A31 Low) A2-A31 Low) 


MEMORY DATA READ Some Cycles 
MEMORY DATA WRITE 


Yes 


SHUTDOWN: 


hold times ty9 and top for correct operation. See all 
sections of 5.4 Bus Functional Description. 
5.2.6.4 NEXT ADDRESS REQUEST (NA#) 


This is used to request address pipelining. This input 
indicates the system is prepared to accept new val- 


ues of BEO#-—BE3#, A2-A31, W/R#, D/C# and 


M/lO# from the Intel386 DX even if the end of the 
current cycle is not being acknowledged on 
READY #. lf this input is asserted when sampled, 
the next address is driven onto the bus, provided the 
next bus request is already pending internally. See 
5.4.2 Address Pipelining and 5.4.3 Read and 
Write Cycles. NA# must always meet setup and 
hold times, ty5 and t1g¢, for correct operation. 


5.2.6.5 BUS SIZE 16 (BS16#) 


The BS16# feature allows the Intel386 DX to direct- 
ly connect to 32-bit and 16-bit data buses. Asserting 
this input constrains the current bus cycle to use 
only the lower-order half (D0-D15) of the data bus, 
corresponding to BEO# and BE1#. Asserting 
BS16# has no additional effect if only BEO# and/or 
BE1# are asserted in the current cycle. However, 
during bus cycles asserting BE2# or BE3#, assert- 
ing BS16# will automatically cause the Intel3886 DX 
to make adjustments for correct transfer of the up- 
per bytes(s) using only physical data signals DO- 
D15. ; 


lf the operand spans both halves of the data bus 
and BS16# is asserted, the Intel3886 DX will auto- 
matically perform another 16-bit bus cycle. BS16# 
must always meet setup and hold times t17 and tg 
for correct operation. 
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Intel386 DX I/O cycles are automatically generated 
for coprocessor communication. Since the Intel386 
DX must transfer 32-bit quantities between itself and 
the Intel387 DX, BS16# must not be asserted dur- 
ing Intel387 DX communication cycles. 


5.2.7 Bus Arbitration Signals 
(HOLD, HLDA) | 


5.2.7.1 INTRODUCTION 


This section describes the mechanism by which the 
processor relinquishes control of its local buses 
when requested by another bus master device. See 
5.5.1 Entering and Exiting Hold Acknowledge for 
additional information. 


5.2.7.2 BUS HOLD REQUEST (HOLD) 


This input indicates some device other than the In- 
tel386 DX requires bus mastership. 


HOLD must remain asserted as long as any other 
device is a local bus master. HOLD is not recognized 
while RESET is asserted. If RESET is asserted while 
HOLD is asserted, RESET has priority and places 
the bus into an idle state, rather than the hold ac- 
knowledge (high impedance) state. 


HOLD is level-sensitive and is a synchronous input. 
HOLD signals must always meet setup and hold 
times tog and to, for correct operation. 


5.2.7.3 BUS HOLD ACKNOWLEDGE (HLDA) 


Assertion of this output indicates the Intel886 DX 
has relinquished control of its local bus in response 
to HOLD asserted, and is in the bus Hold Acknowl- 
edge state. 


The Hold Acknowledge state offers near-complete 
signal isolation. In the Hold Acknowledge state, 
HLDA is the only signal being driven by the Intel386 
DX. The other output signals or bidirectional signals 
(DO-D31, BEO#-BE3#, A2-A31, W/R#, D/C#, 
M/lIO#, LOCK# and ADS#) are in a high-imped- 
ance state so the requesting bus master may control 
them. Pullup resistors may be desired on several sig- 
nals to avoid spurious activity when no bus master is 
driving them. See 7.2.3 Resistor Recommenda- 
tions. Also, one rising edge occuring on the NMI 
input during Hold Acknowledge is remembered, for 
processing after the HOLD input is negated. 


In addition to the normal usage of Hold Acknowl- 
edge with DMA controllers or master peripherals, 


1-64 


- intel. 


the near-complete isolation has particular attractive- 
ness during system test when test equipment drives 
the system, and in hardware-fault-tolerant applica- 
tions. 


5.2.8 Coprocessor Interface Signals 
(PEREQ, BUSY #, ERROR #) 


5.2.8.1 INTRODUCTION 


In the following sections are descriptions of signals 
dedicated to the numeric coprocessor interface. In 
addition to the data bus, address bus, and bus cycle 
definition signals, these following signals control 
communication between the Intel386 DX and its In- 
tel387 DX processor extension. 


5.2.8.2 COPROCESSOR REQUEST (PEREQ) 


When asserted, this input signal indicates a coproc- 
essor request for a data operand to be transferred 
to/from memory by the Intel886 DX. In response, 
the Intel386 DX transfers information between the 
coprocessor and memory. Because the Intel386 DX 
has internally stored the coprocessor opcode being 
executed, it performs the requested data transfer 
with the correct direction and memory address. 


PEREQ is level-sensitive and is allowed to be asyn- 
chronous to the CLK2 signal. 


5.2.8.3 COPROCESSOR BUSY (BUSY #) 


When asserted, this input indicates the coprocessor 
is still executing an instruction, and is not yet able to 
accept another. When the Intel386 DX encounters 
any coprocessor instruction which operates on the 
numeric stack (e.g. load, pop, or arithmetic opera- 
tion), or the WAIT instruction, this input is first auto- 
matically sampled until it is seen to be negated. This 
sampling of the BUSY # input prevents overrunning 
the execution of a previous coprocessor instruction. 


The FNINIT and FNCLEX coprocessor instructions 
are allowed to execute even if BUSY # is asserted, 
since these instructions are used for coprocessor 
initialization and exception-clearing. 


BUSY # is level-sensitive and is allowed to be asyn- 
chronous to the CLK2 signal. 


BUSY # serves an additional function. If BUSY # is 
sampled LOW at the falling edge of RESET, the In- 
tel3886 DX performs an internal self-test (see 5.5.3 
Bus Activity During and Following Reset). If 
BUSY # is sampled HIGH, no self-test is performed. 


| 
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5.2.8.4 COPROCESSOR ERROR (ERROR #) 
This input signal indicates that the previous coproc- 
essor instruction generated a coprocessor error of a 
type not masked by the coprocessor’s control regis- 
ter. This input is automatically sampled by the In- 
tel386 DX when a coprocessor instruction is en- 
countered, and if asserted, the Intel886 DX gener- 


ates exception 16 to access the error-handling soft- 
ware. 


Several coprocessor instructions, generally those 
which clear the numeric error flags in the coproces- 
sor or save coprocessor state, do execute without 
the Intel386 DX generating exception 16 even if ER- 
ROR # is asserted. These instructions are FNINIT, 
FNCLEX, FSTSW, FSTSWAX, FSTCW, FSTENV, 
FSAVE, FESTENV and FESAVE. 


ERROR #¥ is level-sensitive and is allowed to be 
asynchronous to the CLK2 signal. 


RESET 


5.2.9.1 INTRODUCTION 


The following descriptions cover inputs that can in- 
terrupt or suspend execution of the processor’s cur- 
rent instruction stream. 


5.2.9 Interrupt Signals (INTR, NMI, 
) 


5.2.9.2 MASKABLE INTERRUPT REQUEST (INTR) 


When asserted, this input indicates a request for in- 
terrupt service, which can be masked by the Intel386 
DX Flag Register IF bit. When the Intel386 DX re- 
sponds to the INTR input, it performs two interrupt 
acknowledge bus cycles, and at the end of the sec- 
ond, latches an 8-bit interrupt vector on DO-D7 to 
identify the source of the interrupt. 


INTR is level-sensitive and is allowed to be asyn- 
chronous to the CLK2 signal. To assure recognition 
of an INTR request, INTR should remain asserted 
until the first interrupt acknowledge bus cycle be- 
gins. 


5.2.9.3 NON-MASKABLE INTERRUPT REQUEST 
(NMI) 


This input indicates a request for interrupt service, 
which cannot be masked by software. The non- 
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maskable interrupt request is always processed ac- 
cording to the pointer or gate in slot 2 of the interrupt 
table. Because of the fixed NMI slot assignment, no 
interrupt acknowledge cycles are perfomed when 
processing NMI. 


NMI is rising edge-sensitive and is allowed to be 
asynchronous to the CLK2 signal. To assure recog- 
nition of NMI, it must be negated for at least eight 
CLK2 periods, and then be asserted for at least 
eight CLK2 periods. 


Once NMI processing has begun, no additional 
NMI’s are processed until after the next IRET in- 
struction, which is typically the end of the NMI serv- 
ice routine. If NMI is re-asserted prior to that time, 
however, one rising edge on NMI will be remem- 
bered for processing after executing the next IRET 
instruction. 


5.2.9.4 RESET (RESET) 


This input signal suspends any operation in progress 
and places the Intel3886 DX in a known reset state. 
The Intel386 DX is reset by asserting RESET for 15 
or more CLK2 periods (80 or more CLK2 periods 
before requesting self test). When RESET is assert- 
ed, all other input pins are ignored, and all other bus 
pins are driven to an idle bus state as shown in Ta- 
ble 5-3. If RESET and HOLD are both asserted at a 
point in time, RESET takes priority even if the In- 
tel386 DX was in a Hold Acknowledge state prior to 
RESET asserted. 


RESET is level-sensitive and must be synchronous 
to the CLK2 signal. If desired, the phase of the inter- 
nal processor clock, and the entire Intel386 DX state 
can be completely synchronized to external circuitry 
by ensuring the RESET signal falling edge meets its 
applicable setup and hold times, tos and tog. 


Table 5-3. Pin State (Bus Idle) During Reset 


| PinName i Signal Level During Reset 


ADS # High 
DO-D31 High Impedance 


BEO#-BE3# Low 
A2-A31 High 


W/R# Low 
D/C# High 
M/IO# Low 
LOCK # High 
HLDA Low 
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5.2.10 Signal Summary 


Table 5-4 summarizes the characteristics of all Intel86 DX signals. 
Table 5-4. Intel386™ DX Signal Summary 


Signal Name Signal Function 


CLK2 
DO-D31 

BEO #-BE3# 
A2-A31 
W/R# 

D/C# 

M/IO# 


LOCK # 
Coprocessor Request 


Non-Maskable Intrpt Request 


5.3 BUS TRANSFER MECHANISM 


RESET 


5.3.1 Introduction 


All data transfers occur as a result of one or more 
bus cycles. Logical data operands of byte, word and 
double-word lengths may be transferred without re- 
strictions on physical address alignment. Any byte 
boundary may be used, although two or even three 
physical bus cycles are performed as required for 
unaligned operand transfers. See 5.3.4 Dynamic 
Data Bus Sizing and 5.3.6 Operand Alignment. 
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Output 
High Impedance 


Input 
Input/ | Synchor 
Output |‘ Asynen” |’ Guring AEDA? 


The Intel886 DX address signals are designed to 
simplify external system hardware. Higher-order ad- 
dress bits are provided by A2-A31. Lower-order ad- 
dress in the form of BEO#-BE3# directly provides 
linear selects for the four bytes of the 32-bit data 
bus. Physical operand size information is thereby im- 
plicitly provided each bus cycle in the most usable 
form. a 


Byte Enable outputs BEO#-BE3# are asserted 
when their associated data bus bytes are involved 
with the present bus cycle, as listed in Table 5-5. 
During a bus cycle, any possible pattern of contigu- 
ous, asserted Byte Enable outputs can occur, but 
never patterns having a negated Byte Enable sepa- 
rating two or three asserted Enables. 


i , . ‘ P . 
at ee ee ' 7’ 
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Address bits AO and A1 of the physical operand’s 
base address can be created when necessary (for 
instance, for MULTIBUS | or MULTIBUS II interface), 
as a function of the lowest-order asserted Byte En- 
able. This is shown by Table 5-6. Logic to generate 
AO and A1 is given by Figure 5-3. 


Table 5-5. Byte Enables and Associated 
Data and Operand Bytes 
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Table 5-6. Generating AO-—A31 from 
BEO #-BE3# and A2-A31 


Intel386™ DX Address Signals 


A31 


Address 


poi] [aa] ool x | x | x | tow 
poi wnnJael of | x [x | tow [Hoh 
pat nnfael 1] 0[ x [tow | rion | Hoh 
pat nnsn[ael 1 | 1] tow [oh | i [ron 


EO# 


H BESY a4 | o—[>o 


BE1# 
K - Map for A1 Signal 


BEO# 


BE1# 
K - Map for AO Signal 
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Figure 5-3. Logic to Generate AO, A1 from BE0O # -BE3 # 


Each bus cycle is composed of at least two bus 
states. Each bus state requires one processor clock 
period. Additional bus states added to a single bus 
cycle are called wait states. See 5.4 Bus Functional 
Description. 


Since a bus cycle requires a minimum of two bus 
states (equal to two processor clock periods), data 
can be transferred between external devices and 
the Intel386 DX at a maximum rate of one 4-byte 
Dword every two processor clock periods, for a max- 
imum bus bandwidth of 66 megabytes/second (In- 
tel386 DX operating at 33 MHz processor clock 
rate). 


5.3.2 Memory and I/O Spaces 


Bus cycles may access physical memory space or 
|/O space. Peripheral devices in the system may ei- 
ther be memory-mapped, or |/O-mapped, or both. 
As shown in Figure 5-4, physical memory addresses 
range from OOO00000H to FFFFFFFFH (4 gigabytes) 
and |/O addresses from OOOO0000H to OOOOFFFFH 
(64 kilobytes) for programmed I/O. Note the I/O ad- 
dresses used by the automatic I/O cycles for co- 
processor communication are S800000F8H to 
800000FFH, beyond the address range of pro- 
grammed I/O, to allow easy generation of a coproc- 
essor chip select signal using the A31 and M/lO# 
signals. 
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FFFFFFFFH 


PHYSICAL 
MEMORY 


4GBYTE 


OOOOFFFFH & 


ACCESSIBLE 
64 kBYTE PROGRAMMED 
00000000H 1/0 SPACE 


00000000H 
Physical Memory Space 
NOTE: 


800000FFH 
800000F8H 


COPROCESSOR 
1 (intei387™ px) 


ynot “A 
LACCESSIBLE 4 


i 


231630-5 
1/O Space 


Since A31 is HIGH during automatic communication with coprocessor, A31 HIGH and M/IO# LOW can be used to 


easily generate a coprocessor select signal. 


Figure 5-4. Physical Memory and I/O Spaces 


5.3.3 Memory and I/O Organization 


The Intel3886 DX datapath to memory and I/O 
spaces can be 32 bits wide or 16 bits wide. When 
32-bits wide, memory and I/O spaces are organized 
naturally as arrays of physical 32-bit Dwords. Each 
memory or |/O Dword has four individually address- 
able bytes at consecutive byte addresses. The low- 
est-addressed byte is associated with data signals 
DO-D7; the highest-addressed byte with D24-D31. 


The Intel386 DX includes a bus control input, 
BS16#, that also allows direct connection to 16-bit 
memory or I/O spaces organized as a sequence of 
16-bit words. Cycles to 32-bit and 16-bit memory or 
I/O devices may occur in any sequence, since the 
BS16# control is sampled during each bus cycle. 
See 5.3.4 Dynamic Data Bus Sizing. The Byte En- 
able signals, BEO#-BE3#, allow byte granularity 
when addressing any memory or I/O structure, 
whether 32 or 16 bits wide. 


5.3.4 Dynamic Data Bus Sizing 


Dynamic data bus sizing is a feature allowing direct 
processor connection to 32-bit or 16-bit data buses 
for memory or I/O. A single processor may connect 
to both size buses. Transfers to or from 32- or 16-bit 
ports are supported by dynamically determining the 
bus width during each bus cycle. During each bus 
cycle an address decoding circuit or the slave de- 
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vice itself may assert BS16# for 16-bit ports, or ne- 
gate BS16# for 32-bit ports. 


With BS16# asserted, the processor automatically 
converts operand transfers larger than 16 bits, or 
misaligned 16-bit transfers, into two or three trans- 
fers as required. All operand transfers physically oc- 
cur on DO-D15 when BS16# is asserted. There- 
fore, 16-bit memories or I/O devices only connect 
on data signals DO-D15. No extra transceivers are 
required. 


Asserting BS16# only affects the processor when 
BE2# and/or BE3# are asserted during the current 
cycle. If only DO-D15 are involved with the transfer, 
asserting BS16# has no affect since the transfer 
can proceed normally over a 16-bit bus whether 
BS16# is asserted or not. In other words, asserting 
BS16# has no effect when only the lower half of the 
bus is involved with the current cycle. 


There are two types of situations where the proces- 
sor is affected by asserting BS16#, depending on 
which Byte Enables are asserted during the current 
bus cycle: 


Upper Half Only: 
Only BE2# and/or BE3# asserted. 


Upper and Lower Half: 
At least BE1#, BE2# asserted (and perhaps 
also BEO# and/or BE3#). 
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Effect of asserting BS16# during “upper half only” 

read cycles: : 
Asserting BS16# during “upper half only” reads 
causes the Intel386 DX to read data on the lower 
16 bits of the data bus and ignore data on the 
upper 16 bits of the data bus. Data that would 
have been read from D16-D31 (as indicated by 
BE2# and BE3#) will instead be read from DO- 
D15 respectively. 
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Effect of asserting BS16# during “upper and lower 
half” write cycles: 


Asserting BS16# during “upper and lower half’ 
writes causes the Intel386 DX to perform two: 
16-bit write cycles for complete physical operand 
transfer. All bytes are available the first write cycle 
allowing external hardware to receive Bytes 0 and 
1 (as indicated by BEO# and BE1#) using DO- 
D15. On the second cycle the Intel886 DX dupli- 


cates Bytes 2 and 3 on DO-D15 and Bytes 2 and 


Effect of asserting BS16# during “upper half only” 3 (as indicated by BE2# and BE3#) are written 
write cycles: using DO-D15. BEO# and BE1# are always neg- 
Asserting BS16# during “upper half only” writes ated during the second 16-bit cycle. BS16# must 
does not affect the Intel386 DX. When only BE2# be asserted during the second 16-bit cycle. See 


and/or BE3# are asserted during a write cycle Figure 5-14, cycles 1 and 1a. 
the Intel386 DX always duplicates data signals 
D16-D31 onto DO-D15 (see Table 5-1). There- 


fore, no further Intel386 DX action is required to 5.3.5 Interfacing with 32- and 16-Bit 


perform these writes on 32-bit or 16-bit buses. Memories 
Effect of asserting BS16# during “upper and lower In 32-bit-wide physical memories such as Figure 5-5, 
half” read cycles: each physical Dword begins at a byte address that is 
Asserting BS16# during “upper and lower half” a multiple of 4. A2-A31 are directly used as a Dword 
reads causes the processor to perform two 16-bit select and BEO#-BE3# as byte selects. BS16# is 
read cycles for complete physical operand trans- negated for all bus cycles involving the 32-bit array. 


fer. Bytes 0 and 1 (as indicated by BEO# and 

BE1#) are read on the first cycle using DO-D15. When 16-bit-wide physical arrays are included in the 
Bytes 2 and 3 (as indicated by BE2# and BE3#) system, as in Figure 5-6, each 16-bit physical word 
are read during the second cycle, again using begins at a address that is a multiple of 2. Note the 
DO-D15. D16-D31 are ignored during both 16-bit address is decoded, to assert BS16# only during 
cycles. BEO# and BE1# are always negated dur- bus cycles involving the 16-bit array. (If desiring to 
ing the second 16-bit cycle (See Figure 5-14, cy- 

cles 2 and 2a). 


32. DATA BUS (D0-D31) 
intel386™ 32-BIT 
DX CPU | ADDRESS BUS (BEO#-BE3#,A2-A31) MEMORY 


WH 231630-6 


Figure 5-5. Intel386™ DX with 32-Bit Memory 


32 DATA BUS (DO-D31) 
intel386™ 32-BiT 
DX CPU ADDRESS BUS MEMORY 


(BEO#-BE3#, A2-A31) 


16-BiT 
MEMORY 


Figure 5-6. Intel386™ DX with 32-Bit and 16-Bit Memory 
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use pipelined address with 16-bit memories then 
BEO#-BE3# and W/R# are also decoded to de- 
termine when BS16# should be asserted. See 
5.4.3.6 Pipelined Address with Dynamic Data Bus 
Sizing.) 


A2-A31 are directly usable for addressing 32-bit 
and 16-bit devices. To address 16-bit devices, A1 
and two byte enable signals are also needed. 


To generate an A1 signal and two Byte Enable sig- 
nals for 16-bit access, BEO#-BE3¥# should be de- 
coded as in Table 5-7. Note certain combinations of 
BEO#-BE3# are never generated by the Intel386 
DX, leading to “don’t care” conditions in the decod- 
er. Any BEO#-BE3# decoder, such as Figure 5-7, 
may use the non-occurring BEO#-BE3# combina- 
tions to its best advantage. 


5.3.6 Operand Alignment 


With the flexibility of memory addressing on the In- 
tel386 DX, it is possible to transfer a logical operand 
that spans more than one physical Dword or word of 
memory or !/O. Examples are 32-bit Dword 
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operands beginning at addresses not evenly divisi- 
ble by 4, or a 16-bit word operand split between two 
physical Dwords of the memory array. 


Operand alignment and data bus size dictate when 
multiple bus cycles are required. Table 5-8 describes 
the transfer cycles generated for all combinations of 
logical operand lengths, alignment, and data bus siz- 
ing. When multiple bus cycles are required to trans- 
fer a multi-byte logical operand, the highest-order 
bytes are transferred first (but if BS16# asserted 
requires two 16-bit cycles be performed, that part of 
the transfer is low-order first). 


5.4 BUS FUNCTIONAL DESCRIPTION 


5.4.1 Introduction 


The Intel386 DX has separate, parallel buses for 
data and address. The data bus is 32-bits in width, 
and bidirectional. The address bus provides a 32-bit 
value using 30 signals for the 30 upper-order ad- 
dress bits and 4 Byte Enable signals to directly indi- 
cate the active bytes. These buses are interpreted 
and controlled via several associated definition or 
control signals. 


Table 5-7. Generating Ai, BHE # and BLE # for Addressing 16-Bit Devices 


H* H* H* r* 


Pe Tee 2 a eS rie 


a 


Intel386™ DX Signals 16-Bit Bus Signals 
Tai | BHE* | BLE# (Ao) 
x 


x—no active bytes 


x—not contiguous bytes 


x—not contiguous bytes 
x—not contiguous bytes 
x—not contiguous bytes 


x—not continguous bytes 


Pires f° ee ee eS ee 
Po sr oo koe oe CL i 2s oe 


BLE # asserted when DO-D7 of 16-bit bus is active. 
BHE # asserted when D8-—D15 of 16-bit bus is active. 
A1 low for all even words; A1 high for all odd words. 


x = don’t care 
H = high voltage level 

L = low voltage level 

* = anon-occurring pattern of Byte Enables; either none are asserted, 
or the pattern has Byte Enables asserted for non-contiguous bytes | 
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BEO# : 
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BE1¥# 


H BE3¥ acy | o—[>o- tt 


231630-9 
K-map for 16-bit BHE # signal 


BEO¥ 


231630-10 
K-map for 16-bit BLE # signal (same as AO signal in Figure 5-3) 


Figure 5-7. Logic to Generate A1, BHE # and BLE # for 16-Bit Buses 


Table 5-8. Transfer Bus Cycles for Bytes, Words and Dwords 


Physical Byte Address 

in Memory (low-order bits) 
Transfer Cycles over 
32-Bit Data Bus 


Byte-Length of Logical Operand 


Transfer Cycles over 
16-Bit Data Bus 


hb, * hb hw, h3, 
Ib I3 lw Ib 


= byte transfer 3 =3-byte transfer 
= word transfer d = Dword transfer 
| = low-order portion h = high-order portion 


m = mid-order portion 
x = don't care 
= BS16# asserted causes second bus cycle 
*For this case, 8086, 8088, 80186, 80188, 80286 transfer Ib first, then hb. 


ie 


—s 


= 
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The definition of each bus cycle is given by three 
definition signals: M/IO#, W/R# and D/C#. At the 
same time, a valid address is present on the byte 
enable signals BEO#-BE3# and other address sig- 
nals A2-A31. A status signal, ADS#, indicates 
when the Intel386 DX issues a new bus cycle defini- 
tion and address. 


Collectively, the address bus, data bus and all asso- 
ciated control signals are referred to simply as “‘the 
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When active, the bus performs one of the bus cycles 
~ below: 


1) read from memory space 

2) locked read from memory space 

3) write to memory space 

4) locked write to memory space 

5) read from |/O space (or coprocessor) 
6) write to |/O space (or coprocessor) 
7) interrupt acknowledge 

8) indicate halt, or indicate shutdown 


CYCLE 1 


NON=PIPELINED 


(READ) 


11 12 
61 |¢2/¢1 | 92 


CLK2 ll 


(INPUT) 


a 


BEO#=BE3#, A2—A31, 
M/l0#, D/C#, W/R# 
(OUTPUTS) 


ADS# 3 


(OUTPUT) 


NA¥ Lj 


(INPUT) 


READY# 
(INPUT) 


vockg[ van 


(OUTPUT) 


DO-D31 IN 
(INPUT DURING READ) 


b VALID 1 


a 
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Table 5-2 shows the encoding of the bus cycle defi- 


nition signals for each bus cycle. See section 5.2.5 
Bus Cycle Definition. 


The data bus has a dynamic sizing feature support- 
ing 32- and 16-bit bus size. Data bus size is indicated 
to the Intel886 DX using its Bus Size 16 (BS16#) 
input. All bus functions can be performed with either 
data bus size. 


When the Intel386 DX bus is not performing one of 
the activities listed above, it is either Idle or in the 
Hold Acknowledge state, which may be detected by 
external circuitry. The idle state can be identified b 
the Intel886 DX giving no further assertions on its 
address strobe output (ADS#) since the beginning 
of its most recent bus cycle, and the most recent 
bus cycle has been terminated. The hold acknowl- 
edge state is identified by the Intel386 DX asserting 
its hold acknowledge (HLDA) output. 


The shortest time unit of bus activity is a bus state. A 
bus state is one processor clock period (two CLK2 
periods) in duration. A complete data transfer occurs 
during a bus cycle, composed of two or more bus 
states. 


CYCLE. 2 
NON=PIPELINED NON=PIPELINED 
(READ) (READ) 


T1 12 11 T2 


CYCLE 3 


61|62/¢1|62\/61 |o2/41|62/¢1 


zi 


Y 


} 


VALID 2 > VALID 3 > 


VALID 2 > VALID 3 ) 


Fastest non-pipelined bus cycles consist of T1 and T2 
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Figure 5-8. Fastest Read Cycles with Non-Pipelined Address Timing 
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The fastest Intel386 DX bus cycle requires only two 


bus states. For example, three consecutive bus read 
cycles, each consisting of two bus states, are shown 


by Figure 5-8. The bus states in each cycle are » 


named T1 and T2. Any memory or |/O address may 
be accessed by such a two-state bus cycle, if the 
external hardware is fast enough. The high-band- 
width, two-clock bus cycle realizes the full potential 
of fast main memory, or cache memory. 


Every bus cycle continues until it is acknowledged 
by the external system hardware, using the Intel386 
DX READY # input. Acknowledging the bus cycle at 
the end of the first T2 results in the shortest bus 
cycle, requiring only T1 and T2. If READY # is not 
immediately asserted, however, T2 states are re- 
peated indefinitely until the READY # input is sam- 
pled asserted. 


5.4.2 Address Pipelining 


The address pipelining option provides a choice of 
bus cycle timings. Pipelined or non-pipelined ad- 
dress timing is selectable on a cycle-by-cycle basis 
with the Next Address (NA #) input. 


CYCLE 1 


PIPELINED 


(READ) 


TIP T2P 
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When address pipelining is not selected, the current 
address and bus cycle definition remain stable 
throughout the bus cycle. 


When address pipelining is selected, the address 
(BEO#-BE3#, A2-A31) and definition (W/R#, 
D/C# and M/IO#) of the next cycle are available 
before the end of the current cycle. To signal their 
availability, the Intel886 DX address status output 
(ADS #) is also asserted. Figure 5-9 illustrates the 
fastest read cycles with pipelined address timing. 


Note from Figure 5-9 the fastest bus cycles using 
pipelined address require only two bus states, 
named T1P and T2P. Therefore cycles with pipe- 
lined address timing allow the same data bandwidth 
as non-pipelined cycles, but address-to-data access | 
time is increased compared to that of a non-pipe- 
lined cycle. 


By increasing the address-to-data access time, pipe- 
lined address timing reduces wait state require- 
ments. For example, if one wait state is required with 
non-pipelined address timing, no wait states would 
be required with pipelined address. 


CYCLE 2 
PIPELINED PIPELINED 
(READ) (READ) 


TIP T2P T1P TP 


CYCLE 3 


61 [62/61 [42/61 |o2/¢1 |o2/ 61/62/61 | 42 


CLK2 
a ee 
BEO#=BE3#, A2—A31, 


M/l0#, D/C, W/R¢ | 
(OUTPUTS) 


NA¥ 
(INPUT) 


READY# 
(INPUT) 


VALID 1X VALID 2 X VALID 3 VALID 4 


ADS# ia eas hae Wie 8 
eas Gan Bee 8 io 


muy pK YAU KX vaio 2X vations 
(ouTPuT) M valinoi  vValio2 X VALin3s |X 


DO-D31 
- (INPUT DURING READ) 
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Fastest pipelined bus cycles consist of T1P and T2P 


Figure 5-9. Fastest Read Cycles with Pipelined Address Timing 
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Pipelined address timing is useful in typical systems 
having address latches. In those systems, once an 
address has been latched, pipelined availability of 
the next address allows decoding circuitry to gener- 
ate chip selects (and other necessary select signals) 
in advance, so selected devices are accessed im- 
mediately when the next cycle begins. In other 
words, the decode time for the next cycle can be 
overlapped with the end of the current cycle. 


If a system contains a memory structure of two or 
more interleaved memory banks, pipelined address 
timing potentially allows even more overlap of activi- 
ty. This is true when the interleaved memory control- 
ler is designed to allow the next memory operation 
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to begin in one memory bank while the current bus 
cycle is still activating another memory bank. Figure 
5-10 shows the general structure of the Intel386 DX 
with 2-bank and 4-bank interleaved memory. Note 
each memory bank of the interleaved memory has 
full data bus width (32-bit data width typically, unless 
16-bit bus size is selected). 


Further details of pipelined address timing are given 
in 5.4.3.4 Pipelined Address, 5.4.3.5 Initiating and 
Maintaining Pipelined Address, 5.4.3.6 Pipelined 
Address with Dynamic Bus Sizing, and 5.4.3.7 
Maximum Pipelined Address Usage with 16-Bit 
Bus Size. 
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Figure 5-10. 2-Bank and 4-Bank Interleaved Memory Structure 
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5.4.3 Read and Write Cycles 


5.4.3.1 INTRODUCTION 


Data transfers occur as a result of bus cycles, classi- 
fied as read or write cycles. During read cycles, data 
is transferred from an external device to the proces- 
sor. During write cycles data is transferred in the oth- 
er direction, from the processor to an external de- 
vice. 


Two choices of address timing are dynamically se- 
lectable: non-pipelined, or pipelined. After a bus idle 
state, the processor always uses non-pipelined ad- 
dress timing. However, the NA# (Next Address) in- 
put may be asserted to select pipelined address 
timing for the next bus cycle. When pipelining is se- 
lected and the Intel886 DX has a bus request pend- 
ing internally, the address and definition of the next 
cycle is made available even before the current bus 
cycle is acknowledged by READY #. Generally, the 
NA# input is sampled each bus cycle to select the 
desired address timing for the next bus cycle. 
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Two choices of physical data bus width are dynami- 
cally selectable: 32 bits, or 16 bits. Generally, the 
BS16# (Bus Size 16) input is sampled near the end 
of the bus cycle to confirm the physical data bus size 
applicable to the current cycle. Negation of BS16# 
indicates a 32-bit size, and assertion indicates a 
16-bit bus size. 


If 16-bit bus size is indicated, the Intel386 DX auto- 
matically responds as required to complete the 
transfer on a 16-bit data bus. Depending on the size 
and alignment of the operand, another 16-bit bus 
cycle may be required. Table 5-7 provides all details. 
When necessary, the Intel386 DX performs an addi- 
tional 16-bit bus cycle, using DO-D15 in place of 
D16-D31. 


Terminating a read cycle or write cycle, like any bus 
cycle, requires acknowledging the cycle by asserting 
the READY # input. Until acknowledged, the proces- 
sor inserts wait states into the bus cycle, to allow 
adjustment for the speed of any external device. Ex- 
ternal hardware, which has decoded the address 
and bus cycle type asserts the READY # input at the 
appropriate time. 
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Idle states are shown here for diagram variety only. Write cycles are not always followed by an idle state. An active bus cycle can immediately 


follow the write cycle. 


Figure 5-11. Various Bus Cycles and Idle States with Non-Pipelined Address (zero wait states) 
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At the end of the second bus state within the bus 
cycle, READY # is sampled. At that time, if external 
hardware acknowledges the bus cycle by asserting 
READY #, the bus cycle terminates as shown in Fig- 
ure 5-11. If READY # is negated as’in Figure 5-12, 
the cycle continues another bus state (a wait state) 
and READY # is sampled again at the end of that 
state. This continues indefinitely until the cycle is ac- 
knowledged by READY # asserted. 


When the current cycle is acknowledged, the In- 
tel386 DX terminates it. When a read cycle is ac- 
knowledged, the Intel386 DX latches the information 
present at its data pins. When a write cycle is ac- 
knowledged, the Intel386 DX write data remains val- 
id throughout phase one of the next bus state, to 
provide write data hold time. 


5.4.3.2 NON-PIPELINED ADDRESS 


Any bus cycle may be performed with non-pipelined 
address timing. For example, Figure 5-11 shows a 
mixture of read and write cycles with non-pipelined 
address timing. Figure 5-11 shows the fastest possi- 
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ble cycles with non-pipelined address have two bus 
states per bus cycle. The states are named T1 and 
T2. In phase one of the T1, the address signals and 
bus cycle definition signals are driven valid, and to 
signal their availability, address status (ADS#) is 
simultaneously asserted. 


During read or write cycles, the data bus behaves as 


follows. If the cycle is a read, the Intel386 DX floats 
its data signals to allow driving by the external de- 
vice being addressed. The Intel386 DX requires 
that all data bus pins be at a valid logic state 
(high or low) at the end of each read cycle, when 
READY # is asserted, even if all byte enables are 
not asserted. The system MUST be designed to 
meet this requirement. If the cycle is a write, data 
signals are driven by the Intel886 DX beginning in 
phase two of T1 until phase one of the bus state 
following cycle acknowledgment. 


Figure 5-12 illustrates non-pipelined bus cycles with 
one wait added to cycles 2 and 3. READY # is sam- 
pled negated at the end of the first T2 in cycles 2 
and 3. Therefore cycles 2 and 3 have T2 repeated. 
At the end of the second T2, READY # is sampled 
asserted. 
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Idle states are shown here for diagram variety only. Write cycles are not always followed by an idle state. An active bus cycle can immediately 


follow the write cycle. 


Figure 5-12. Various Bus Cycles and Idle States with Non-Pipelined Address 
(various number of wait states) 
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Bus States: 


T1—first clock of a non-pipelined bus cycle (Intel386 DX drives new address and asserts ADS #) 
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T2—subsequent clocks of a bus cycle when NA# has not been sampled asserted in the current bus cycle 


Ti— idle state 
Th—hold acknowledge state (Intel886 DX asserts HLDA) 
The fastest bus cycle consists of two states: T1 and T2. 


Four basic bus states describe bus operation when not using pipelined address. These states do include BS16# usage for 32-bit and 16-bit 
bus size. If asserting BS16# requires a second 16-bit bus cycle to be performed, it is performed before HOLD asserted is acknowledged. 


Figure 5-13. Intel386™ DX Bus States (not using pipelined address) 


When address pipelining is not used, the address 
and bus cycle definition remain valid during all wait 
states. When wait states are added and you desire 
to maintain non-pipelined address timing, it is neces- 
sary to negate NA# during each T2 state except the 
last one, as shown in Figure 5-12 cycles 2 and 3. If 
NA# is sampled asserted during a T2 other than the 
last one, the next state would be T2l (for pipelined 
address) or T2P (for pipelined address) instead of 
another T2 (for non-pipelined address). 


When address pipelining is not used, the bus states 
and transitions are completely illustrated by Figure 
5-13. The bus transitions between four possible 
states: T1, T2, Ti, and Th. Bus cycles consist of T1 
and T2, with T2 being repeated for wait states. Oth- 
erwise, the bus may be idle, in the Ti state, or in hold 
acknowledge, the Th state. 


When address pipelining is not used, the bus state 
diagram is as shown in Figure 5-13. When the bus is 


idle it is in state Ti. Bus cycles always begin with T1. 
T1 always leads to T2. If a bus cycle is not acknowl- 
edged during T2 and NA# is negated, T2:is repeat- 
ed. When a cycle is acknowledged during T2, the 
following state will be T1 of the next bus cycle if a 
bus request is pending internally, or Ti if there is no 
bus request pending, or Th if the HOLD input is be- 
ing asserted. 


The bus state diagram in Figure 5-13 also applies to 
the use of BS16#. If the Intel3886 DX makes internal 
adjustments for 16-bit bus size, the adjustments do 
not affect the external bus states. If an additional 
16-bit bus cycle is required to complete a transfer on 
a 16-bit bus, it also follows the state transitions 
shown in Figure 5-13. 


Use of pipelined address allows the Intel386 DX to 
enter three additional bus states not shown in Figure 
5-13. Figure 5-20 in 5.4.3.4 Pipelined Address is 
the complete bus state diagram, including pipelined 
address cycles. 
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5.4.3.3 NON-PIPELINED ADDRESS WITH — 
DYNAMIC DATA BUS SIZING 


The physical data bus width for any non-pipelined 
bus cycle can be either 32-bits or 16-bits. At the 
beginning of the bus cycle, the processor behaves 
as if the data bus is 32-bits wide. When the bus cy- 
cle is acknowledged, by asserting READY # at the 
end of a T2 state, the most recent sampling of 
BS16# determines the data bus size for the cycle 
being acknowledged. If BS16# was most recently 
negated, the physical data bus size is defined as 
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32 bits. If BS16# was most recently asserted, the 
size is defined as 16 bits. 


When BS16# is asserted and two 16-bit bus cycles 
are required to complete the transfer, BS16# must 
be asserted during the second cycle; 16-bit bus size 
is not assumed. Like any bus cycle, the second 
16-bit cycle must be acknowledged by asserting 
READY #. 


When a second 16-bit bus cycle is required to com- 
plete the transfer over a 16-bit bus, the addresses 
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Figure 5-14. Asserting BS16 # (zero wait states, non-pipelined address) 
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Figure 5-15. Asserting BS 16 # (one wait state, non-pipelined address) 


generated for the two 16-bit bus cycles are closely 
related to each other. The addresses are the same 
except BEO# and BE1 # are always negated for the 
second cycle. This is because data on DO-D15 was 
already transferred during the first 16-bit cycle. 


Figures 5-14 and 5-15 show cases where assertion 
of BS16# requires a second 16-bit cycle for com- 
plete operand transfer. Figure 5-14 illustrates cycles 
without wait states. Figure 5-15 illustrates cycles 
with one wait state. In Figure 5-15 cycle 1, the bus 


cycle during which BS16# is asserted, note that 
NA# must be negated in the T2 state(s) prior to the 
last T2 state. This is to allow the recognition of 
BS16# asserted in the final T2 state. Also note that 
during this state BS16# must be stable (defined by 
t17 and t18, BS16# setup and hold timings), in order 
to prevent potential data corruption during split cycle 
reads. The logic state of BS16# during this time is 
not important. The relation of NA# and BS16# is 
given fully in 5.4.3.4 Pipelined Address, but Figure 
5-15 illustrates these precautions you need to know 
when using BS16# with non-pipelined address. 


1-79 


Intel386™ DX MICROPROCESSOR 


5.4.3.4 PIPELINED ADDRESS 


Address pipelining is the option of requesting the 
address and the bus cycle definition of the next, in- 
ternally pending bus cycle before the current bus 
cycle is acknowledged with READY# asserted. 
ADS # is asserted by the Intel886 DX when the next 
address is issued. The address pipelining option is 
controlled on a cycle-by-cycle basis with the NA# 
input signal. 


Once a bus cycle is in progress and the current ad- 
dress has been valid for at least one entire bus 
state, the NA# input is sampled at the end of every 
phase one until the bus cycle is acknowledged. Dur- 
ing non-pipelined bus cycles, therefore, NA# is 
sampled at the end of phase one in every T2. An 
example is Cycle 2 in Figure 5-16, during which NA# 
is sampled at the end of phase one of every T2 (it 
was asserted once during the first T2 and has no 
further effect during that bus cycle). 
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lf NA# is sampled asserted, the Intel386 DX is free 
to drive the address and bus cycle definition of the 
next bus cycle, and assert ADS #, as soon as it has 
a bus request internally pending. It may drive the 
next address as early as the next bus state, whether 


the current bus cycle is acknowledged at that time or 
not. 


Regarding the details of address pipelining, the In- 
tel386 DX has the following characteristics: 


1) For NA# to be sampled asserted, BS16# must 
be negated at that sampling window (see Figure 
5-16 Cycles 2 through 4, and Figure 5-17 Cycles 1 
through 4). If NA# and BS16# are both sampled 
asserted during the last T2 period of a bus cycle, 
BS16# asserted has priority. Therefore, if both 
are asserted, the current bus size is taken to be 
16 bits and the next address is not pipelined. 
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Following any idle bus state (Ti), addresses are non-pipelined. Within non-pipelined bus cycles, NA# is only sampled during wait states. 
Therefore, to begin address pipelining during a group of non-pipelined bus cycles requires a non-pipelined cycle with at least one wait state 


(Cycle 2 above). 


Figure 5-16. Transitioning to Pipelined Address During Burst of Bus Cycles 
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Following any idle bus state (Ti) the address is always non-pipelined and NA# is only sampled during wait states. To start address pipelining 
after an idle state requires a non-pipelined cycle with at least one wait state (cycle 1 above). 
The pipelined cycles (2, 3, 4 above) are shown with various numbers of wait states. 


Figure 5-17. Fastest Transition to Pipelined Address Following Idle Bus State 


2) The next address may appear as early as the bus 
state after NA# was sampled asserted (see Fig- 
ures 5-16 or 5-17). In that case, state T2P is en- 
tered immediately. However, when there is not an 
internal bus request already pending, the next ad- 
dress will not be available immediately after NA# 
is asserted and T2l is entered instead of T2P (see 
Figure 5-19 Cycle 3). Provided the current bus cy- 
cle isn’t yet acknowledged by READY # asserted, 


T2P will be entered as soon as the Intel386 DX | 


does drive the next address. External hardware 
should therefore observe the ADS# output as 
confirmation the next address is actually being 
driven on the bus. 


3) Once NA# is sampled asserted, the Intel886 DX 
commits itself to the highest priority bus request 
that is pending internally. It can no longer perform 
another 16-bit transfer to the same address should 
BS16# be asserted externally, so thereafter 


must assume the current bus size is 32 bits. 
Therefore if NA# is sampled asserted within a 
bus cycle, BS16# must be negated thereafter in 
that bus cycle (see Figures 5-16, 5-17, 5-19). 
Consequently, do not assert NA# during bus cy- 
cles which must have BS16# driven asserted. 
See 5.4.3.6 Dynamic Bus Sizing with Pipelined 
Address. 


4) Any address which is validated by a pulse on the 


Intel386 DX ADS# output will remain stable on 
the address pins for at least two processor clock 
periods. The Intel886 DX cannot produce a new 
address more frequently than every two proces- 
sor clock periods (see Figures 5-16, 5-17, 5-19). 


5) Only the address and bus cycle definition of the 


very next bus cycle is available. The pipelining ca- 
pability cannot look further than one bus cycle 
ahead (see Figure 5-19 Cycle 1). 
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The complete bus state transition diagram, including 
operation with pipelined address is given by 5-20. 
Note it is a superset of the diagram for non-pipelined 
address only, and the three additional bus states for 
pipelined address are drawn in bold. 


The fastest bus cycle with pipelined address con- 
sists of just two bus states, T1P and T2P (recall for 
non-pipelined address it is T1 and T2). T1P is the 
first bus state of a pipelined cycle. 


5.4.3.5 INITIATING AND MAINTAINING 
PIPELINED ADDRESS 


Using the state diagram Figure 5-20, observe the 
transitions from an idle state, Ti, to the beginning of 
a pipelined bus cycle, T1P. From an idle state Ti, the 
first bus cycle must begin with T1, and is therefore a 
non-pipelined bus cycle. The next bus cycle will be 
pipelined, however, provided NA# is asserted and 
the first bus cycle ends in a T2P state (the address 
for the next bus cycle is driven during T2P). The fast- 
est path from an idle state to a bus cycle with pipe- 
lined address is shown in bold below: 


TT. 71-12 T2P,... AP-T2P, 
Ln ETS i RN ly ST 
idle non-pipelined _ pipelined 
states cycle cycle 


T1-T2-T2P are the states of the bus cycle that es- 
tablishes address pipelining for the next bus cycle, 
which begins with T1P. The same is true after a bus 
hold state, shown below: 


Th, Th, Th, .T1-T2-T2P, TiP- T2P, 
Mei eee Watheng 


hold non-pipelined _ pipelined 
acknowledge cycle cycle 


states 


The transition to pipelined address is shown func- 
tionally by Figure 5-17 Cycle 1. Note that Cycle 1 is 
used to transition into pipelined address timing for 
the subsequent Cycles 2, 3 and 4, which are pipe- 
lined. The NA# input is asserted at the appropriate 
time to select address pipelining for Cycles 2, 3 
and 4. 
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Once a bus cycle is in progress and the current ad- 
dress has become valid, the NA# input is sampled 
at the end of every phase one, beginning with the 
next bus state, until the bus cycle is acknowledged. 
During Figure 5-17 Cycle 1 therefore, sampling be- 
gins in T2. Once NA# is sampled asserted during 
the current cycle, the Intel386 DX is free to drive a 
new address and bus cycle definition on the bus as 
early as the next bus state. In Figure 5-16 Cycle 1 for 
example, the next address is driven during state 
T2P. Thus Cycle 1 makes the transition to pipelined 
address timing, since it begins with T1 but ends with 
T2P. Because the address for Cycle 2 is available 
before Cycle 2 begins, Cycle 2 is called a pipelined 
bus cycle, and it begins with T1P. Cycle 2 begins as 
soon as READY # asserted terminates Cycle 1. 


Example transition bus cycles are Figure 5-17 Cycle 
1 and Figure 5-16 Cycle 2. Figure 5-17 shows tran- 
sition during the very first cycle after an idle bus 
state, which is the fastest possible transition into ad- 
dress pipelining. Figure 5-16 Cycle 2 shows a tran- 
sition cycle occurring during a burst of bus cycles. In 
any case, a transition cycle is the same whenever it 
occurs: it consists at least of T1, T2 (you assert 
NA# at that time), and T2P (provided the Intel386 
DX has an internal bus request already pending, 
which it almost always has). T2P states are repeated 
if wait states are added to the cycle. 


Note three states (T1, T2 and T2P) are only required 
in a bus cycle performing a transition from non- 
pipelined address into pipelined address timing, for 
example Figure 5-17 Cycle 1. Figure 5-17 Cycles 2, 
3 and 4 show that address pipelining can be main- 
tained with two-state bus cycles consisting only of 
T1P and T2P. 


Once a pipelined bus cycle is in progress, pipelined 
timing is maintained for the next cycle by asserting 
NA# and detecting that the Intel386 DX enters T2P 
during the current bus cycle. The current bus cycle 
must end in state T2P for pipelining to be maintained 
in the next cycle. T2P is identified by the assertion of 
ADS #. Figures 5-16 and 5-17 however, each show 
pipelining ending after Cycle 4 because Cycle 4 
ends in T2l. This indicates the Intel886 DX didn’t 
have an internal bus request prior to the acknowl- 
edgement of Cycle 4. If a cycle ends with a T2 or 
Tal, the next cycle will not be pipelined. 
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Figure 5-19. Details of Address Pipelining During Cycles with Wait States 
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Bus States: 


T1—first clock of a non-pipelined bus cycle (Intel386 DX drives new ad- 


dress and asserts ADS #). 


T2—subsequent clocks of a bus cycle when NA# has not been sampled 


asserted in the current bus cycle. 
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T2I—subsequent clocks of a bus cycle when NA# has been sampled as- 
serted in the current bus cycle but there is not yet an internal bus request 
pending (Intel386 DX will not drive new address or assert ADS #). 

T2P—subsequent clocks of a bus cycle when NA# has been sampled 
asserted in the current bus cycle and there is an internal bus request pend- 


ing (Intel386 DX drives new address and asserts ADS #). 
T1P—first clock of a pipelined bus cycle. 

Ti—idle state. 

Th—hold acknowledge state (Intel386 DX asserts HLDA). 


Asserting NA# for pipelined address gives access to three more bus 


states: T2I, T2P and T1P. 
Using pipelined address, the fastest bus cycle consists of T1P and T2P. 


READY# NEGATED 
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Figure 5-20. Intel386™ DX Complete Bus States (including pipelined address) 


Realistically, address pipelining is almost always 
maintained as long as NA# is sampled asserted. 
This is so because in the absence of any other re- 
quest, a code prefetch request is always internally 
pending until the instruction decoder and code pre- 
fetch queue are completely full. Therefore address 
pipelining is maintained for long bursts of bus cycles, 
if the bus is available (i.e., HOLD negated) and NA# 
is sampled asserted in each of the bus cycles. 


5.4.3.6 PIPELINED ADDRESS WITH DYNAMIC 
DATA BUS SIZING 


The BS16# feature allows easy interface to 16-bit 
data buses. When asserted, the Intel386 DX bus 
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interface hardware performs appropriate action to 
make the transfer using a 16-bit data bus connected 
on DO-D15. 


There is a degree of interaction, however, between 
the use of Address Pipelining and the use of Bus 
Size 16. The interaction results from the multiple bus 
cycles required when transferring 32-bit operands 
over a 16-bit bus. If the operand requires both 16-bit 
halves of the 32-bit bus, the appropriate Intel386 DX 
action is a second bus cycle to complete the oper- 
and’s transfer. It is this necessity that conflicts with 
NA# usage. 


When NA# is sampled asserted, the Intel886 DX 
commits itself to perform the next _ inter- 


a 

intel. 

nally pending bus request, and is allowed to drive 
the next internally pending address onto the bus. As- 
serting NA# therefore makes it impossible for the 
next bus cycle to again access the current address 


on A2-A31, such as may be required when BS16# 
is asserted by the external hardware. 


To avoid conflict, the Intel886 DX is designed with 
following two provisions: 


1) To avoid conflict, BS16# must be negated in the 
current bus cycle if NA# has already been 
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sampled asserted in the current cycle. If NA# is 
sampled asserted, the current data bus size is as- 
sumed to be 32 bits. 


2) To also avoid conflict, if NA# and BS16# are 
both asserted during the same sampling window, 
BS16# asserted has priority and the Intel386 DX 
acts as if NA# was negated at that time. Internal 
Intel886 DX circuitry, shown conceptually in Fig- 
ure 5-18, assures that BS16# is sampled assert- 
ed and NA# is sampled negated if both inputs 
are externally asserted at the same sampling win- 
dow. 
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Cycle 1 is pipelined. Cycle 1a cannot be pipelined, but its address can be inferred from that of Cycle 1, to externally simulate address pipelining 


during Cycle 1a. 


Figure 5-21. Using NA# and BS16# 
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Certain types of 16-bit or 8-bit operands require no 
adjustment for correct transfer on a 16-bit bus. 
Those are read or write operands using only the low- 
er half of the data bus, and write operands using 
only the upper half of the bus since the Intel886 DX 
simultaneously duplicates the write data on the low- 
er half of the data bus. For these patterns of Byte 
Enables and the R/W# signals, BS16# need not be 
asserted at the Intel386 DX allowing NA# to be as- 
serted during the bus cycle if desired. 


5.4.4 Interrupt Acknowledge (INTA) 
Cycles 


In response to an interrupt request on the INTR in- 
put when interrupts are enabled, the Intel886 DX 
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intel. 
performs two interrupt acknowledge cycles. These 
bus cycles are similar to read cycles in that bus defi- 
nition signals define the type of bus activity taking 


place, and each cycle continues until acknowledged 
by READY # sampled asserted. 


The state of A2 distinguishes the first and second 
interrupt acknowledge cycles. The byte address 
driven during the first interrupt acknowledge cycle is 
4 (A31-A3 low, A2 high, BE3#-BE1# high, and 
BEO# low). The address driven during the second 
interrupt acknowledge cycle is 0 (A31-A2 low, 
BE3 #-BE1# high, BEO# low). 
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Interrupt Vector (0-255) is read on DO-D7 at end of second Interrupt Acknowledge bus cycle. 
Because each Interrupt Acknowledge bus cycle is followed by idle bus states, asserting NA# has no practical effect. Choose the approach 


which is simplest for your system hardware design. 


Figure 5-22. Interrupt Acknowledge Cycles 
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Figure 5-23. Halt Indication Cycle 


The LOCK# output is asserted from the beginning 
of the first interrupt acknowledge cycle until the end 
of the second interrupt acknowledge cycle. Four idle 
bus states, Ti, are inserted by the Intel386 DX be- 
tween the two interrupt acknowledge cycles, allow- 
ing for compatibility with spec TRHRL of the 8259A 
Interrupt Controller. 


During both interrupt acknowledge cycles, DO-D31 
float. No data is read at the end of the first interrupt 
acknowledge cycle. At the end of the second inter- 
rupt acknowledge cycle, the Intel386 DX will read an 
external interrupt vector from DO-D7 of the data 
bus. The vector indicates the specific interrupt num- 
ber (from 0-255) requiring service. 


5.4.5 Halt Indication Cycle 


The Intel886 DX halts as a result of executing a 
HALT instruction. Signaling its entrance into the halt 
state, a halt indication cycle is performed. The halt 
indication cycle is identified by the state of the bus 
definition signals shown in 5.2.5 Bus Cycle Defini- 
tion and a byte address of 2. BEO# and BE2# are 
the only signals distinguishing halt indication from 
shutdown indication, which drives an address of 0. 
During the -halt cycle undefined data is driven on 
DO-D31. The halt indication cycle must be acknowl- 
edged by READY # asserted. 


A halted Intel886 DX resumes execution when INTR 


(if interrupts are enabled) or NMI or RESET is as- 
serted. 
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5.4.6 Shutdown Indication Cycle 


The Intel386 DX shuts down as a result of a protec- 
tion fault while attempting to process a double fault. 
Signaling its entrance into the shutdown state, a 
shutdown indication cycle is performed. The shut- 
down indication cycle is identified by the state of the 
bus definition signals shown in 5.2.5 Bus Cycle Def- 
inition and a byte address of 0. BEO# and BE2# 


CYCLE 1 
PIPELINED 
tas 


CLK2 4 
(CLK) [ 


BE1#, BE2#, aaa: 
M/lO#, W/R# 


means 


BEO# IS LOW FOR 
BEO#, A2-A31, 
D/C# 


ADS# 


NA# 


we’ 


\/ 
READY# [ AXXKXY 


VALID 1 'f VALID 2 


Locke | 


CYCLE 2 
PIPELINED 
2 aaa 


eee x eae XXX AAMXKA 
av Sa RCE EN 


|] 

intel. 
are the only signals distinguishing shutdown indica- 
tion from halt indication, which drives an address of 
2. During the shutdown cycle undefined data is driv- 


en on DO-D31. The shutdown indication cycle must 
be acknowledged by READY # asserted. 


A shutdown Intel886 DX resumes execution when 
NMI or RESET is asserted. 
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Figure 5-24. Shutdown Indication Cycle 
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5.5 OTHER FUNCTIONAL 
DESCRIPTIONS 


5.5.1 Entering and Exiting Hold 
Acknowledge 


The bus hold acknowledge state, Th, is entered in 
response to the HOLD input being asserted. In the 
bus hold acknowledge state, the Intel386 DX floats 
all output or bidirectional signals, except for HLDA. 
HLDA is asserted as long as the Intel386 DX re- 
mains in the bus hold acknowledge state. In the bus 
hold acknowledge state, all inputs except HOLD, 
RESET, BUSY#, ERROR#, and PEREQ are ig- 
nored (also up to one rising edge on NMI is remem- 
bered for processing when HOLD is no longer as- 
serted). 
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NOTE: 
For maximum design flexibility the Intel886 DX has no 
internal pullup resistors on its outputs. Your design may 
require an external pullup on ADS# and other Intel386 
DX outputs to keep them negated during float periods. 


Figure 5-25. Requesting Hold from Idle Bus 


Th may be entered from a bus idle state as in Figure 
5-25 or after the acknowledgement of the current 
physical bus cycle if the LOCK # signal is not assert- 
ed, as in Figures 5-26 and 5-27. If HOLD is asserted 
during a locked bus cycle, the Intel386 DX may exe- 
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cute one unlocked bus cycle before acknowledging 
HOLD. If asserting BS16# requires a second 16-bit 
bus cycle to complete a physical operand transfer, it 
is performed before HOLD is acknowledged, al- 
though the bus state diagrams in Figures 5-13 and 
5-20 do not indicate that detail. 


Th is exited in response to the HOLD input being 
negated. The following state will be Ti as in Figure 
5-25 if no bus request is pending. The following bus 
state will be T1 if a bus request is internally pending, 
as in Figures 5-26 and 5-27. 


Th is also exited in response to RESET being assert- 
ed. 


lf a rising edge occurs on the edge-triggered NMI 
input while in Th, the event is remembered as a non- 
maskable interrupt 2 and is serviced when Th is exit- 
ed, unless of course, the Intel386 DX is reset before 
Th is exited. 


5.5.2 Reset During Hold Acknowledge 


RESET being asserted takes priority over HOLD be- 
ing asserted. Therefore, Th is exited in reponse to 
the RESET input being asserted. If RESET is assert- 
ed while HOLD remains asserted, the Intel386 DX 
drives its pins to defined states during reset, as in 
Table 5-3 Pin State During Reset, and performs 
internal reset activity as usual. 


lf HOLD remains asserted when RESET is negated, 
the Intel386 DX enters the hold acknowledge state 
before performing its first bus cycle, provided HOLD 
is still asserted when the Intel886 DX would other- 
wise perform its first bus cycle. If HOLD remains as- 
serted when RESET is negated, the BUSY # input is 
still sampled as usual to determine whether a self 
test is being requested, and ERROR # is still sam- 
pled as usual to determine whether a Intel387 DX 
coprocessor vs. an 80287 (or none) is present. 


5.5.3 Bus Activity During and 
Following Reset 


RESET is the highest priority input signal, capable of 
interrupting any processor activity when it is assert- 
ed. A bus cycle in progress can be aborted at any 
stage, or idle states or bus hold acknowledge states 
discontinued so that the reset state is established. 


RESET should remain asserted for at least 15 CLK2 
periods to ensure it is recognized throughout the In- 
tel386 DX, and at least 80 CLK2 periods if Intel386 
DX self-test is going to be requested at the falling 
edge. RESET asserted pulses less than 15 CLK2 
periods may not be recognized. RESET pulses less 
than 80 CLK2 periods followed by a self-test may 
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HOLD is a synchronous input and can be asserted at any CLK2 edge, provided setup and hold (tog and to4) require- 
ments are met. This waveform is useful for determining Hold Acknowledge latency. 


Figure 5-26. Requesting Hold from Active Bus (NA# negated) 


cause the self-test to report a failure when no true 
failure exists. The additional RESET pulse width is 
required to clear additional state prior to a valid self- 
test. 


Provided the RESET falling edge meets setup and 
hold times tos and tog, the internal processor clock 
phase is defined at that time, as illustrated by Figure 
5-28 and Figure 7-7. 


A Intel386 DX self-test may be requested at the time 
RESET is negated by having the BUSY # input at a 
LOW level, as shown in Figure 5-28. The self-test 
requires (220) + approximately 60 CLK2 periods to 
complete. The self-test duration is not affected by 
the test results. Even if the self-test indicates a prob- 
lem, the Intel886 DX attempts to proceed with the 
reset sequence afterwards. 


1-90 


After the RESET falling edge (and after the self-test 
if it was requested) the Intel886 DX performs an in- 
ternal initialization sequence for approximately 350 
to 450 CLK2 periods. 


The Intel886 DX samples its ERROR# input some 
time after the falling edge of RESET and before exe- 
cuting the first ESC instruction. During this sampling 
period BUSY# must be HIGH. If ERROR# was 
sampled active, the Intel886 DX employs the 32-bit 
protocol of the Intel887 DX. Even though this proto- 
col was selected, it is still necessary to use a soft- 
ware recognition test to determine the presence or 
identity of the coprocessor and to assure compatibil- 
ity with future processors. (See Chapter 11 of the 
Intel386 DX Programmer's Reference Manual, Order 
#230985-002). 
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HOLD is a synchronous input and can be asserted at any CLK2 edge, provided setup and hold (tog and to4) require- 
ments are met. This waveform is useful for determining Hold Acknowledge latency. 


Figure 5-27. Requesting Hold from Active Bus (NA# asserted) 


5.6 SELF-TEST SIGNATURE 


Upon completion of self-test, (if self-test was re- 
quested by holding BUSY# LOW at least eight 
CLK2 periods before and after the falling edge of 
RESET), the EAX register will contain a signature of 
00000000h indicating the Intel886 DX passed its 
self-test of microcode and major PLA contents with 
no problems detected. The passing signature in 
EAX, 00000000h, applies to all Intel386 DX revision 
levels. Any non-zero signature indicates the Intel386 
DX unit is faulty. 


5.7 COMPONENT AND REVISION 
IDENTIFIERS 


To assist Intel886 DX users, the Intel3886 DX after 
reset holds a component identifier and a revision 


identifier in its DX register. The upper 8 bits of DX 
hold O3h as identification of the Intel386 DX compo- 
nent. The lower 8 bits of DX hold an 8-bit unsigned 
binary number related to the component revision 
level. The revision identifier begins chronologically 
with a value zero and is subject to change (typically 
it will be incremented) with component steppings in- 
tended to have certain improvements or distinctions 
from previous steppings. 


These features are intended to assist Intel386 DX 
users to a practical extent. However, the revision 
identifier value is not guaranteed to change with ev- 
ery stepping revision, or to follow a completely uni- 
form numerical sequence, depending on the type or 
intention of revision, or manufacturing materials re- 
quired to be changed. Intel has sole discretion over 
these characteristics of the component. 
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NOTES: 

1. BUSY # should be held stable for 8 CLK2 periods before and after the CLK2 period in which RESET falling edge 
occurs. 

2. If self-test is requested, the Intel386 DX outputs remain in their reset state as shown here and in Table 5-3. 
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Figure 5-28. Bus Activity from Reset Until First Code Fetch 


Table 5-10. Component and Revision Identifier History 
™ 
oe ; “< Component Revision INRGISGB DK Component Revision 
Stepping 


Identifier Identifier Stepping Identifier Identifier 
Name Name 
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5.8 COPROCESSOR INTERFACING 


The Intel386 DX provides an automatic interface for 
the Intel Intel387 DX numeric floating-point coproc- 
essor. The Intel3887 DX coprocessor uses an |/O- 
mapped interface driven automatically by the In- 
tel386 DX and assisted by three dedicated signals: 
BUSY #, ERROR#, and PEREQ. 


As the Intel386 DX begins supporting a coprocessor 


instruction, it tests the BUSY # and ERROR# sig- 
nals to determine if the coprocessor can accept its 
next instruction. Thus, the BUSY# and ERROR# 
inputs eliminate the need for any “preamble” bus 
cycles for communication between processor and 
coprocessor. The Intel387 DX can be given its com- 
mand opcode immediately. The dedicated signals 
provide instruction synchronization, and eliminate 
the need of using the Intel886 DX WAIT opcode 
(9Bh) for Intel887 DX coprocessor instruction syn- 
chronization (the WAIT opcode was required when 
8086 or 8088 was used with the 8087 coprocessor). 


Custom coprocessors can be included in Intel386 
DxX-based systems, via memory-mapped or |/O- 
mapped interfaces. Such coprocessor interfaces al- 
low a completely custom protocol, and are not limit- 
ed to a set of coprocessor protocol ‘‘primitives’’. In- 
stead, memory-mapped or |/O-mapped interfaces 
may use all applicable Intel386 DX instructions for 
high-speed coprocessor 
BUSY # and ERROR# inputs of the Intel386 DX 
may also be used for the custom coprocessor inter- 
face, if such hardware assist is desired. These sig- 
nals can be tested by the Intel386 DX WAIT opcode 
(9Bh). The WAIT instruction will wait until the 
BUSY # input is negated (interruptable by an NMI or 
enabled INTR input), but generates an exception 16 
fault if the ERROR# pin is in the asserted state 
when the BUSY # goes (or is) negated. If the custom 
coprocessor interface is memory-mapped, protec- 
tion of the addresses used for the interface can be 
provided with the Intel886 DX on-chip paging or 


communication. The- 
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segmentation mechanisms. If the custom interface 
is |1/O-mapped, protection of the interface can be 
provided with the Intel386 DX IOPL (I/O Privilege 
Level) mechanism. 


The Intel3887 DX numeric coprocessor interface is 
|/O mapped as shown in Table 5-11. Note that the 
Intel887 DX coprocessor interface addresses are 
beyond the Oh-FFFFh range for programmed 1|/O. 
When the Intel386 DX supports the Intel387 DX co- 
processor, the Intel886 DX automatically generates 
bus cycles to the coprocessor interface addresses. 


Table 5-11. Numeric Coprocessor 
Port Addresses 


Intel387T™ DX 
Intel386™ DX Coprocessor 
1/O Space Register 


800000F8h Opcode Register 
(32-bit port) 

800000FCh Operand Register 
(32-bit port) 


To correctly map the Intel387 DX coprocessor regis- 
ters to the appropriate |/O addresses, connect the 
Intel887 DX coprocessor CMDO¥ pin directly to the 
A2 output of the Intel386 DX. ’ 


Address in 


5.8.1 Software Testing for 
Coprocessor Presence 


When software is used to test for coprocessor (In- 
tel387 DX) presence, it should use only the following 
coprocessor opcodes: FINIT, FNINIT, FSTCW mem, 
FSTSW mem, FSTSW AX. To use other coproces- 
sor opcodes when a coprocessor is known to be not 
present, first set EM = 1 in Intel886 DX CRO. 
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6. INSTRUCTION SET 


This section describes the Intel386 DX instruction 
set. A table lists all instructions along with instruction 
encoding diagrams and clock counts. Further details 
of the instruction encoding are then provided in the 
following sections, which completely describe the 
encoding structure and the definition of all fields oc- 
curring within Intel386 DX instructions. 


6.1 Intel386™ DX INSTRUCTION 
_ ENCODING AND CLOCK COUNT 
SUMMARY 


To calculate elapsed time for an instruction, multiply 
the instruction clock count, as listed in Table 6-1 
below, by the processor clock period (e.g. 50 ns for 
a 20 MHz Intel386 DX, 40 ns for a 25 MHz Intel386 
DX, and 30 ns for a 33 MHz Intel386 DX). 


For more detailed information on the encodings of 
instructions refer to section 6.2 Instruction Encod- 
ings. Section 6.2 explains the general structure of 
instruction encodings, and defines exactly the en- 
codings of all fields contained within the instruction. 


Instruction Clock Count Assumptions 


1. The instruction has been prefetched, decoded, 
and is ready for execution. 
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2. Bus cycles do not require wait states. 


3. There are no local bus HOLD requests delaying 
processor access to the bus. 


4. No exceptions are detected during instruction ex- 
ecution. 


5. If an effective address is calculated, it does not 
use two general register components. One regis- 
ter, scaling and displacement can be used within 
the clock counts shown. However, if the effective 
address calculation uses two general register 
components, add 1 clock to the clock count 
shown. 


Instruction Clock Count Notation 


1. If two clock counts are given, the smaller refers to 
a register operand and the larger refers to a mem- 
ory operand. 


2.n = number of times repeated. 


3.m = number of components in the next instruc- 
tion executed, where the entire displacement (if 
any) counts as one component, the entire imme- 
diate data (if any) counts as one component, and 
each of the other bytes of the instruction and pre- 
fix(es) each count as one component. 


Wait States 


Add 1 clock per wait state to instruction execution 
for each data access. 
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Table 6-1. Intel386™ DX Instruction Set Clock Count Summary 


INSTRUCTION 


GENERAL DATA TRANSFER 
MOV = Move: 


Register to Register/ Memory 
Register/Memory to Register 
Immediate to Register/Memory 
Immediate to Register (short form) 
Memory to Accumulator (short form) 
Accumulator to Memory (short form) 
Register Memory to Segment Register 


Segment Register to Register/Memory 


MOVSX = Move With Sign Extension 


Register From Register/Memory 


MOVZX = Move With Zero Extension 


Register From Register/Memory 
PUSH = Push: 
Register/Memory 


Register (short form) 
Segment Register (ES, CS, SS or DS) 


Segment Register (FS or GS) 


Immediate 

PUSHA = Push All 
POP = Pop 
Register/Memory 


Register (short form) 
Segment Register (ES, SS or DS) 


Segment Register (FS or GS) 


POPA = Pop All 

XCHG = Exchange 
Register/Memory With Register 
Register With Accumulator (short form) 
IN = Input from: 

Fixed Port 

Variable Port 

OUT = Output to: 

Fixed Port 

Variable Port 

LEA = Load EA to Register 
* If CPL < IOPL 


CLOCK COUNT NOTES 


FORMAT 


Protected 
Virtual 
Address 
Mode 


1000100w | modreg r/m 


1000101w | modreg r/m 


mod000_ 1r/m]| immediate data 


1011Ww ~~ reg} immediate data 


1010000w | full displacement 


1010001w full displacement 


10001110 | modsreg3 r/m 


10001100 | modsreg3 r/m 


00001111 1011111w 


00001111 1011011w 


y As la is (i mod110 r/m 
01010 reg 


000sreg2110 


00001111 10 sreg3 000 


011010s0 immediate data 


01100000 
10001111 | mod000 r/m 
01011 reg 
000sreg2111 
00001111 10sreg3001 


01100001 


1000011w 
ht Clk Count 
Virtual 
8086 Mode 
1110010w +26 6*/26"" 
1110110w 27 ria 
[1110011 | portmumber | #24 a*/2a"* 
1110111w 25 Sie." 
10001101 | modreg r/m 2 


** ff GPL > IOPL 
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Table 6-1. Intel386™ DX Instruction Set Clock Count Summary (Continued) 


INSTRUCTION FORMAT Protected Protected 
Virtual Virtual 

Address Address 
Mode Mode 


SEGMENT CONTROL 


LDS = Load Pointer to DS 11000101 | modreg r/m 


LES = Load Pointer to ES 11000100 | modreg-== r/m 


10110100 
10110401 
10110010 


LFS = Load Pointer to FS 00001111 


LGS = Load Pointer to GS 00001111 


LSS = Load Pointer to SS 00001111 
FLAG CONTROL 

CLC = Clear Carry Flag 11111000 
CLD = Clear Direction Flag TALI O 
CLI = Clear Interrupt Enable Flag 11111010 
CLTS = Clear Task Switched Flag 00001111 00000110 
CMC = Complement Carry Flag 1217070 

LAHF = Load AH into Flag 100141141 

POPF = Pop Flags 
PUSHF = Push Flags 10011100 
SAHF = Store AH into Flags 10011110 
STC = Set Carry Flag 11111001 
STD = Set Direction Flag 
STI = Set Interrupt Enable Flag 11371071 


ARITHMETIC 
ADD = Add 


Register to Register 000000dw | modreg r/m 


Register to Memory 0000000w | modreg r/m 


Memory to Register 0000001w | modreg r/m 


Immediate to Register/Memory 100000sw | mod000 r/m| immediate data 


Immediate to Accumulator (short form) 0000010w immediate data 


ADC = Add With Carry 


Register to Register 000100dw | modreg r/m 


Register to Memory 0001000w | modreg r/m 


Memory to Register 0001001w | modreg r/m 


Immediate to Register/Memory 100000sw |mod010 1r/m| immediate data 


Immediate to Accumulator (short form) 0001010w immediate data 


INC = Increment 


Register/Memory 1111111w |mod000 f/m 


Register (short form) 01000 reg 


SUB = Subtract 


Register from Register 001010dw | modreg r/m 
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Table 6-1. Intel386™ DX Instruction Set Clock Count Summary (Continued) 


_ CLOCK COUNT 


Protected 


Real 
Address 
Virtual Mode or Virtual 
Address Virtual Address 
Mode 8086 Mode 
Mode 


INSTRUCTION FORMAT Protected 


ARITHMETIC (Continued) 


Register from Memory 0010100w |modreg r/m 


Memory from Register 0010101w |modreg r/m 


mod101_ r/m| immediate data 


Immediate from Register/ Memory 100000sw 


Immediate from Accumulator (short form) 0010110Ww immediate data 


SBB = Subtract with Borrow 


Register from Register 000110dw |modreg r/m 


Register from Memory 0001100w |modreg r/m 


Memory from Register 0001101w |modreg r/m 


Immediate from Register/Memory 100000sw |mod011_ r/m| immediate data 


Immediate from Accumulator (short form) 0001110w immediate data 


DEC = Decrement 


Register/Memory 1111111w jreg001 r/m 


fo) 
cull 
(=) 
io) 
= 


Register (short form) reg 
CMP = Compare 
Register with Register 001110dw |modreg r/m 


Memory with Register 0011100w |modreg r/m 


Register with Memory 0011101w |modreg r/m 


Immediate with Register/ Memory 100000sw |modi11_ r/m| immediate data 


0011110W immediate data 


Immediate with Accumulator (short form) 
NEG = Change Sign 1111011Ww |mod011 = r/m 


60140111 


AAA = ASCIl Adjust for Add 


AAS = ASCIl Adjust for Subtract 00111111 


00100111 


DAA = Decimal Adjust for Add 


DAS = Decimal Adjust for Subtract 
MUL = Multiply (unsigned) 


Accumulator with Register/Memory 
Multiplier-Byte 
-Word 
-Doubleword 
IMUL = Integer Multiply (signed) 
Accumulator with Register/Memory 
Multiplier-Byte - 
-Word 
-Doubleword 


Register with Register/ Memory 


Multiplier-Byte 
-Word 
-Doubleword 


Register/Memory with Immediate to Register 


-Word 
-Doubleword 


00101111 


1111011w 


1111011w 


011010s1 


00001111 


mod100 fr/m 


mod 1 01 r/m 


tovorsit 


immediate data 


12-17/15-20 
12-25/15-28 
12-41/15-44 


12-17/15-20 
12-25/15-28 
12-41/15-44 


12-17/15-20 
12-25/15-28 
12-41/15-44 


13-26/14-27 
13-42/14-43 


12-17/15-20 
12-25/15-28 
12-41/15-44 


12-17/15-20 
12-25/15-28 
12-41/15-44 


12-17/15-20 
12-25/15-28 
12-41/15-44 


13-26/14-27 
13-42/14-43 
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Table 6-1. Intel386™ DX instruction Set Clock Count Summary (Continued) 


INSTRUCTION FORMAT 


ARITHMETIC (Continued) 
DIV = Divide (Unsigned) 


Accumulator by Register/Memory 1111011wWwjmod110 f/m 


Divisor—Byte 
—Word 
—Doubleword 


IDIV = Integer Divide (Signed) 


Accumulator By Register/ Memory 1111011wjmod111 = r/m 


Divisor—Byte 
—Word 
—Doubleword 


AAD = ASCIl Adjust for Divide 11010101 | 00001010 
AAM = ASCli Adjust for Multiply 11010100 | 00001010 
CBW = Convert Byte to Word 

CWD = Convert Word to Double Word 


LOGIC 


Shift Rotate Instructions 
Not Through Carry (ROL, ROR, SAL, SAR, SHL, and SHR) 


Register/Memory by 1 1101000w jm 


a 
g 1/8 
i 
3 [3 


Register/Memory by CL 


mod TTT  r/mijimmed 8-bit data 


: 


Register/Memory by Immediate Count | 1100000w 


Through Carry (RCL and RCR) 


) 


Register/Memory by 1 1101000w |mod r/ 


Register/Memory by CL 1101001w |mod r/ 


‘ 


mod TTT  r/miimmed 8-bit data 


TTT Instruction 
000 #£ROL 
001 ROR 
010 RCL 
011 RCR 
100 SHL/SAL 
101 SHR 
111 SAR 


Register/Memory by Immediate Count | 1100000w 


SHLD = Shift Left Double 
Register/Memory by Immediate 00001111 {10100100 immed 8-bit data 


Register/Memory by CL 00001111} 10100101 |modreg r/m 


10101100 |modreg _r/mlimmed 8-bit data 


Register/Memory by CL 00001111] 10101101 |modreg r/m 


SHRD = Shift Right Double 
Register/Memory by Immediate 00001111 


AND = And 


Register to Register 001000dw |modreg r/m 


1-98 


Intel386™ DX MICROPROCESSOR 


Table 6-1. intel386™ DX Instruction Set Clock Count Summary (Continued) 


INSTRUCTION 


LOGIC (Continued) 
Register to Memory 
Memory to Register 
Immediate to Register/Memory 


Immediate to Accumulator (Short Form) 


TEST = And Function to Flags, No Result 


Register/Memory and Register 
Immediate Data and Register/Memory 


Immediate Data and Accumulator 
(Short Form) 


OR = Or 


Register to Register 
Register to Memory 
Memory to Register 
Immediate to Register/Memory 


Immediate to Accumulator (Short Form) 
XOR = Exclusive Or 
Register to Register 


Register to Memory 
Memory to Register 
Immediate to Register/ Memory 


Immediate to Accumulator (Short Form) 


NOT = Invert Register/Memory 

STRING MANIPULATION 

CMPS = Compare Byte Word 

INS = Input Byte/Word from DX Port 

LODS = Load Byte/Word to AL/AX/EAX 

MOVS = Move Byte Word 

OUTS = Output Byte/Word to DX Port 

SCAS = Scan Byte Word 

STOS = Store Byte/Word from 
AL/AX/EX 

XLAT = Translate String 


REPEATED STRING MANIPULATION 
Repeated by Count in CX or ECX 
REPE CMPS = Compare String 

(Find Non-Match) 


“GPL & IOPL 


CLOCK COUNT NOTES 


Real 
FORMAT 
Mode or 
Virtual 


Mode 
0 


010000w |mod reg r/m 


0010001w |mod reg r/m 


100000sw |mod100_ r/m| immediate data 


0010010w | immediate data 


1000010w 


mod reg r/m 


1111011W |mod000_ r/m| immediate data 


1010100w | immediate data 


000010dw |modreg r/m 


0000100w |mod reg r/m 


0000101w |modreg r/m 


100000sw r/m| immediate data 


mod00 1 


0000110w | immediate data 


001100dw |modreg r/m 


0011000w 


mod reg r/m 


0011001w |modreg r/m 


100000sw |mod110_ r/m| immediate data 


0011010w | immediate data 


1111011w }|mod010 r/m 


Cik 
Count 
Virtual 

8086 
Mode 


0110110w 9*/29°* 


1010110w 5 
1010010w 8 
0110111Ww 8*/26** 


1010111w 8 


1010101w 


1101017171 


11110011} 1010011w 


** if CPL > IOPL 
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Table 6-1. Intel386™ DX Instruction Set Clock Count Summary (Continued) 


INSTRUCTION 


FORMAT 


REPEATED STRING MANIPULATION (Continued) 


REPNE CMPS = Compare String 
(Find Match) 


REP INS = Input String 
REP LODS = Load String 
REP MOVS = Move String 
REP OUTS = Output String 


REPE SCAS = Scan String 
(Find Non-AL/AX/EAX) 


REPNE SCAS = Scan String 
(Find AL/AX/EAX) 


REP STOS = Store String 
BIT MANIPULATION 

BSF = Scan Bit Forward 
BSR = Scan Bit Reverse 


BT = Test Bit 


Register/Memory, Immediate 


Register/Memory, Register 


BTC = Test Bit and Complement 


Register/Memory, Immediate 
Register/Memory, Register 


BTR = Test Bit and Reset 


Register/Memory, Immediate 
Register/Memory, Register 


BTS es Test Bit and Set 


Register/Memory, Immediate 
Register/Memory, Register 


CONTROL TRANSFER 
CALL = Call 
Direct Within Segment 


Register/Memory 
Indirect Within Segment 


Direct Intersegment 


NOTES: 


11770010, 


11110010 


11110010 


11110010 


11110010 


19 tI00T1 


1010011w 


0110110w 


1010110w 


1010010w 


0110111Ww 


1010111w 


Clk Count 
Virtual 
8086 Mode 


428+6n 


726+ 5n 


171171100170 


11110010 


1010111w 


1010101Ww 


00001111 


00001111 


10111100 


19477707 


mod reg r/m 


00001111 


00001111 


00001111 


00001111 


00001111 


00001111 


00001111 


00001111 


11101000 


a Sa 


TORTIO19 


10100011 


10111010 


10112071 


10111010 


10110011 


10111010 


1O10T0T 


full displacement 


mod010 = fr/m 


mod100_ r/miimmed 8-bit data 


mod1i11  r/miimmed 8-bit data 
modreg _r/m) 


mod110_ r/mlimmed 8-bit data 


mod101_ r/miimmed 8-bit data 


10011010 |unsigned full offset, selector 


Protected 
Virtual 
Address 
Mode 


Virtual 
Address 
Mode 


5+9n 

8+ 6n*/28+ 6n** 
5+6n 
8+4n 


6+ 5n*/26+5n** 


+ Clock count shown applies if |/O permission allows I/O to the port in virtual 8086 mode. If |/O bit map denies permission 
exception 13 fault occurs; refer to clock counts for INT 3 instruction. 


* 1 CPL s [OPL 
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INSTRUCTION FORMAT 


CONTROL TRANSFER (Continued) 
Protected Mode Only (Direct Intersegment) 


Via Call Gate to Same Privilege Level 
Via Call Gate to Different Privilege Level, 
(No Parameters) 
Via Call Gate to Different Privilege Level, 
(x Parameters) 
From 80286 Task to 80286 TSS 
From 80286 Task to Intel386 DX TSS 
From 80286 Task to Virtual 8086 Task (Intel386 DX TSS) 
From Intel386 DX Task to 80286 TSS 
From Intel386 DX Task to Intel386 DX TSS 
From Intel386 DX Task to Virtual 8086 Task (Intel386 DX TSS) 


Indirect Intersegment mod 0 1 1 r/m 


Protected Mode Only (Indirect Intersegment) 
Via Call Gate to Same Privilege Level 
Via Call Gate to Different Privilege Level, 
(No Parameters) 
Via Call Gate to Different Privilege Level, 
(x Parameters) 
From 80286 Task to 80286 TSS 
From 80286 Task to Intel386 DX TSS 
From 80286 Task to Virtual 8086 Task (intel386 DX TSS) 
From Intel386 DX Task to 80286 TSS 
From Intel386 DX Task to Intel386 DX TSS 
From Intel386 DX Task to Virtual 8086 Task (Intel386 DX TSS) 
JMP = Unconditional Jump 


Short 11101011 |8-bit displacement 


Direct within Segment full displacement 


Register/Memory Indirect within Segment mod 100 r/m 


Direct Intersegment 


Protected Mode Only (Direct Intersegment) 
Via Call Gate to Same Privilege Level 
From 80286 Task to 80286 TSS 
From 80286 Task to Intel386 DX TSS 
From 80286 Task to Virtual 8086 Task (Intel886 DX TSS) 
From Intel386 DX Task to 80286 TSS 
From |ntel386 DX Task to Intel386 DX TSS: 
From Intel386 DX Task to Virtual 8086 Task (Intel386 DX TSS) 


Indirect Intersegment 11111111 |mod101 r/m 


Protected Mode Only (Indirect Intersegment) 
Via Call Gate to Same Privilege Level 
From 80286 Task to 80286 TSS 
From 80286 Task to Intel886 DX TSS 
From 80286 Task to Virtual 8086 Task (Intel386 DX TSS) 
From Intel386 DX Task to 80286 TSS 
From Intel386 DX Task to Intel386 DX TSS 
From Intel386 DX Task to Virtual 8086 Task (intel386 DX TSS) 


Table 6-1. Intel386™ DX Instruction Set Clock Count Summary (Continued) 
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CLOCK COUNT | NOTES | 
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Table 6-1. Intel386™ DX Instruction Set Clock Count Summary (Continued) 


INSTRUCTION Protected 
Virtual 


Address 
Mode 


CONTROL TRANSFER (Continued) 
RET = Return from CALL: 


Within Segment 11000011 


Within Segment Adding Immediate to SP 11000010 16-bit disp! 


Intersegment 11001011 


Intersegment Adding Immediate to SP 11001010 16-bit displ 


Protected Mode Only (RET): 
to Different Privilege Level 
Intersegment 
Intersegment Adding Immediate to SP 


CONDITIONAL JUMPS 
NOTE: Times Are Jump “Taken or Not Taken” 
JO = Jump on Overflow 


8-Bit Displacement 01110000 8-bit disp! 


Full Displacement 00001111 | 10000000 | full displacement 


JNO = Jump on Not Overflow 


8-Bit Displacement 01110001 8-bit disp! 
Full Displacement 00001111 10000001 | full displacement 


JB/JNAE = Jump on Below/Not Above or Equal 


8-Bit Displacement 01110010 8-bit displ 
Full Displacement 00001111 10000010 | full displacement 


JNB/JAE = Jump on Not Below/Above or Equal 


8-Bit Displacement 01110011 8-bit displ 


Full Displacement 00001111 10000011 | full displacement 


JE/JZ = Jump on Equal/Zero 
8-Bit Displacement 01110100 8-bit disp! 


Full Displacement 00001111 10000100 | full displacement 


JNE/JNZ = Jump on Not Equal/Not Zero 
8-Bit Displacement 01110101 8-bit displ 


Full Displacement 00001111 10000101 | full displacement 


JBE/JNA = Jump on Below or Equal/Not Above 
8-Bit Displacement 8-bit displ 


Full Displacement 00001111 10000110 | full displacement 


JNBE/JA = Jump on Not Below or Equal/Above 
8-Bit Displacement 8-bit displ 


~ 


Full Displacement 00001111 10000111 | full displacement 
JS = Jump on Sign 


8-Bit Displacement 01111000 8-bit displ 


Full Displacement 00001111 10001000 | full displacement 
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Table 6-1. Intel386™ DX Instruction Set Clock Count Summary (Continued) 


INSTRUCTION 


FORMAT 


CONDITIONAL JUMPS (Continued) 
JNS = Jump on Not Sign 


8-Bit Displacement 8-bit disp! 


00001111 


Full Displacement 10001001 | full displacement 


JP/JPE = Jump on Parity/Parity Even 
8-Bit Displacement 


8-bit displ 


Full Displacement 00001111 1 


0001010 | full displacement 


JNP/JPO = Jump on Not Parity/Parity 
8-Bit Displacement 


{ 


8-bit disp! 


Full Displacement 00001111 10001011 


full displacement 


JL/JNGE = Jump on Less/Not Greater or Equal 
8-Bit Displacement 


g 
! 


Full Displacement 00001111 


10001100 | full displacement 


JNL/JGE = Jump on Not Less/Greater or Equal 
8-Bit Displacement 


, 
g 


Full Displacement 00001111 10001101 


il E 


full displacement 


JLE/JNG = Jump on Less or Equal/Not Greater 
8-Bit Displacement 01111110 


Coal 


8-bit di 


Full Displacement 00001111 10001110 | full displacement 


: 


JNLE/JG = Jump on Not Less or Equai/Greater 
8-Bit Displacement 


: 
‘I 


Full Displacement 00001111 


g 
| 


JCXZ = Jump on CX Zero 


g 
é 


JECXZ = Jump on ECX Zero 


(Address Size Prefix Differentiates JCXZ from JECXZ) 


LOOP = Loop CX Times 


LOOPZ/LOOPE = Loop with 
Zero/Equal 


LOOPNZ/LOOPNE = Loop While 
Not Zero 


CONDITIONAL BYTE SET 
NOTE: Times Are Register/Memory 


SETO = Set Byte on Overfiow 
To Register/Memory 


SETNO = Set Byte on Not Overfiow 
To Register/Memory 


To Register/Memory | 00001111 


CLOCK COUNT NOTES 


Protected 
Virtual 
Address 
Mode 


7+mor3 


7+ mor3 


7+mor3 


7+mor3 


1-103 


Intel386™ DX MICROPROCESSOR 
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Table 6-1. Intel386™ DX Instruction Set Clock Count Summary (Continued) 


Real 
INSTRUCTION FORMAT Address Protected 
Mode or Virtual 
Virtual Address 
8086 Mode 
Mode 


CONDITIONAL BYTE SET (Continued) 
SETNB = Set Byte on Not Below/Above or Equal 


To Register/Memory 00001111 10010011 |mod000 f/m 


SETE/SETZ = Set Byte on Equal/Zero 


To Register/Memory 00001111 10010100 | mod000 f/m 


SETNE/SETNZ = Set Byte on Not Equal/Not Zero 

To Register/Memory | 00001111 10010101 |mod000 r/m 
SETBE/SETNA = Set Byte on Below or Equal/Not Above 

To Register/Memory | 00001111 10010110 |mod000 f/m 


SETNBE/SETA = Set Byte on Not Below or Equal/Above 


To Register/Memory | 00001111 10010111 |mod000 f/m 


SETS = Set Byte on Sign 


To Register/Memory 00001111 10011000 | mod000 fr/m 

SETNS = Set Byte on Not Sign 
To Register/Memory 00001111 10011001 |mod000 f/m 
SETP/SETPE = Set Byte on Parity/Parity Even 
To Register/Memory 00001111 10011010 |mod000 f/m 

SETNP/SETPO = Set Byte on Not Parity/Parity Odd 


To Register/Memory | 00001111 10011011 |mod000 r/m 


SETL/SETNGE = Set Byte on Less/Not Greater or Equal 


To Register/Memory | 00001111 | 10011100 | mod000 f/m 
SETNL/SETGE = Set Byte on Not Less/Greater or Equal 


To Register/Memory | 00001111 01111101 |mod000 f/m 


SETLE/SETNG = Set Byte on Less or Equal/Not Greater 


To Register/Memory | 00001111 10011110 |mod000 f/m 


SETNLE/SETG = Set Byte on Not Less or Equal/Greater 
To Register/Memory | 00001111 10011111 |mod000 f/m 


ENTER = Enter Procedure 11001000 | 16-bit displacement, 8-bit level 


L=0 
L=1 
ie | 


LEAVE = Leave Procedure 11001001 
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INSTRUCTION FORMAT 


INTERRUPT INSTRUCTIONS 
INT = Interrupt: 
Type Specified 


Type 3 
INTO = Interrupt 4 if Overflow Flag Set 


If OF = 1 
lf OF = 0 


Bound = Interrupt 5 if Detect Value 01100010 


Out of Range 


If Out of Range 
If In Range 


Protected Mode Only (INT) 
INT: Type Specified 
Via Interrupt or Trap Gate 
to Same Privilege Level 
Via Interrupt or Trap Gate 
to Different Privilege Level 
From 80286 Task to 80286 TSS via Task Gate 
From 80286 Task to Intel386 DX TSS via Task Gate 
From 80286 Task to virt 8086 md via Task Gate 
From Intel386 DX Task to 80286 TSS via Task Gate 
From Intel386 DX Task to Intel386 DX TSS via Task Gate 
From Intel386 DX Task to virt 8086 md via Task Gate 
From virt 8086 md to 80286 TSS via Task Gate 
From virt 8086 md to Intel386 DX TSS via Task Gate 
From virt 8086 md to priv level 0 via Trap Gate or Interrupt Gate 


INT: TYPE 3 

Via Interrupt or Trap Gate 

to Same Privilege Level 
Via Interrupt or Trap Gate 

to Different Privilege Level 
From 80286 Task to 80286 TSS via Task Gate 
From 80286 Task to Intel386 DX TSS via Task Gate 
From 80286 Task to Virt 8086 md via Task Gate 
From Intel386 DX Task to 80286 TSS via Task Gate 
From Intel386 DX Task to Intel386 DX TSS via Task Gate 
From Intel386 DX Task to Virt 8086 md via Task Gate 
From virt 8086 md to 80286 TSS via Task Gate 
From virt 8086 md to Intel386 DX TSS via Task Gate 
From virt 8086 md to priv level 0 via Trap Gate or Interrupt Gate 


INTO: 


Via Interrupt or Trap Grate 

to Same Privilege Level 
Via Interrupt or Trap Gate 

to Different Privilege Level 
From 80286 Task to 80286 TSS via Task Gate 
From 80286 Task to Intel386 DX TSS via Task Gate 
From 80286 Task to virt 8086 md via Task Gate 
From Intel386 DX Task to 80286 TSS via Task Gate 
From Intel386 DX Task to Intel386 DX TSS via Task Gate 
From Intel386 DX Gate 
From virt 8086 md to 80286 TSS via Task Gate 
From virt 8086 md to Intel386 DX TSS via Task Gate 
From virt 8086 md to priv level 0 via Trap Gate or Interrupt Gate 


Table 6-1. Intel386™ DX Instruction Set Clock Count Summary (Continued) 


Intel386™ DX MICROPROCESSOR 


CLOCK COUNT NOTES 


Protected 
Virtual 
Address 
Mode 


e, g,h, j,k, r 
e, g, h, j, k, r 


g, j,k, r 


g,j, k,r 
g,j, k,r 
g,j,k,r 
g,j,k,r 
g,j, k,r 
g,j, k,r 
g,j, k,r 
g,j,k,r 
g, j,k, r 


g, j, k, r 


g,j,k,r 
g,j, kr 
g,j,k,r 
g,j,k,r 
g, j,k, r 
g,j, k,r 
co Se 
gj, kr 
g,j,k,r 
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Table 6-1. intel386™ DX Instruction Set Clock Count Summary (Continued) 


INSTRUCTION FORMAT 


INTERRUPT INSTRUCTIONS (Continued) 
BOUND: 


Via Interrupt or Trap Gate 

to Same Privilege Level 
Via Interrupt or Trap Gate 

to Different Privilege Level 
From 80286 Task to 80286 TSS via Task Gate 
From 80286 Task to Intel386 DX TSS via Task Gate 
From 80268 Task to virt 8086 Mode via Task Gate 
From Intel386 DX Task to 80286 TSS via Task Gate 
From Intel386 DX Task to Intel386 DX TSS via Task Gate 
From 80368 Task to virt 8086 Mode via Task Gate 
From virt 8086 Mode to 80286 TSS via Task Gate 
From virt 8086 Mode to Intel386 DX TSS via Task Gate 
From virt 8086 md to priv level 0 via Trap Gate or Interrupt Gate 


INTERRUPT RETURN 
IRET = Interrupt Return 11001111 


Protected Mode Only (IRET) 
To the Same Privilege Level (within task) 
To Different Privilege Level (within task) 
From 80286 Task to 80286: TSS 
From 80286 Task to Intel386 DX TSS 
From 80286 Task to Virtual 8086 Task 
From 80286 Task to Virtual 8086 Mode (within task) 
From Intel386 DX Task to 80286 TSS 
From Intel386 DX Task to Intel386 DX TSS 
From Intel386 DX Task to Virtual 8086 Task 
From Intel386 DX Task to Virtual 8086 Mode (within task) 


PROCESSOR CONTROL 


HLT = HALT 14110100 


MOV = Move to and From Control/Debug/Test Registers 


CRO/CR2/CR3 from register 00001111 1 1 eee reg 
Register From CRO-3 00001111 1 1 eee reg 
DRO-3 From Register 00001111 1 
DR6-7 From Register 00001111 is 
Register from DR6-7 00001111 1 1 eee 
Register from DRO-3 00001111 1 1 eee reg 
TR6-7 from Register 00001111 11 eee 
Register from TR6-7 00001111 


NOP = No Operation 10010000 


$ 
& 


g & 


$ 
g 


WAIT = Wait until BUSY # pinis negated | 10011011 
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Mode or 
Virtual 
8086 
Mode 


- Protected 
Virtual 
Address 
‘Mode 


in : | Intel386™ DX MICROPROCESSOR 


Table 6-1. intel386™ DX Instruction Set Clock Count Summary (Continued) 


CLOCK COUNT NOTES 


Real Real 
INSTRUCTION FORMAT Address Protected Address Protected 
Mode or Virtual Mode or Virtual 
Virtual Address Virtual Address 
8086 Mode 8086 Mode 
Mode Mode 


PROCESSOR EXTENSION INSTRUCTIONS 


Processor Extension Escape 11011TTT |modLLL f/m See 


TTT and LLL bits are opcode 80287/80Intel387 


information for coprocessor. data sheets for 
clock counts 


PREFIX BYTES 


Address Size Prefix 01100111 


LOCK = Bus Lock Prefix 11110000 


Operand Size Prefix 01100110 


Segment Override Prefix 
CS: 00101110 
DS: 00111110 
ES: 00100110 
FS: 01100100 


GS: 01100101 


SS: 00110110 


PROTECTION CONTROL 
ARPL = Adjust Requested Privilege Level 
From Register/Memory 01100011 | modreg r/m 
LAR = Load Access Rights 
From Register/Memory 00001111 mod reg r/m g,h, j, p 
LGDT = Load Global Descriptor 


Table Register 00001111 | 00000001 |mod010 r/m h, | 


LIDT = Load Interrupt Descriptor 


Table Register 00001111 00000001 |mod011 = 1r/m h, | 


LLDT = Load Local Descriptor 


Table Register to 
Register/Memory 00001111 00000000 |mod010 r/m 
LMSW = Load Machine Status Word 


/ 
From Register/Memory 00001111 00000001 |mod110 fr/m 


LSL = Load Segment Limit 


From Register/Memory 00001111 00000011 | modreg r/m 


Byte-Granular Limit g,h, j, p 
Page-Granular Limit g,h, j, p 


LTR = Load Task Register 


From Register/Memory 00001111 00000000 g, h, j, | 


SGDT = Store Global Descriptor 
Table Register 00001111 


SIDT = Store interrupt Descriptor 
Table Register 00001111 00000001 


SLDT = Store Local Descriptor Table Register 


To Register/Memory 00001111 | 00000000 
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Real 
INSTRUCTION FORMAT ' Address Protected 
Mode or Mode or Virtual 
Virtual Virtual Address 
8086 8086 Mode 
Mode Mode 


SMSW = Store Machine 
Status Word 00001111 00000001 |mod100 
STR = Store Task Register 


To Register/ Memory 00001111 00000000 | mod001 


= Verify Read Accesss 


r/m 
r/m 
Register/Memory 00001111 00000000 |mod100 r/m g,h,j, p 
= Verify Write Accesss 00001111 00000000 |mod101 = r/m g,h,j, p 


INSTRUCTION NOTES FOR TABLE 6-1 


Notes a through c apply to Intel386 DX Real Address Mode only: 

a. This is a Protected Mode instruction. Attempted execution in Real Mode will result in exception 6 (invalid opcode). 

b. Exception 13 fault (general protection) will occur in Real Mode if an operand reference is made that partially or fully 
extends beyond the maximum CS, DS, ES, FS or GS limit, FFFFH. Exception 12 fault (stack segment limit violation or not 
present) will occur in Real Mode if an operand reference is made that partially or fully extends beyond the maximum SS limit. 
c. This instruction may be executed in Real Mode. In Real Mode, its purpose is primarily to initialize the CPU for Protected 
Mode. 


Notes d through g apply to Intel386 DX Real Address Mode and Intel386 DX Protected Virtual Address Mode: 
d. The Intel386 DX uses an early-out multiply algorithm. The actual number of clocks depends on the position of the most 
significant bit in the operand (multiplier). 

Clock counts given are minimum to maximum. To calculate actual clocks use the following formula: 

Actual Clock = if m < > 0 then max ([logo |m|], 3) + b clocks: 

ifm = 0 then 3+b clocks 

In this formula, m is the multiplier, and 

b = 9 for register to register, 

b = 12 for memory to register, 

b = 10 for register with immediate to register, 

b = 11 for memory with immediate to register. 
e. An exception may occur, depending on the value of the operand. 
f. LOCK # is automatically asserted, regardless of the presence or absence of the LOCK # prefix. 
g. LOCK# is asserted during descriptor table accesses. 


Notes h through r apply to Intel386 DX Protected Virtual Address Mode only: 

h. Exception 13 fault (general protection violation) will occur if the memory operand in CS, DS, ES, FS or GS cannot be used 
due to either a segment limit violation or access rights violation. If a stack limit is violated, an exception 12 (stack segment 
limit violation or not present) occurs. 

i. For segment load operations, the CPL, RPL, and DPL must agree with the privilege rules to avoid an exception 13 fault 
(general protection violation). The segment’s descriptor must indicate “present” or exception 11 (CS, DS, ES, FS, GS not 
present). If the SS register is loaded and a stack segment not present is detected, an exception 12 (stack segment limit 
violation or not present) occurs. 

j. All segment descriptor accesses in the GDT or LDT made by this instruction will automatically assert LOCK # to maintain 
descriptor integrity in multiprocessor systems. 

k. JMP, CALL, INT, RET and IRET instructions referring to another code segment will cause an exception 13 (general 
protection violation) if an applicable privilege rule is violated. 

|. An exception 13 fault occurs if CPL is greater than 0 (0 is the most privileged level). 

m. An exception 13 fault occurs if CPL is greater than IOPL. 

n. The IF bit of the flag register is not updated if CPL is greater than IOPL. The IOPL and VM fields of the flag register are 
updated only if CPL = 0. 

o. The PE bit of the MSW (CRO) cannot be reset by this instruction. Use MOV into CRO if desiring to reset the PE bit. 

p. Any violation of privilege rules as applied to the selector operand does not cause a protection exception; rather, the zero 
flag is cleared. 

q. If the coprocessor’s memory operand violates a segment limit or segment access rights, an exception 13 fault (general 
protection exception) will occur before the ESC instruction is executed. An exception 12 fault (stack segment limit violation 
or not present) will occur if the stack limit is violated by the operand’s starting address. 

r. The destination of a JMP, CALL, INT, RET or IRET must be in the defined limit of a code segment or an exception 13 fault 
(general protection violation) will occur. 
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6.2 INSTRUCTION ENCODING 


6.2.1 Overview 


All instruction encodings are subsets of the general 
instruction format shown in Figure 6-1. Instructions 
consist of one or two primary opcode bytes, possibly 
an address specifier consisting of the “mod r/m’”’ 
byte and ‘“‘scaled index’’ byte, a displacement if re- 
quired, and an immediate data field if required. 


Within the primary opcode or opcodes, smaller en- 
coding fields may be defined. These fields vary ac- 
cording to the class of operation. The fields define 
such information as direction of the operation, size 
of the displacements, register encoding, or sign ex- 
tension. 


Almost all instructions referring to an operand in 
memory have an addressing mode byte following 
the primary opcode byte(s). This byte, the mod r/m 
byte, specifies the address mode to be used. Certain 
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encodings of the mod r/m byte indicate a second 


~ addressing byte, the scale-index-base byte, follows 


the mod r/m byte to fully specify the addressing 
mode. 


Addressing modes can include a displacement im- 
mediately following the mod r/m byte, or scaled in- 
dex byte. If a displacement is present, the possible 
sizes are 8, 16 or 32 bits. 


If the instruction specifies an immediate operand, 
the immediate operand follows any displacement 
bytes. The immediate operand, if specified, is always 
the last field of the instruction. 


Figure 6-1 illustrates several of the fields that can 
appear in an instruction, such as the mod field and 
the r/m field, but the Figure does not show all fields. 
Several smaller fields also appear in certain instruc- 
tions, sometimes within the opcode bytes them- 
selves. Table 6-2 is a complete list of all fields ap- 
pearing in the Intel886 DX instruction set. Further 
ahead, following Table 6-2, are detailed tables for 
each field. 


TTTTTTTT|TTTTTTTT| modTTTr/m| ss index base |d32 | 16| 8 | none data32 | 16 | 8 | none 


0O,7653:2 0 


765320 


“RIN ole MRE RR | alin chal aban aside OE es ee ea Lo 


opcode “mod r/m” 
(one or two bytes) byte 

(T represents an 
opcode bit.) 


a a 


Ne Se 


register and address 


address immediate 

byte displacement data 

(4, 2, 1 bytes (4, 2, 1 bytes 
or none) or none) 


mode specifier 


Figure 6-1. General Instruction Format 


Table 6-2. Fields within Intel386™ DX Instructions 


Field Name Number of Bits 


Specifies if Data is Byte or Full Size (Full Size is either 16 or 32 Bits 


Specifies Direction of Data Operation 


Specifies if an Immediate Data Field Must be Sign-Extended 


reg General Register Specifier 
mod r/m 


Address Mode Specifier (Effective Address can be a General Register) 


2 for mod; 
3 for r/m 


ss Scale Factor for Scaled Index Address Mode 


index 


General Register to be used as Index Register 


base General Register to be used as Base Register 


sreg2 
sreg3 


Segment Register Specifier for CS, SS, DS, ES 
Segment Register Specifier for CS, SS, DS, ES, FS, GS 


tttn For Conditional Instructions, Specifies a Condition Asserted 


or a Condition Negated 
Note: Table 6-1 shows encoding of individual instructions. 
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6.2.2 32-Bit Extensions of the 
Instruction Set 


With the Intel886 DX, the 8086/80186/80286 in- 
struction set is extended in two orthogonal direc- 
tions: 32-bit forms of all 16-bit instructions are added 
to support the 32-bit data types, and 32-bit address- 
ing modes are made available for all instructions ref- 
erencing memory. This orthogonal instruction set ex- 
tension is accomplished having a Default (D) bit in 
the code segment descriptor, and by having 2 prefix- 
es to the instruction set. 


Whether the instruction defaults to operations of 16 
bits or 32 bits depends on the setting of the D bit in 
the code segment descriptor, which gives the de- 
fault length (either 32 bits or 16 bits) for both oper- 
ands and effective addresses when executing that 
code segment. In the Real Address Mode or Virtual 
8086 Mode, no code segment descriptors are used, 
but a D value of 0 is assumed internally by the In- 
tel386 DX when operating in those modes (for 16-bit 
default sizes compatible with the 8086/80186/ 
80286). 


Two prefixes, the Operand Size Prefix and the Effec- 
tive Address Size Prefix, allow overriding individually 
the Default selection of operand size and effective 
address size. These prefixes may precede any op- 
code bytes and affect only the instruction they pre- 
cede. If necessary, one or both of the prefixes may 
be placed before the opcode bytes. The presence of 
the Operand Size Prefix and the Effective Address 
Prefix will toggle the operand size or the effective 
address size, respectively, to the value ‘‘opposite”’ 
from the Default setting. For example, if the default 
operand size is for 32-bit data operations, then pres- 
ence of the Operand Size Prefix toggles the instruc- 
tion to 16-bit data operation. As another example, if 
the default effective address size is 16 bits, pres- 
ence of the Effective Address Size prefix toggles the 
instruction to use 32-bit effective address computa- 
tions. 


These 32-bit extensions are available in all Intel386 
DX modes, including the Real Address Mode or the 
Virtual 8086 Mode. In these modes the default is 
always 16 bits, so prefixes are needed to specify 
32-bit operands or addresses. For instructions with 
more than one prefix, the order of prefixes is unim- 
portant. 


Unless specified otherwise, instructions with 8-bit 
and 16-bit operands do not affect the contents of 
the high-order bits of the extended registers. 


6.2.3 Encoding of Instruction Fields 


Within the instruction are several fields indicating 
register selection, addressing mode and so on. The 
exact encodings of these fields are defined immedi- 
ately ahead. 
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6.2.3.1 ENCODING OF OPERAND LENGTH (w) 
FIELD 


For any given instruction performing a data opera- 
tion, the instruction is executing as a 32-bit operation 
or a 16-bit operation. Within the constraints of the 
operation size, the w field encodes the operand size 
as either one byte or the full operation size, as 
shown in the table below. 


Operand Size 
During 16-Bit 
Data Operations 


Operand Size 
During 32-Bit 
Data Operations 


6.2.3.2 ENCODING OF THE GENERAL 
REGISTER (reg) FIELD 


The general register is specified by the reg field, 
which may appear in the primary opcode bytes, or as 
the reg field of the ‘“‘mod r/m” byte, or as the r/m 

field of the “mod r/m’’ byte. 


Encoding of reg Field When w Field 
is not Present in Instruction 


Register Selected | Register Selected 
During 16-Bit During 32-Bit 
Data Operations | Data Operations 


reg Field 


Encoding of reg Field When w Field 
is Present in Instruction 


Register Specified by reg Field 
During 16-Bit Data Operations: 


Function of w Field 


Register Specified by reg Field 
During 32-Bit Data Operations 


Function of w Field . 


6.2.3.3 ENCODING OF THE SEGMENT 
REGISTER (sreg) FIELD 


The sreg field in certain instructions is a 2-bit field 
allowing one of the four 80286 segment registers to 
be specified. The sreg field in other instructions is a 
3-bit field, allowing the Intel386 DX FS and GS seg- 
ment registers to be specified. 


2-Bit sreg2 Field 


Segment 
Register 
Selected 


2-Bit 
sreg2 Field 


3-Bit sreg3 Field 


Segment 
Register 
Selected 


ES 
CS 


3-Bit 
sreg3 Field 


SS 

DS 

FS 

GS 
do not use 
do not use 
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6.2.3.4 ENCODING OF ADDRESS MODE 


Except for special instructions, such as PUSH or 
POP, where the addressing mode is pre-determined, 
the addressing mode for the current instruction is 
specified by addressing bytes following the primary 
opcode. The primary addressing byte is the “mod 
r/m” byte, and a second byte of addressing informa- 
tion, the “‘s-i-b” (scale-index-base) byte, can be 
specified. 


The s-i-b byte (scale-index-base byte) is specified 
when using 32-bit addressing mode and the “mod 
r/m” byte has r/m = 100 and mod = 00, 01 or 10. 
When the sib byte is present, the 32-bit addressing 
mode is a function of the mod, ss, index, and base 
fields. 


The primary addressing byte, the ‘‘mod r/m”’ byte, 
also contains three bits (shown as TTT in Figure 6-1) 
sometimes used as an extension of the primary op- 
code. The three bits, however, may also be used as 
a register field (reg). 


When calculating an effective address, either 16-bit 
addressing or 32-bit addressing is used. 16-bit ad- 
dressing uses 16-bit address components to calcu- 
late the effective address while 32-bit addressing 
uses 32-bit address components to calculate the ef- 
fective address. When 16-bit addressing is used, the 
“mod r/m”’ byte is interpreted as a 16-bit addressing 
mode specifier. When 32-bit addressing is used, the 
“mod r/m’’ byte is interpreted as a 32-bit addressing 
mode specifier. 


Tables on the following three pages define all en- 


codings of all 16-bit addressing modes and 32-bit 
addressing modes. 


s:474 
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Encoding of 16-bit Address Mode with “mod r/m” Byte 


Effective Address Effective Address 


DS:[BX + SI] DS:[BX + SI+ d16] 
DS:[BX+ DI] DS:[BX + DI+d16] 
SS:[BP + Si] SS:[BP + SI+d16] 
SS:[BP+ DI] SS:[BP + DI+ d16] 
DS: [SI] DS:[S!+ d16] 

DS:[DI] DS:[DI+ d16] 

DS:d16 SS:[BP + d16] 
DS: [Bx] DS:[BX + d16] 


DS:[BX + SI+ d8] 
DS:[BX + DI + d8] 
SS:[BP + SI+ d8] 
SS:[BP + DI+ d8] 
DS:[SI + d8] 
DS:[DI+ d8] 
SS:[BP + d8] 
DS:[BX + d8] 


register—see below 
register—see below 
register—see below 
register—see below 
register—see below 
register—see below 
register—see below 
register—see below 


Register Specified by r/m 
During 16-Bit Data Operations 


Function of w Field 


Register Specified by r/m 
During 32-Bit Data Operations 


Function of w Field 
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Encoding of 32-bit Address Mode with “mod r/m” byte (no “s-i-b” byte present): 


Effective Address Effective Address 


DS: [EAX] DS:[EAX + d32] 
DS:[ECX] DS:[ECX + d32] 
DS: [EDX] DS:[EDX + d32] 
DS:[EBX] ! DS:[EBX + d32] 
s-i-b is present s-i-b is present 
DS:d32 SS:[EBP + d32] 
DS:[ESI] DS:[ESI + d32] 

DS:[EDI) DS:[EDI+ d32] 


DS:[EAX + d8] register—see below 
DS:[ECX + d8] register—see below 
DS:[EDX + d8] register—see below 
DS:[EBX + d8] register—see below 

s-i-b is present register—see below 
SS:[EBP + d8] register—see below 
DS: [ESI + d8] register—see below 
DS:[EDI + d8] register—see below 


Register Specified by reg or r/m 
during 16-Bit Data Operations: 


. function of w field 


Register Specified by reg or r/m 
during 32-Bit Data Operations: 


function of w field 
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Encoding of 32-bit Address Mode (“mod r/m” byte and “s-i-b” byte present): 


Effective Address 


DS:[EAX + (scaled index)] 
DS:[ECX + (scaled index)] 
DS:[EDX + (scaled index)] 
DS:([EBX + (scaled index)] 
SS:[ESP + (scaled index)] 
DS:[d32 + (scaled index)] 
DS:[ES!I + (scaled index)] 
DS:[EDI + (scaled index)] 


DS:[EAX + (scaled index) + d8] 
DS:[ECX + (scaled index) + d8] 
DS:[EDX + (scaled index) + d8} 
DS:[EBX + (scaledindex) + d8] 
SS:[ESP + (scaledindex) + d8] 
SS:[EBP + (scaledindex) + d8] 
DS:([ESI + (scaledindex) + d8] 
DS:[EDI + (scaledindex) + d8] 


DS:[EAX + (scaled index) 
DS:[ECX + (scaled index) 
DS:[EDX + (scaled index) 
DS:[EBX + (scaled index) 
SS:[ESP + (scaled index) 
SS:[EBP + (scaled index) 
DS:[ES! + (scaled index) 
DS:[EDI + (scaled index) 


d32] 


+++4¢+4+4++4 


NOTE: 
Mod field in “mod r/m” byte; ss, index, base fields in 
“‘s-i-b” byte. 
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00 


01 
10 
11 


EAX 
ECX 
EDX 


EBX 
no index reg** 
ESP 
ES! 
EDI 


**IMPORTANT NOTE: 

When index field is 100, indicating ‘‘no index register,” then 
ss field MUST equal 00. If index is 100 and ss does not 
equal 00, the effective address is undefined. 


fa 
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6.2.3.5 ENCODING OF OPERATION DIRECTION 
(d) FIELD 


In many two-operand instructions the d field is pres- 
ent to indicate which operand is considered the 
source and which is the destination. 


id Direction of Operation 


Register/Memory <- - Register 
“reg” Field Indicates Source Operand; 

‘mod r/m” or “mod ss index base” Indicates 
Destination Operand 


Register <- - Register/Memory 
“reg” Field Indicates Destination Operand; 

“mod r/m’”’ or ‘“‘mod ss index base” Indicates 
Source Operand 


6.2.3.6 ENCODING OF SIGN-EXTEND (s) FIELD 


The s field occurs primarily to instructions with im- 
mediate data fields. The s field has an effect only if 
the size of the immediate data is 8 bits and is being 
placed in a 16-bit or 32-bit destination. 


Effect on Effect on 
Immediate Data8 _|Immediate Data 16/3 


1|Sign-Extend Data8 to Fill 
16-Bit or 32-Bit Destination 


6.2.3.7 ENCODING OF CONDITIONAL TEST 
(tttn) FIELD 


For the conditional instructions (conditional jumps 
and set on condition), tttn is encoded with n indicat- 
ing to use the condition (n= 0) or its negation (n= 1), 
and ttt giving the condition to test. 
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No Overflow 

Below/Not Above or Equal 
Not Below/Above or Equal 
Equal/Zero 

Not Equal/Not Zero 

Below or Equal/Not Above 


Not Below or Equal/Above 

Sign 

Not Sign 

Parity/Parity Even 

Not Parity/Parity Odd 

Less Than/Not Greater or Equal 
Not Less Than/Greater or Equal 


6.2.3.8 ENCODING OF CONTROL OR DEBUG 
OR TEST REGISTER (eee) FIELD 


For the loading and storing of the Control, Debug 
and Test registers. 


When Interpreted as Control Register Field 


000 CRO 
010 CR2 
011 


Do not use any other encoding 
When Interpreted as Test Register Field 


110 TR6 
111 TR7 


Do not use any other encoding 
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Figure 7-1. Processor Module Dimensions 


7. DESIGNING FOR ICET¥-Intel386 
DX EMULATOR USE 


The Intel886 DX in-circuit emulator products are 
ICE-Intel386 DX 25 MHz or 33 MHz (both referred to 
as ICE-Intel386 DX emulator). The ICE-Intel386 DX 
emulator probe module has several electrical and 
mechanical characteristics that should be taken into 
consideration when designing the hardware. 


Capacitive loading: The ICE-Intel386 DX emulator 
adds up to 25 pF to each line. 


Drive requirement: The ICE-Intel886 DX emulator 
adds one standard TTL load on the CLK2 line, up to 
one advanced low-power Schottky TTL load per 
control signal line, and one advanced low-power 
Schottky TTL load per address, byte enable, and 
data line. These loads are within the probe module 
and are driven by the probe’s Intel886 DX compo- 
nent, which has standard drive and loading capabili- 
ty listed in the A.C. and D.C. ae RnOH Tables in 
Sections 9.4 and 9.5. 


Power requirement: For noise immunity the ICE-In- 
tel386 DX emulator probe is powered by the user 
system. This high-speed probe circuitry draws up to 
1.5A plus the maximum Icc from the user Intel386 
DX component socket. 
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Intel386 DX location and orientation: The ICE-In- 
tel886 DX processor module, target-adaptor cable 
(which does not exist for the ICE-Intel386 DX 
33 MHz emulator), and the isolation board used for 
extra electrical buffering of the emulator initially, re- 
quire clearance as illustrated in Figures 7-1 and 7-2. 


Interface Board and CLK2 speed reduction: 
When the ICE-Intel386 DX emulator probe is first 
attached to an unverified user system, the interface 
board helps the ICE-Intel386 DX emulator function 
in user systems with bus faults (shorted signals, 
etc.). After electrical verification it may be removed. 
Only when the interface board is installed, the user 
system must have a reduced CLK2 frequency of 
25 MHz maximum. 


Cache coherence: The ICE-Intel386 DX emulator 
loads user memory by performing Intel886 DX com- 
ponent write cycles. Note that if the user system is 
not designed to update or invalidate its cache (if it 
has a cache) upon processor writes to memory, the 
cache could contain stale instruction code and/or 
data. For best use of the ICE-Intel886 DX emulator, 
the user should consider designing the cache (if any) 
to update itself automatically when processor writes 
occur, or find another method of maintaining cache 
data coherence with main user memory. 
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Figure 7-2. Processor Module, Target-Adapter Cable, and Isolation Board Dimensions 
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8. MECHANICAL DATA 8.2 PACKAGE DIMENSIONS AND 
MOUNTING 
8.1 INTRODUCTION The initial Intel386 DX package is a 132-pin ceramic 
pin grid array (PGA). Pins of this package are ar- 
In this section, the physical packaging and its con- ranged 0.100 inch (2.54mm) center-to-center, ina 
nections are described in detail. 14x14 matrix, three rows around. 


A wide variety of available sockets allow low inser- 
tion force or zero insertion force mountings, and a 
choice of terminals such as _ soldertail, surface 
mount, or wire wrap. Several applicable sockets are 
listed in Table 8.1. 


150 (3.807) 
.250 (6.345) 
.350 (8.883) 
450 (11.421) 
.550 (13.959) 
.650 (16.497) 
— .725 (18.401) 


.057 (1.269) — 
.725 (18.401) ) 
.650 (16.497) 
.550 (13.959) 
450 (11.421) 
.350 (8.883) 
.250 (6.345) 
.150 (3.807) 
050 (1.269) 


io: 


A A 2 a a ae aa ae ee 
eee 


CLL SLID MOBEMEOREIBEEEDAS 


oO OAIn oO Vn FF WwW NY 


.001 (0.025) R 


Oe f 4 8 4 ff en en 
. 


age 
BABVWBBWL{(+BBVVBVWV_(SBSB 
a ae ae ae ae ae a ae ae a a 


SWEDGE PIN 
STANDOFF .018 (0.47) 
(4) PLACES DIA TYP 


To) 
©® 
©® 
©©@ 
©® 
©® 
GOOG 
©® 
©® 
©®@ 
©® 
©® 
©® 
OXO} 


a Se SS SS SR SS. SR SOR OR SRY 


.020 (0.508) ; .165 (4.189) 
MIN TYP 
.070 (1.777) DIA .110 (2.792) 
TYP BRAZE PAD 
1.450 (36.802) 
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Figure 8.1. 132-Pin Ceramic PGA Package Dimensions 
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Table 8.1. Several Socket Options for 132-Pin PGA 


* Low insertion force (LIF) soldertail 
55274-1 

* Amp tests indicate 50% reduction in insertion 
force compared to machined sockets 


Other socket options 

* Zero insertion force (ZIF) soldertail 
55583-1 

* Zero insertion force (ZIF) Burn-in version 
55573-2 


Amp incorporated 
(Harrisburg, PA 17105 U.S.A. 
Phone 717-564-0100) 


231630-45 
Cam handle locks in low profile position when substrate is installed (handle UP for 
open and DOWN for closed positions) 


courtesy Amp Incorporated 


Peel-A-Way Mylar and Kapton Peel-A-Way Carrier No. 132: 
Socket Terminal Carriers Kapton Carrier is KS132 


* Low insertion force surface Mylar Carrier is MS132 


wee idee ites _ Molded Plastic Body KS132 
Low insertion force soldertail is shown below: 


CS132-01TG 


Low insertion force wire-wrap 
CS132-02TG (two level) 
CS132-03TG (three-level) 


Low insertion force press-fit 
CS132-05TG 


Advanced Interconnections 
(5 Division Street 
Warwick, Ri 02818 U.S.A. 
Phone 401-885-0485) 


14x 14x 3ROWS 


231630-46 


231630-47 
courtesy Advanced Interconnections 
(Peel-A-Way Terminal Carriers 
U.S. Patent No. 4442938) 
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Table 8.1. Several Socket Options for 132-Pin PGA (Continued) 


PIN GRID ARRAY VisinPak Kapton Carrier A: Soldertail B: Soldertail 


DECOUPLING SOCKETS : 
* Low insertion force soldertail PKC Series 


0.125 length PGD-005-1A1 . ‘ 
Finish: Term/Contact  Tin- Pin Gad Artay 


Lead/Gold PGM (Plastic) or PPS 
Low insertion force soldertail (Glass Epoxy) Series 
0.180 length PGD-005-1B1 

Finish: Term/Contact:  Tin- 

Lead/Gold 


Low insertion 3 level Wire/ 
Wrap PGD-005-1C1_ Finish: 
Term/Contact Tin-Lead/Gold 
er 


Includes 0.10 uF & 1.0 pF 
Decoupling Capacitors 
ene, a ae 


AUGAT INC. 
33 Perry Ave., P.O. Box 779 Attleboro, MA 02703 C: Soldertail 1.450 £ 0.020 
TECHNICAL INFORMATION: (508) 222-2202 
CUSTOMER SERVICE: (508) 699-9800 


ca 0.100 TYP. 


231630-86 


Low insertion force socket soldertail 
(for production use) 
2XX-6576-00-3308 (new style) 
2XX-6003-00-3302 (older style) 


Zero insertion force soldertail 
(for test and burn-in use) 
2XX-6568-00-3302 


Textool Products 

Electronic Products Division/3M 
(1410 West Pioneer Drive 
Irving, Texas 75601 U.S.A. 
Phone 214-259-2676) l 

courtesy Textool Products/3M 231630-48 
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8.3 PACKAGE THERMAL The PGA case temperature should be measured at 
SPECIFICATION the center of the top surface opposite the pins, as in 
Figure 8.2. 


The Intel386 DX is specified for operation when 
case temperature is within the range of 0°C-85°C. 
The case temperature may be measured in any envi- 
ronment, to determine whether the Intel386 DX is 
within specified operating range. 


MEASURE PGA CASE TEMPERATURE 
AT CENTER OF TOP SURFACE 


132— PIN PGA 


231630-36 


Figure 8.2. Measuring Intel386™ DX PGA Case Temperature 
Table 8.2. Intel386™ DX PGA Package Thermal Characteristics 


Thermal Resistance — °C/Watt 


Airflow — ft./min (m/sec) : 
Parameter 400 600 800 
(2.03) (3.04) (4.06) 


6 Junction-to-Case 
(case measured 
as Fig. 8-2) 

6 Case-to-Ambient 
(no heatsink) 


6 Case-to-Ambient 
(with omnidirectional 
heatsink) 


: 231630-72 
6 Case-to-Ambient 


(with unidirectional 
heatsink) 


NOTES: 

1. Table 8.2 applies to Intel386™ DX PGA 3. Aj.cap = 4°C/w (approx.) 

plugged into socket or soldered directly 0).pin = 4°C/w (inner pins) (approx.) 

into board. 0).pin = 8°C/w (outer pins) (approx.) 

2. Oya = Ajo + Oca. 4.Ta = Tc — P * Oca (ambient temperature) 
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9. ELECTRICAL DATA 


9.1 INTRODUCTION 


The following sections describe recommended elec- 
trical connections for the Intel386 DX, and its electri- 
cal specifications. 


9.2 POWER AND GROUNDING 


9.2.1 Power Connections 


The Intel386 DX is implemented in CHMOS III and 
CHMOS IV technology and has modest power re- 
quirements. However, its high clock frequency and 
72 output buffers (address, data, control, and HLDA) 
can cause power surges as multiple output buffers 
drive new signal levels simultaneously. For clean on- 
chip power distribution at high frequency, 20 Vcc 
and 21 Vss pins separately feed functional units of 
the Intel386 DX. 


Power and ground connections must be made to all 
external Voc and GND pins of the Intel886 DX. On 
the circuit board, all Vcc pins must be connected on 
a Vcc plane. All Vss pins must be likewise connect- 
ed on a GND plane. 


9.2.2 Power Decoupling 
Recommendations 


Liberal decoupling capacitance should be placed 
near the Intel3886 DX. The Intel386 DX driving its 
32-bit parallel address and data buses at high fre- 
quencies can cause transient power surges, particu- 
larly when driving large capacitive loads. 


Low inductance capacitors and interconnects are 
recommended for best high frequency electrical per- 
formance. Inductance can be reduced by shortening 
circuit board traces between the Intel386 DX and 


s | 
intel. 
decoupling capacitors as much as possible. Capaci- 


tors specifically for PGA packages are also commer- 
cially available, for the lowest possible inductance. 


9.2.3 Resistor Recommendations 


The ERROR # and BUSY # inputs have resistor pull- 
ups of approximately 20 KO. built-in to the Intel386 
DX to keep these signals negated when no Intel387 
DX coprocessor is present in the system (or tempo- 
rarily removed from its socket). The BS16# input 
also has an internal pullup resistor of approximately 
20 KN, and the PEREQ input has an internal pull- 
down resistor of approximately 20 KN. 


In typical designs, the external pullup resistors 
shown in Table 9-1 are recommended. However, a 
particular design may have reason to adjust the re- 
sistor values recommended here, or alter the use of 
pullup resistors in other ways. 


9.2.4 Other Connection 
Recommendations 


For reliable operation, always connect unused in- 
puts to an appropriate signal level. N.C. pins should 
always remain unconnected. 


Particularly when not using interrupts or bus hold, 
(as when first prototyping, perhaps) prevent any 
chance of spurious activity by connecting these as- 
sociated inputs to GND: 


Pin Signal 
B7 INTR 
B8 NMI 
D14 HOLD 


If not using address pipelining, pullup D13 NA# to 
Vcc: 


If not using 16-bit bus size, pullup C14 BS16# to 
Voc: 


Pullups in the range of 20 KN. are recommended. 


Table 9-1. Recommended Resistor Pullups to Vcc 
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Pin and Signal Pullup Value 


E14 ADS# 20 KA +10% 
C10 LOCK# 20 KN. +10% 


Lightly Pull ADS # Negated 
During Intel386 DX Hold 
Acknowledge States 


Lightly Pull LOCK # Negated 
During Intel386 DX Hold 
Acknowledge States 


intel. 


9.3 MAXIMUM RATINGS 
Table 9-2. Maximum Ratings 


Intel386™ DX 
20, 25, 33 MHz 
Maximum Rating 


Storage Temperature —65°C to + 150°C 
Case Temperature Under Bias —~65°C to + 110°C 
Supply Voltage with Respect to Vss| —0.5V to + 6.5V 

Voltage on Other Pins —0.5V to Voc + 0.5V 


Parameter 


9.4 D.C. SPECIFICATIONS 


Intel386™ DX MICROPROCESSOR 


Table 9-2 is a stress rating only, and functional oper- 
ation at the maximums is not guaranteed. Functional 
operating conditions are given in 9.4 D.C. Specifica- 
tions and 9.5 A.C. Specifications. 


Extended exposure to the Maximum Ratings may af- 
fect device reliability. Furthermore, although the In- 
tel386 DX contains protective circuitry to resist dam- 
age from static electric discharge, always take pre- 
cautions to avoid high static voltages or electric 
fields. 


Functional Operating Range: Voc = 5V +5%; Tcase = 0°C to 85°C 


Table 9-3. Intel386™ DX D.C. Characteristics 


Parameter 


VIHC CLK2 Input High Voltage 
20 MHz 
25 MHz and 33 MHz 


VOL Output Low Voltage 
lo. = 4mA: A2-A31, DO-D31 
lo. = 5mA: BEO#-BE3#, W/R#, 
D/C#, M/IO#, LOCK#, ADS#, HLDA 


VOH Output High Voltage 
lon = 1 mA: A2-A31, DO-D31 
lon = 0.9 mA: BEO#-BE3#, W/R#, 


NOTES: 
1. The min value, —0.3, is not 100% tested. 
2. PEREQ input has an internal pulldown resistor. 


D/C#, M/IO#, LOCK#, ADS#, HLDA 


ly Input Leakage Current 
(For All Pins except BS16#, PEREQ, BUSY #, 
and ERROR#) ~ 
lH Input Leakage Current 
_|(PEREQ Pin) 
He Input Leakage Current 
(BS16#, BUSY #, and ERROR # Pins) 
Output Leakage Current 
Icc Supply Current 


CLK2 = 40 MHz: with 20 MHz Intel386™ DX 
CLK2 = 50 MHz: with 25 MHz Intel386™ DX 
CLK2 = 66 MHz: with 33 MHz Intel386™ DX 


Input or |/O Capacitance 
Output Capacitance 
CLK2 Capacitance 


Intel386™ DX 
20 MHz, 25 MHz, 
33 MHz 


| Min | Max | 
| -03 | 08 | 
| 2.0 [Voc + 0.3 
ce a ae Se 
3.7 
2.4 
2.4 


Test 
Conditions 


QO 

O 
4. 
=) 


= 
> 
ad 
pt 
Ol 
< 
TAN 
< 
O 
a 
= 
l\ 
< 
?) 
?) 


0.8) Vcc + 0.3 
Voc + 0.3 
0.45 
0.45 


15 


aes 
a 
ae 
psi 
ee 


> 
< 
= 
I 
Nm 
at 
< 
Zz 
y= 
© 
{ 


| 
a 
io) 


A |Vi,. = 0.45 (Note 3) 


+ 
(Note 4) 
2 
= 
a 


1 
60 
20 
90 = 
~~ 40) «| pF Fo = 1 MHz 


p 


Oo i0i3 33 
aiRal2 23 | 
enek ey 
ome we 
44-4 
ee SS SS 
a @ i © i @) 
t i<4 
G NP PM 
oO & © 
od © 
333 
>>> 


3. BS16#, BUSY# and ERROR # inputs each have an internal pullup resistor. 
4. CHMOS IV Technology (CHMOS III Max loco at 20 MHz, 25 MHz = 500 mA, 550 mA). 
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9.5 A.C. SPECIFICATIONS 


9.5.1 A.C. Spec Definitions 


The A.C. specifications, given in Tables 9-4, 9-5, and 
9-6, consist of output delays, input setup require- 
ments and input hold requirements. All A.C. specifi- 
cations are relative to the CLK2 rising edge crossing 
the 2.0V level. 


A.C. spec measurement is defined by Figure 9-1. In- 
puts must be driven to the voltage levels indicated 
by Figure 9-1 when A.C. specifications are mea- 
sured. Intel386 DX output delays are specified with 
minimum and maximum limits, measured as shown. 
The minimum Intel386 DX delay times are hold times 


cLK2 [ 


OUTPUTS 
(A2=A31,D/C#, BEO#—BE3¥, 
ADS#, M/lO#, W/R#, LOCK#, HLDA) 


OUTPUTS 
(D0=-D31) 


INPUTS a (ie RE 
NOE SY_VALID INPUT _1.5VKX OY 


(NA#, BS16#, 
INTR, NMI) 


INPUTS 
(READY#, HOLD, BUSY#, 
ERROR#, PEREQ, D0=D31) 


LEGEND: 


VALID OUTPUT * TOV 


BS 

intel. 
provided to external circuitry. Intel886 DX input set- 
up and hold times are specified as minimums, defin- 
ing the smallest acceptable sampling window. Within 


the sampling window, a synchronous input signal 
must be stable for correct Intel386 DX operation. 


* Outputs NA#, W/R#, D/C#, M/IO#, LOCK#, 


BEO#-BE3#, A2-A31 and HLDA only change at 
the beginning of phase one. DO-D31 (write cycles) 
only change at the beginning of phase two. The 
READY #, HOLD, BUSY#, ERROR#, PEREQ and 
DO-D31 (read cycles) inputs are sampled at the be- 
ginning of phase one. The NA#, BS16#, INTR and 
NMI inputs are sampled at the beginning of phase 
two. 


ever 


SV VALID OUTPUT n+1 


© 
VALID INPUT 


Moet te 


@- MAXIMUM OUTPUT DELAY SPEC. 
©- MINIMUM OUTPUT DELAY SPEC. 
©- MINIMUM INPUT SETUP SPEC. 
©- MINIMUM INPUT HOLD SPEC. 
231630-37 
NOTES: 


1. Input waveforms have tr < 2.0 ns from 0.8V to 2.0V. 
2. See section 9.5.8 for typical output rise time versus load capacitance. 


Figure 9-1. Drive Levels and Measurement Points for A.C. Specifications 
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9.5.2 A.C. Specification Tables 
Functional Operating Range: Voc = 5V +5%; Tcase = O0°C to + 85°C 


, Table 9-4. 33 MHz Intel386™ DX A.C. Characteristics 


33 MHz 
Parameter Intel386™ DX 


[~[operatng Frequency ——~S~S~d—s fa [wre] | Hao CLKe Freauenoy 
touareg ——SSsS~=~*~—~s AS es Tw ww] 
za [oixerigntine ——=S~=~sr aa | fof 
tz [cuKerightime ——=—SsS~=~sr a | ids fe fata 
fa [ciKetowTime ——S—S~sr aa | is fos fat 
fa [ciKetowtme ——S~s a | id os fos foto 
fa [oixeraitme ————*«| «dt | ns | 90 [arvinoav noted) 
[cukerisetime——SSS~*sS*dC ns | 9 [oO TV NOLO) 


5 
6 
7 


ae 
ae 
: 
| 2 

: 


t 
t 
t 
t 


t10a ADS # Valid Delay 
t11 W/R#, M/IO#, D/C#, ADS# Float Delay 


10 
ti2 
t12a DO-D31 Write Data Hold Time 
ti3 DO-D31 Float Delay 4 
t14 HLDA Valid Delay 4 
t16 
t18 
0 


DO-D31 Write Data Valid Delay 


NA# Hold Time 2 


2 


eed 
pee 
aed 
16 [NA#SetupTime | 
a 
za 
ee 
a 


t2 
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9.5.2 A.C. Specification Tables (Continued) 
Functional Operating Range: Vcc = 5V +5%; Tcase = 0°C to +85°C 


Table 9-4. 33 MHz Intel386™ DX A.C. Characteristics (Continued) 


33 MHz 
Parameter Intel386™ DX 


Tat__| po-petReedseuptme | s | [wle] 

Tiae | 0-pet Read Hoisting |e |_| ns 

ras | woupseuptme St P 

a 
CNMLINTR Setup Tine 


NMI, INTR Setup Time 


PEREQ, ERROR #, BUSY # Setup Time 


hs) : 

28 : 

: 

| 

Tigo | PEREQ, ERROR, BUSY# Hold Time 


NOTES: 


1. Float condition occurs when maximum output current becomes less than I_o in magnitude. Float delay is not 100% 
tested. 

2. These inputs are allowed to be asynchronous to CLK2. The setup and hold specifications are given for testing purposes, 
to assure recognition within a specific CLK2 period. 

3. Rise and fall times are not tested. 

4. Min. time not 100% tested. 
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9.5.2 A.C. Specification Tables (Continued) 
Functional Operating Range: Voc = 5V +5%; Tcase = 0°C to +85°C 


Table 9-5. 25 MHz Intel386™ DX A.C. Characteristics 


25 MHz 
Parameter Intel386™ DX Notes 


[operating Femency ————*dt|28 [wre| | nator cuce Frequency 
ii loweread —SSS~=~srC tes mw es] 
za [ocuxerigntme ——=S=~dsi? | ido foley 
iz [cuxerightime __———S«dt | ds fooler 

7 | [releslate 


sa i ote 
So Gin yo Te ele 
CO 0 NN BOG 
Ce a RS Ce ae 
CM a a Ree 
7 |A2-A31FloatDelay | 4 | 90 | ns | 96 |(Notet) 
Ce ar 
ma ake, ak ae 
is [esve-eess, core Bento fa | ebm [oe lfong 
tio [ wine, tno, CVGe,aDSe VakiDamy| «| 21 | m [08], = sop 
i, [wns, woe. trcs, merronbeel 1 aa; Teed aninaed oe 
oa oe eT 
aa a OT 
13 |D0-D3tFloatDelay | 4 | 22 | ns | 9-6 | (Note) 
Co a ae OEE Oe 

rs 

i crs 
17 i cns_ 
t18 i Lins 

i pte te. |e 

120 Hons | 
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9.5.2 A.C. Specification Tables (Continued) 
Functional Operating Range: Voc = 5V +5%; Tcase = 0°C to +85°C 


Table 9-5. 25 MHz Intel386™ DX A.C. Characteristics (Continued) 


DO-D31 Read Setup Time 
DO-D31 Read Hold Time 
HOLD Setup Time 


RESET Setup Time 


jt 
to 
jt24 | HOLDHoldTime 
(26s | 
p26 
ae 
(120 
190 


NOTES: 


1. Float condition occurs when maximum output current becomes less than |I,o in magnitude. Float delay is not 100% 
tested. 
2. These inputs are allowed to be asynchronous to CLK2. The setup and hold specifications are given for testing purposes, 
to assure recognition within a specific CLK2 period. 
3. Symbol Parameter Min 

To = 0°C t30 PEREQ, ERROR#,BUSY# HoldTime 4 

To = +85°C t30 PEREQ, ERROR#, BUSY# HoldTime 5 
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9.5.2 A.C. Specification Tables (Continued) 
Functional Operating Range: Vcc = 5V +5%; Tcase = 0°C to +85°C 


Table 9.6. 20 MHz Intel386™ DX A.C. Characteristics 


20 MHz 
Parameter Intel386™ DX 


Operating Frequency 


poo 
Toukereod «Y= 
oucztighTine | 8 
| 
ae 
Ps 


BEO#-BE3#, LOCK# 
Valid Delay 
BEO#-BE3#, LOCK# 
Float Delay 

W/R#, M/IO#, D/C#, 
ADS # Valid Delay 
W/R#, M/IO#, D/C#, 

ADS # Float Delay 

DO-D31 Write Data 

Valid Delay 

DO-D31FloatDelay | 4 | 27 
HLDA Valid Delay ee ee 


= 
a8 


G | @® 
oO 


id) id) ide) i¢) 


1e2) 


tates saps | 3 
Tastee HoTine [21 
READY Hola Time | 4 


DO-D31 Read 11 
Setup Time 
too DO-D31 Read 
Hold Time 


HOLD Setup Time | 17 
a. 
we 


akakane 
Ahi ]L ART RR 


: 
ph 


a 


. 
a 


© © 
a= cf 


- 
a 


HOLD Hold Time 
RESET Setup Time 


“% 
ae | 
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9.5.2 A.C. Specification Tables (Continued) 
Functional Operating Range: Voc = 5V +5%; Tcase = 0°C to +85°C 


Table 9-6. 20 MHz Intel386™ DX A.C. Characteristics (Continued) 


20 MHz Ref 
Parameter Intel386™ DX Fig. Notes 


RESET Hold Time a | 


Sr BS. 

me [ea | aa 
a 

Paul Beets Se 


i } 7 
| -4 
PEREQ, ERROR#, BUSY # -4 (Note 2) 
Setup Time 
PEREQ, ERROR#, BUSY # 9-4 (Note 2) 
Hold Time : 
NOTES: 


1. Float condition occurs when maximum output current becomes less than l_o in magnitude. Float delay is not 100% 
tested. 

2. These inputs are allowed to be asynchronous to CLK2. The setup and hold specifications are given for testing purposes, 
to assure recognition within a specific CLK2 period. 


Twin [Mae 

et 

. arse Wa 
TwwuintRHoldtime [16 [| ns | 4 | (Woto2) 

ae 
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9.5.3 A.C. Test Loads 9.5.4 A.C. Timing Waveforms 


Intel386 DX CPU 
OUTPUT : 


q 


231630-38 
Cy. = 120 pF on A2-A31, DO-D31 
C. = 75 pF on BEO#-BE3#, W/R#, M/IO#, D/C#, ADS#, 
LOCK #, HLDA 
C_ includes all parasitic capacitances. 


Figure 9-2. A.C. Test Load 


CLK2 [ 


69) 
READY# | AY. GE NN 


@—-|@ 
Hoo | NK | 
0-8 
Pn | eee et 
BUSY# @ —@—-|_ 
error’ | TQK TM 
—O—-@— 
Nad [ NY GG ED SS 
-O-- 3 
Bsie# | NV Ga ED \\) 
@ 
ats OY EE RD 
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Figure 9-4. Input Setup and Hold Timing 
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Tx 
$2 $1 $2 $1 
CLK2 3 
@)&) MIN MAX 
ae i VALID n RAK VALID n# 1 
W/R#, M/IO Oe eas on 
f eae [ VALID n RAK VALID n#1 
(6) MIN MAX 
A2=A31 l VALID nN RAY VALID n#1 
HLDA 
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Figure 9-5. Output Valid Delay Timing 


T1' 


NN, 
> ; 2) > ; oo 
wre 
po-p31[_ 
231630-79 231630-80 
Figure 9-5a. Write Data Valid Delay Timing Figure 9-5b. Write Data Hold Timing 
(25 MHz, 33 MHz) (25 MHz, 33 MHz) 


po-p31[_ VALID n '! VALID n +1 
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Figure 9-5c. Write Data Valid Delay Timing (20 MHz) 
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9.5.5 Typical Output Valid Delay Versus Load Capacitance 
at Maximum Operating Temperature (C; = 120 pF) 


= 
” 
c 
~ 
uJ 
Qa 
2 
oud 
< 
> 
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po | 
oO 
— 
= | 
Oo 


C, (picofarads) 
231630-77 


NOTE: 
This graph will not be linear outside of the C, range shown. 


9.5.6 Typical Output Valid Delay Versus Load Capacitance 
at Maximum Operating Temperature (C; = 75 pF) 


nom +9 
£ nom +6 
> 
: 
ra) nom+3 
i 
ea | 
< 
> 
= nom 
=> 
a 
Ke 
> 
ro) 
nom=3 
nom =6 75 100 125 150 


C, (picofarads) 
- 231630-82 


NOTE: 
This graph will not be linear outside of the C_ range shown. 
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9.5.7 Typical Output Valid Delay Versus Load Capacitance 
at Maximum Operating Temperature (C; = 50 pF) 
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NOTE: 
This graph will not be linear outside of the C_ range shown. 


9.5.8 Typical Output Rise Time Versus Load Capacitance 
at Maximum Operating Temperature 
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NOTE: 
This graph will not be linear outside of the C, range shown. 
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CLK2 [ 


BEO#-BE3¥#, 
LOCK 


W/R#, M/10#, 
D/C#, ADS# 


A2-A31 [ 


co-os1 [ eres pees 


ALSO APPLIES TO DATA FLOAT WHEN WRITE 
CYCLE IS FOLLOWED BY READ OR IDLE 


fromm bee (a 7 
“| in ANNE 


HLDA [ 


231630-42 


Figure 9-6. Output Float Delay and HLDA Valid Delay Timing 


INITIALIZATION SEQUENCE ——————> 
$2 OR ¢1 


231630-43 


The second internal processor phase following RESET high-to-low transition (provided tos and tog are met) is $2. 


Figure 9-7. RESET Setup and Hold Timing, and Internal Phase 
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10. Revision History 


This Intel886 DX data sheet, version -005, contains updates and improvements to previous versions. A revi- 
sion summary is listed here for your convenience. 


The sections significantly revised since version -001 are: 


2.9.6 

2.9.7 

2.11.2 

2.12 

3.1 

4.4.3.3 

Figures 4-15a, 4-15b 
4.6.4 

4.6.6 


5.6 

5.8 

5.6.1 

Table 6-3 

i. 

Figures 7-8, 7-9, 7-10 
6.2.3.4 


Sequence of exception checking table added. 
Instruction restart revised. 

TLB testing revised. 

Debugging support revised. 

LOCK prefix restricted to certain instructions. 

|1/O privilege level and I/O permission bitmap added. 
|/O permission bitmap added. 

Protection and |/O permission bitmap revised. 


Entering and leaving virtual 8086 mode through task switches, trap and interrupt 
gates, and IRET explained. 


Self-test signature stored in EAX. 

Coprocessor interface description added. 

Software testing for coprocessor presence added. 

PGA package thermal characteristics added. 

Designing for ICE-Intel386 revised. 

ICE-Intel386 clearance requirements added. 

Encoding of 32-bit address mode with no “‘sib” byte corrected. 


The sections significantly revised since version -002 are: 


Table 2-5 
Figure 4-15a 
Figure 5-28 
5.7 

9.4 

9.5 

Table 6-1 


Interrupt vector assignments updated. 

Bit_.map__offset must be less than or equal to DFFFH. 

Intel386 DX outputs remain in their reset state during self-test. 
Component and revision identifier history updated. 

20 MHz D.C. specifications added. 

16 MHz A.C. specifications updated. 20 MHz A.C. specifications added. 
Clock counts updated. 


The sections significantly revised since version -003 are: 


Table 2-6b 

2.9.8 

Figure 4-5 

5.4.3.4 

Figures 5-16, 5-17, 
5-19, 5-22 

9.5 
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Interrupt priorities 2 and 3 interchanged. 

Double page faults do not raise double fault exception. 

Maximum-sized segments must have segments Base;; 9 = 0. 

BS16# timing corrected. 

BS16# timing corrected. BS16# must not be asserted once NA# has been 
sampled asserted in the current bus cycle. 


16 MHz and 20 MHz A.C. specifications revised. All timing parameters are now 
guaranteed at 1.5V test levels. The timing parameters have been adjusted to 
remain compatible with previous 0.8V/2.0V specifications. 
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The sections significantly revised since version -004 are: 


Chapter 4 25 MHz Clock data included. 

Table 2-4 Segment Register Selection Rules updated. 

5.4.4 Interrupt Acknowledge Cycles discussion corrected. 

Table 5-10 Additional Stepping Information added. 

Table 9-3 lcc values updated. 

9.5.2 Table for 25 MHz A.C. Characteristics added. A.C. Characteristics tables reor- 
dered. 

Figure 9-5 Output Valid Delay Timing Figure reconfigured. Partial data now provided in addi- 
tional Figures 9-5a and 9-5b. 

Table 6-1 Clock counts updated and formats corrected. 


The sections significantly revised since version -005 are: 


Table of Contents Simplified. 

Chapter 1 Pin Assignment. 

2.3.6 Control Register 0. 

Table 2-4 Segment override prefixes possible. 
Figure 4-6 Note added. 

Figure 4-7 Note added. 

5.2.3 Data bus state at end of cycle. 
5.2.8.4 Coprocessor error. 

5.6.3 Bus activity during and following reset. 
Figure 5-28 ERROR #. 

Chapter 6 Moved forward in datasheet. 
Chapter 7 Moved forward in datasheet. 
Chapter 8 Upgraded to chapter. 

Table 9-3 25 MHz Icc Typ. value corrected. 
Table 9-3 33 MHz D.C. Specifications added. 
Table 9-4 33 MHz A.C. Specifications added. 
Figure 9-5 t8a and t10a added. 

Figure 9-5c Added. 

9.5.6 Added derating for C_ = 75 pF. 
9.5.7 Added derating for CL = 50 pF. 
Figure 9.6 t8a and t10a added. 


The sections significantly revised since version -006 are: 


2.3.4 Alignment of maximum sized segments. 

2.9.8 Double page faults do not raise double fault exception. 
5.5.3 ERROR# and BUSY # sampling after RESET. 

Figure 5-21 | BS16# timing altered. 

Figure 5-26 READY # timing altered. 

Figure 5-28 ERROR # timing corrected. 

6.2.3.1 Corrected Encoding of Register Field Chart. 

Chapter 7 Updated ICE-Intel386 DX information. 

9.5.2 Remove preliminary stamp on 25 MHz A.C. Specifications. 
9.5.2 Remove preliminary stamp on 33 MHz A.C. Specifications. 
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The sections significantly revised since version -007 are: 


Table of Contents 
Figure 5-15 
Figure 5-22 

6.1 

Table 6-1 

Table 6-1 

Table 8-2 

Table 8-2 


Page numbers revised. 

BS16# timing altered. 

Previous cycle, T2 changed to Idle cycle, Ti. 

Note about wait states added. 

Opcodes for AND, OR, and XOR instructions corrected. 

Bits 3, 4, and 5 of the “mod r/m”’ byte corrected for the LTR instruction. 
Reference to Figure 6-4 should be reference Figure 8-2. 

Note #4 added. 


The sections significantly revised since version -008 are: 


Table 9-3 
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20, 25, 33 MHz Icc specifications updated. 
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32-BIT CHMOS MICROPROCESSOR WITH 
INTEGRATED MEMORY MANAGEMENT 
(PQFP SUPPLEMENT) 


m Flexible 32-Bit Microprocessor 
— 8, 16, 32-Bit Data Types 
— 8 General Purpose 32-Bit Registers 


m@ Very Large Address Space 
— 4 Gigabyte Physical 
— 64 Terabyte Virtual 
— 4 Gigabyte Maximum Segment Size 


m@ Integrated Memory Management Unit 
— Virtual Memory Support 
— Optional On-Chip Paging 
— 4 Levels of Protection 
— Fully Compatible with 80286 


m Object Code Compatible with All 8086 
Family Microprocessors 


@ Virtual 8086 Mode Allows Running of 


= Optimized for System Performance 
— Pipelined Instruction Execution 
— On-Chip Address Translation Caches 
— 20, 25 and 33 MHz Clock 
— 40, 50 and 66 Megabytes/Sec Bus 
Bandwidth 


= Numerics Support via Intel387™ DX 
Math Coprocessor 


m Complete System Development 
Support 
— Software: C, PL/M, Assembler 
System Generation Tools 
— Debuggers: PSCOPE, ICETM-386 


m@ High Speed CHMOS IV Technology 


8086 Software in a Protected and 
Paged System 


m@ Hardware Debugging Support 


The Intel886 DX Microprocessor is an entry-level 32-bit microprocessor designed for single-user applications 
and operating systems such as MS-DOS and Windows. The 32-bit registers and data paths support 32-bit 
addresses and data types. The processor addresses up to four gigabytes of physical memory and 64 terabytes 
(2**46) of virtual memory. The integrated memory management and protection architecture includes address 
translation registers, multitasking hardware and a protection mechanism to support operating systems. Instruc- 
tion pipelining, on-chip address translation, ensure short average instruction execution times and maximum 
system throughput. 

The Intel386 DX CPU offers new testability and debugging features. Testability features include a self-test and 
direct access to the page translation cache. Four new breakpoint registers provide breakpoint traps on code 
execution or data accesses, for powerful debugging of even ROM-based systems. 

Object-code compatibility with all 8086 family members (8086, 8088, 80186, 80188, 80286) means the 
Intel386 DX offers immediate access to the world’s largest microprocessor software base. 


m@ 132 Pin PQFP Package 


(See Packaging Specification, Order #231369) 


SEGMENTATION UNIT PAGING UNIT BUS CONTROL 


HOLD, INTR, NMI 
ERROR, BUSY 
RESET, HLDA 


REQUEST 
PRIORITIZER 


3-INPUT 
ADDER 


PAGE 
CACHE 


DESCRIPTOR 
REGISTERS 


LIMIT AND 
ATTRIBUTE 


ADDRESS BEO# - BES#, 
DRIVER A2-A31 
PIPELINE / M/lo#, D/C, 


BUS SIZE W/R#, LOCK#, 
CONTROL 


DS#,NA#, 
BS16#, READY# 
BARREL 


C TRANS- DO-031 
SHIFTER, [| PREFETCHER/ 
LIMIT 


snl il SEQUENCING MDECOOER 
wuctipcy / | FLAGS CHECKER 
DIVIDE 
CODE 16 BYTE 
CONTROL 3-DECODED 
sie ROM INSTRUCTION we 
FILE 
AL 
ALU BONTROE CONTROL INSTRUCTION INSTRUCTION 
32 


QUEUE 


PREDECODE PREFETCH 
DEDICATED ALU BUS 
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Intel386™ DX and Intel387™ DX are Trademarks of Intel Corporation. 
MS-DOS and Windows are Trademarks of MICROSOFT Corporation. 
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Order Number: 241267-003 1-139 


Intel386™ DX Microprocessor High-Performance 32-Bit 
CHMOS Microprocessor with Integrated Memory 
Management (PQFP Supplement) 
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This document should be used in conjunction 


with the Intel386™ DX Microprocessor data 
sheet (order number 231630-011, October 1993). 


1.0 PIN ASSIGNMENT 


The Intel386 DX pinout as viewed from the top side 
of the component is shown by Figure 1-1. 


Vcc and GND connections must be made to multi- 
ple Vcc and Vss (GND) pins. Each Vcc and Vss 
must be connected to the appropriate voltage level. 


COON MAUAWD = 


M/lO# qe fh 


Intel386™ DX Microprocessor 
Top Side View 


Intel386™ DX PQFP MICROPROCESSOR 


The circuit board should include Vcc and GND 
planes for power distribution and all Vcc and Vss 
pins must be connected to the appropriate plane. 


NOTE: 
Pins identified as “N.C.” should remain completely 
unconnected. 


241267-2 


Figure 1-1. Intel3886™ DX PQFP Pinout—View from Top Side 
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Table 1-1. Intel386™ DX PQFP Pinout—Functional Grouping 


| Address | Data | Control, =| NVC 
A2 DO 20 


ADS # 27 
A3 BEO# 31 
A4 69 BE1# 32 
A5 70 BE2# 33 
A6 71 BES # 38 
A7 72 BS16# 29 
A8 74 BUSY # 46 
AQ CLK2 24 
D/C# 41 
ERROR # 47 
A12 FLT# 54 
HLDA 8 
HOLD 28 
INTR 53 
LOCK # 42 
M/lO# 40 
NA# 30 
NMI 52 
PEREQ 50 
READY # 26 
RESET 45 


W/R# 
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1.1 Pin Description Table 


The following table lists a brief description of each pin on the Intel386 DX. The following definitions are used in 
these descriptions: . 


# The named signal is active LOW. 
| Input signal. 

O Output signal. 

I/O Input and Output signal. 

— No electrical connection. 


| Symbol | Type Name and Function 
Pe ee ee ee CLK2 provides the fundamental timing for the Intel386 DX. 
I/O DATA BUS inputs data during memory, |/O and interrupt acknowledge read 

cycles and outputs data during memory and !/O write cycles. 


BEO#-BE3# BYTE ENABLES indicate which data bytes of the data bus take part in a bus 
cycle. 
W/R# WRITE/READ is a bus cycle definition pin that distinguishes write cycles from 
read cycles. 


DATA/CONTROL is a bus cycle definition pin that distinguishes data cycles, 


either memory or I/O, from control cycles which are: interrupt acknowledge, 
M/IO# 


ie halt, and instruction fetching. 
MEMORY 1/0 is a bus cycle definition pin that distinguishes memory cycles 
from input/output cycles. 
LOCK # BUS LOCK is a bus cycle definition pin that indicates that other system bus 
masters are denied access to the system bus while it is active. | 
buaee Gey ADDRESS STATUS indicates that a valid bus cycle definition and address 


(W/R#, D/C#, M/lIO#, BEO#, BE1#4, BE2#, BE3# and Ag31-Ao) are being 


driven at the Intel386 DX pins. ) 
READY # 
BS16# 


HOLD 


NEXT ADDRESS is used to request address pipelining. 
BUS READY terminates the bus cycie. 
BUS SIZE 16 input allows direct connection of 32-bit and 16-bit data buses. 


BUS HOLD REQUEST input allows another bus master to request control of the 
local bus. 
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1.1 Pin Description Table (Continued) : 


[symbot [type] SSCNameandFunction 
Sa a ee 
surrendered control of its local bus to another bus master. 


PEREQ PROCESSOR EXTENSION REQUEST indicates that the processor extension has 
data to be transferred by the Intel386 DX. 
ke ae FLOAT is an input which forces all bidirectional and output signals, including HLDA, 


On-Circuit Emulation (ONCE) directly on the motherboard. The FLT# pin has an 
internal pull-up resistor; if the FLT # pin is not used, it should not be connected. 


INTERRUPT REQUEST is a maskable input that signals the Intel886 DX to suspend 
execution of the current program and execute an interrupt acknowledge function. 


NON-MASKABLE INTERRUPT REQUEST is a non-maskable input that signals the 
Intel386 DX to suspend execution of the current program and execute an interrupt 
acknowledge function. 


to the tri-state condition. This allows the electrically isolated 386 DX PQFP to use 
INTR 


RESET 


N/C 


RESET suspends any operation in progress and places the Intel3886 DX in a known 
reset state. See Interrupt Signals for additional information. 


NO CONNECT should always remain unconnected. Connection of a N/C pin may 
cause the processor to malfunction or be incompatible with future steppings of the 
Intel386 DX. 


ae hie SYSTEM POWER provides the +5V nominal D.C. supply input. 


SYSTEM GROUND provides OV connection from which all inputs and outputs are 
measured. . 
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1.2 Float Pin Description 


Activating the FLT # input floats all Intel386 DX bidi- 
rectional and output signals, including HLDA. Assert- 
ing FLT# isolates the Intel886 DX microprocessor 
from the surrounding circuitry. 


Packaged in a surface mount PQFP, it cannot be 
removed from the motherboard when In-Circuit Em- 
ulation (ICE) is needed. The FLT# input allows the 
Intel386 CPU to be electrically isolated from the sur- 
rounding circuitry. This allows connection of an emu- 
lator to the processor without removing it from the 
PCB. This method of emulation is referred to as ON- 
Circuit Emulation (ONCE). 


ENTERING AND EXITING FLOAT 


FLT # is an asynchronous, active-low input. It is rec- 
ognized on the rising edge of CLK2. When recog- 


VALID 


-----(__ a> 


VALID 


Intel386™ DX PQFP MICROPROCESSOR 


nized, it aborts the current bus cycle and floats the 
outputs of the processor (Figure 1-2). FLT # must be 
held low for a minimum of 16 CLK2 cycles. Reset 
should be asserted and held asserted until after 
FLT# is deasserted. This will ensure that the In- 
tel386 DX CPU will exit float in a valid state. 


Asserting the FLT # input unconditionally aborts the 
current bus cycle and forces the processor into the 
FLOAT mode, and is therefore not guaranteed to 
enter FLOAT in a valid state. After deactivating 
FLT#, the processor is not guaranteed to exit 
FLOAT mode in a valid state. This is not a problem 
as the FLT# pin is meant to be used only during 
ONCE. After exiting FLOAT, the processor must be 
reset to return it to a valid state. Reset should be 
asserted before FLT# is deasserted. This will en- 
sure that the processor will exit float in a valid state. 


FLT # has an internal pull-up resistor, and if it is not 
used it should be unconnected. 


NA nde! BG eet Ee ie OS Se on eae ts pe oe ee ee 


241267-22 


Figure 1-2. Entering and Exiting, FLT # 
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2.0 MECHANICAL DATA 


2.1 Package Dimensions 


The Intel386 DX is available in a 132 lead plastic quad flat pack (PQFP) package. Table 2.1 and Figures 
2.1-2.5 show the physical dimensions of this package. 


Table 2.1. intel Case Outline Dimensions for 132 Lead Plastic Quad Flat Pack 0.025 Inch Pitch 


Description 


Package Height 


Terminal Dimension 


Bumper Distance 


‘Lead Dimension 0.800 REF 20.32 REF 
| Issue IWS Preliminary 1/15/87 


Symboi List 


NOTES: 

1. All dimensions and tolerances conform to ANSI Y14.5M-1982. 

2. Datum plane H located at the mold parting line and coincident with the bottom of the lead where lead exits plastic body. 
3. Datums A B and D to be determined where center leads exit plastic body at datum plane H. 

4. Controlling Dimension, Inch. 

5. Dimensions D1, D2, E1, and E2 are measured at the mold parting line and do not include mold protrusion. Allowable mold 
protrusion is 0.18 mm (0.007 in) per side. 

6. Pin 1 identifier is located within one of the two zones indicated. 
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| @ | 8.20 (068) @|c]A@-8B© [DO] 


r—-BASE PLANE 
be Al 


A 
EC-ISEATING PLANE 
[18.18 (884) 


mm (inch) 241267-3 


Figure 2.1. Principal Dimensions and Datums 


D2 [8.25 (818) @[clA@-8B© [DO]A 
882 MM/MM_CIN/IN) 


i @ [o.25 (10) O[c[AO-BO DOA 


QT 
| =—T+—— @ 3.81 (.158) MAX TYP 
Fo «EL : 


SEE DETAIL M 
we ~ )) 
1.91 ¢€.875) MAX TYP 


|B 18.25 (. 018) |C]A@-8© [0© 
jb} 882 MM/MM_CIN/IN) |D_ 


]s.25 Cai O[CAO-8O DOA 
Lf. 282 Maye CIN/IN) [0] 


mm (inch) 241267-4 


Figure 2.2. Molded Details 


|i (8.6825) 


SEE DETAIL L 
SEE DETAIL J 


mm (inch) 241267-5 


Figure 2.3. Terminal Details 
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|S 18.135 (885) M|C|A®@-8© [0 | 


8.41 (.816) 
. 8.28 (. 888) 


ey 8.20 (.888) 


‘a B.14 (.885) 


B.31 (.812) | 
B.28 (.898) 


| @ 18.28 (.008) @ |C|A®-8© |0© Va 


B DEG. 
mm (inch) Detail J Detail L 241267-6 


Figure 2.4. Typical Lead 


1.52 (.852) 
1.22 €.848) 


8.98 (.@355) MIN. 


1.62 ¢(.852) 


1.22 (848) 
8.98 (.835) HW o 2.83 (.888) 


1.95 (.876) 
2.835 (.888) 
1.93 (.876) 


mm (inch) 241267-21 


Figure 2.5. Detail M 
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2.2 Package Thermal Specifications Ae gee one 
The Intel386 DX Microprocessor is specified for op- Tg. Tj = OMe 
eration when case temperature is within the range of 
0°C-100°C. The case temperature may be mea- 
sured in any environment, to determine whether the 
Intel386 DX Microprocessor is within specified oper- 
ating range. The case temperature should be mea- 
sured at the center of the top surface. 


Te = Ta + P*[0ia — Bic] 


Values for 6j4 and 6j, are given in Table 2.2 for the 
100 lead fine pitch. Oia is given at various airflows. 
Table 2.3 shows the maximum Tg allowable (without 
exceeding T,) at various airflows. 


The ambient temperature is guaranteed as long as 
T, is not violated. The ambient temperature can be 
calculated from the @j, and 9j4 from the one 
equations: 


Table 2.2. Thermal Resistances (°C/Watt) 0j- and 6j, 


ja versus Airflow - ft/min (m/sec) 
Package 400 600 800 1000 
(2.03) (3.04) (4.06) (5.07) 
132 Lead 
POFP 


132 Lead 
PQFP 


NOTE: 
The numbers in Table 2.3 were calculated using worst case Icc at Tc = 100°C with the outputs unloaded. 
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3.0 D.C./A.C. SPECIFICATIONS Table 3-1 is a stress rating only, and functional oper- 


ation at the maximums is not guaranteed. Functional 
Table 3-1. Maximum Ratings operating conditions are given in 3.1 D.C. Specifica- 


tions and 3.2 A.C. Specifications. 


Intel386™ DX 
20, 25, 33 MHz 
Maximum Rating 


Storage Temperature -65°C to + 150°C 
Case Temperature Under Bias —65°C to + 110°C 
Supply Voltage with Respect to Vss} —0.5V to + 6.5V 
Voltage on Other Pins —0.5V to Vcc + 0.5V 


Parameter Extended exposure to the Maximum Ratings may af- 


fect device reliability. Furthermore, although the In- 
tel386 DX contains protective circuitry to resist dam- 
age from static electric discharge, always take pre- 
cautions to avoid high static voltages or electric 
fields. 


3.1 D.C. Specifications 
Functional Operating Range: Voc = 5V +5%; Tcase = 0°C to + 100°C 


Table 3-2. Intel386™ DX D.C. Characteristics 


Intel386™ DX 
20 MHz, 25 MHz, 
33 MHz 


Test 


Parameter Conditions 


< 


CLK2 Input High Voltage 
20 MHz Voc — 0.8}Vcc + 0.3 
25 MHz and 33 MHz 3.7 3 


Output Low Voltage 
lo. = 4mA: A2-A31, DO-D31 
lo. = 5mA: BEO#-BE3#, W/R#, 
D/C#, M/IO#, LOCK#, ADS#, HLDA 


Output High Voltage 
lon = 1 mA: A2-A31, DO-D31 
lon = 0.9 mA: BEO#-BE3#, W/R#, 


D/C#, M/IO#, LOCK#, ADS#, HLDA 


Input Leakage Current +15 | pA |OV < Vin < Voc 
(For All Pins except BS16#, PEREQ, BUSY #, 
and ERROR #) 


Vin = 2.4V (Note 2) 


Input Leakage Current 
(BS16#, BUSY #, and ERROR # Pins) 


Vit = 0.45 (Note 3) 


= 


some) = 


~ 
o 
BAN 
On 
< 
lA 
< 
O 
< 
-4 
lA 
= 
eo) 
ro) 


Supply Current 
CLK2 = 40 MHz: with 20 MHz Intel386™ DX 
CLK2 = 50 MHz: with 25 MHz Intel386™ DX 
CLK2 = 66 MHz: with 33 MHz Intel386™ DX 


Input or |/O Capacitance 
Output Capacitance 
CLK2 Capacitance 


NOTES: 

1. The min value, —0.3, is not 100% tested. 

2. PEREQ input has an internal pulldown resistor. 

3. BS16#, BUSY # and ERROR # inputs each have an internal pullup resistor. 
4. CHMOS IV Technology. 
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3.2 A.C. SPECIFICATIONS 


3.2.1 A.C. Spec Definitions 


The A.C. specifications, given in Tables 3-3, 3-4, and 
3-5, consist of output delays, input setup require- 
ments and input hold requirements. All A.C. specifi- 
cations are relative to the CLK2 rising edge crossing 
the 2.0V level. 


A.C. spec measurement is defined by Figure 3-1. In- 
puts must be driven to the voltage levels indicated 
by Figure 3-1 when A.C. specifications are mea- 
sured. Intel386 DX output delays are specified with 
minimum and maximum limits, measured as shown. 


CLK2 [ 


OUTPUTS 
(A2-A31,D/C#, BEO#-BE3#, [ ou 
ADS#, M/10#, W/R#, LOCK#, HLDA) 


OUTPUTS 
(DO-D31) 


INPUTS ; NOTE 1 ‘Weaase 
1.5V 


(NA#, BS 16#, [ 


INTR, NMI) 


INPUTS 
(READY #, HOLD, BUSY#, 
ERROR#, PEREQ, DO-D31) 
FLT# 
LEGEND: 


intel386™ DX PQFP MICROPROCESSOR 


The minimum Intel386 DX delay times are hold times. 
provided to external circuitry. Intel886 DX input set- 
up and hold times are specified as minimums, defin- 
ing the smallest acceptable sampling window. Within 
the sampling window, a synchronous input signal 
must be stable for correct Intel386 DX operation. 


Outputs NA#, W/R#, D/C#, M/IO#, LOCK#, 
BEO#-BE3#, A2-A31 and HLDA only change at 
the beginning of phase one. DO-D31 (write cycles) 
only change at the beginning of phase two. The 
READY #, HOLD, BUSY#, ERROR#, PEREQ and 
DO-D31 (read cycles) inputs are sampled at the be- 
ginning of phase one. The NA#, BS16#, INTR and 
NMI inputs are sampled at the beginning of phase 
two. 


MAX. 
£1.5V VALID OUTPUT n+1 


(C) . 
VALID INPUT 


SX SY__ VALID INPUT 1-SVAOOOYS 


ne 


@ - MAXIMUM OUTPUT DELAY SPEC. 
@)- MINIMUM OUTPUT DELAY SPEC. 
© - MINIMUM INPUT SETUP SPEC. 
@ - MINIMUM INPUT HOLD SPEC. 
241267-7 


NOTES: 
1. Input waveforms have tr < 2.0 ns from 0.8V to 2.0V. 
2. See section 9.5.8 for typical output rise time versus load capacitance. 


Figure 3-1. Drive Levels and Measurement Points for A.C. Specifications 
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3.2.2 A.C. SPECIFICATION TABLES 
Functional Operating Range: Vcc = 5V +5%; Tcase = 0°C to + 100°C 


Table 3-3. 33 MHz Intel386™ DX A.C. Characteristics 


33 MHz 
Parameter Intel386™ DX Baye Notes 


cs 


t1 


3.7V to 0.8V (Note 3) 
0.8V to 3.7V (Note 3) 


t7 A2-A31 Float Delay 


BEO #-BE3#, LOCK# Valid Delay 
BEO 4 -BE3#, LOCK # Float Delay 

W/R#, M/IO#, D/C#, Valid Delay 

t10a ADS # Valid Delay 

t11 W/R#, M/IO#, D/C#, ADS# Float Delay 
12 DO-D31 Write Data Valid Delay 

t12a DO-D31 Write Data Hold Time 

t13 DO-D31 Float Delay 

t14 HLDA Valid Delay 

t15 | NA# Setup Time 

16 NA# Hold Time 

17 BS16# Setup Time 

BS16# Hold Time 

t19 READY # Setup Time 


t20 READY # Hold Time 


i 


Comal 
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3.2.2 A.C. SPECIFICATION TABLES (Continued) 
Functional Operating Range: Vcc = 5V +5%; Tcase = 0°C to + 100°C 


Table 3-3. 33 MHz Intel386™ DX A.C. Characteristics (Continued) 


DO-D31 Read Setup Time 


DO-D31 Read Hold Time 


HOLD Setup Time 


HOLD Hold Time 


NOTES: ‘ 


1. Float condition occurs when maximum output current becomes less than |_o in magnitude. Float delay is not 100% 
tested. 

2. These inputs are allowed to be asynchronous to CLK2. The setup and hold specifications are given for testing purposes, 
to assure recognition within a specific CLK2 period. 

3. Rise and fall times are not tested. 

4. Min. time not 100% tested. 
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3.2.2 A.C. SPECIFICATION TABLES (Continued) 
Functional Operating Range: Vcc = 5V +5%; Tcase = 0°C to + 100°C 


Table 3-4. 25 MHz Intel386™ DX A.C. Characteristics 


feuevigntme Cd | 

7 [ns [os [arvwoev 

7 [ns [8 losvoany 

[az-natvaiddewy ———SS«d | at fos [8 |= s0pr 
7” [Az-AstFoet Delay ——=S—~d Ce a | ns 08 [Noe 
te [Be0#-8E90 ValdOoay «dt | ee [ns [os |= copr 
ita [Locke Valdbowy ——SS~w et | vw [a [sO 
t® | BE0#-BE9#, LOCK# FoatDely | 4 | a0 | ns [96 [Nowy 
to [W/Re, M/10#, 0/0, ADS¢ ValdDelay| 4 | 21 | ns 
ii [W/Re, MiO#, 0/04, ADS# Float Delay] 4 

[00-081 WitoDataValdDelay | 7 

[D0-Det Wite Data Time | 2 


NA# Hold Time 


hi hi Hi HL RTL 
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3.2.2 A.C. SPECIFICATION TABLES (Continued) 
Functional Operating Range: Vcc = 5V +5%; Toase = 0°C to + 100°C 


Table 3-4. 25 MHz Intel386™ DxX A.C. Characteristics (Continued) 


25 MHz 
Parameter Intel386™ DX 


om -_ 
[ize | 00-061 Read Ho Time ——=SCSC~rCia 
fie [wouodtme SSC*idC 
[tas [ RESETSeupTine ——SSSSC*d Ct 
ca ik 
am 
ca ae 
ca = 
[30 ea 


(Notes 2, 3) 


NMI, INTR Setup Time 

NMI, INTR Hold Time 

PEREQ, ERROR #, FLT #, BUSY # Setup Time 

PEREQ, ERROR #, FLT #, BUSY # Hold Time 
NOTES: 


1. Float condition occurs when maximum output current becomes less than I_o in magnitude. Float delay is not 100% 
tested. 
2. These inputs are allowed to be asynchronous to CLK2. The setup and hold specifications are given for testing purposes, 
to assure recognition within a specific CLK2 period. 
Symbol Parameter Min 
To = 0°C t30 PEREQ, ERROR#,FLT#,BUSY# HoldTime 4 
To = +100°C t30 PEREQ, ERROR#,FLT#, BUSY# Hold Time 5 


RESET Hold Time 
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3.2.2 A.C. SPECIFICATION TABLES (Continued) 
Functional Operating Range: Vcc = 5V +5%; Tcase = 0°C to + 100°C 


Table 3-5. 20 MHz Intel386™ DX A.C. Characteristics 


20 MHz 
Parameter Intel386™ DX 


Operating Frequency 4 MHz Half of CLK2 
Frequency 


CLK2 Period 25 
i at (Voc — 0.8V) 


125 


CLK2 High Time 5 
at 0.8V 


38 | Woo -o8vyto08v 
= 


Tas | = 120 


Set 

aac 

hee 

| ns 
ins | 
| ne 
Re 
Pane) 
ka 
| ns 
| ns 
oe 
ie 
| ns 
aie 
ne 4 
aoe 
hat Sa 
ice 
| ns 


CLK2 Fall Time 
CLK2 Rise Time 


A2-A31 Valid Delay 4 
A2-A31 Float Delay 4 
BEO #-BE3#, LOCK# 4 
Valid Delay 

W/R#, M/IO#, D/C#, 
ADS # Valid Delay 
W/R#, M/IO#, D/C#, (Note 1) 

ADS # Float Delay 


38 | Woe 


: 
Valid Delay 

14 

13 

2 

12 


DO-D31 Read 

Setup Time 

DO-D31 Read 

Hold Time 

HOLD Setup Time 17 


HOLD Hold Time 
RESET Setup Time 


N 


BEO#-BE3#, LOCK# 4 
Float Delay 


ty 

toa 
tob 
t3b 
t4 

tg 

t7 

tg 

tg 

tio 
{44 
ty2 
t13 
t14 
t15 
ti6 
t17 
tig 
tig 
toy 
to4 


—_ 
Nh a G Gd 


12 
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3.2.2 A.C. SPECIFICATION TABLES (Continued) 
Functional Operating Range: Voc = 5V +5%; Tcase = 0°C to + 100°C 


Table 3-5. 20 MHz Intels66™ DX A.C. Characteristics (Continued) 


20 MHz 
Parameter et ae DX 


| RESETHoldTime = Hold Time 


ee 
Cs mnrmsting | se [re 


PEREQ, ERROR #, FLT#, —_ 4 (Note 2) 
BUSY # Setup Time 

PEREQ, ERROR #, FLT#, 3-4 (Note 2) 
BUSY # Hold Time 


NOTES: 

1. Float condition occurs when maximum output current becomes less than lio in magnitude. Float delay is not 100% 
tested. 

2. These inputs are allowed to be asynchronous to CLK2. The setup and hold specifications are given for testing purposes, 
to assure recognition within a specific CLK2 period. 
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Intel386™ DX PQFP MICROPROCESSOR 


3.2.3 A.C. TEST LOADS 


Intel386 DX CPU 
OUTPUT 
b : 


241267-8 


C, = 120 pF on A2-A31, DO-D31 

C, = 75 pF on BEO#-BE3#, W/R#, M/IO#, D/C#, ADS#, 
LOCK#, HLDA 

C, includes all parasitic capacitances. 

241267-9 


Figure 3-2. A.C. Test Load 
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Figure 3-4. Input Setup and Hold Timing 
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Figure 3-5. Output Valid Delay Timing 
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Figure 3-5a. Write Data Valid Delay Timing Figure 3-5b. Write Data Hold Timing 
(25 MHz, 33 MHz) (25 MHz, 33 MHz) 


VALID n +1 
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Figure 3-5c. Write Data Valid Delay Timing (20 MHz) 
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Intel386™ DX PQFP MICROPROCESSOR | : intel ¥ 


3.2.5 TYPICAL OUTPUT VALID DELAY VERSUS LOAD CAPACITANCE 
AT MAXIMUM OPERATING TEMPERATURE (C, = 120 pF) 


=~ 
” 
on 
ww 
> 
< 
owl 
uJ 
a 
= 
| 
< 
> 
e 
p= | 
a 
= 
= 
oO 


C, (picofarads) 
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NOTE: 
This graph will not be linear outside of the C_ range shown. 


3.2.6 TYPICAL OUTPUT VALID DELAY VERSUS LOAD CAPACITANCE 
AT MAXIMUM OPERATING TEMPERATURE (C; = 75 pF) 


OUTPUT VALID DELAY (ns) 


75 100 125 150 


C, (picofarads) 
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NOTE: 
This graph will not be linear outside of the C, range shown. 
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3.2.7 TYPICAL OUTPUT VALID DELAY VERSUS LOAD CAPACITANCE 
AT MAXIMUM OPERATING TEMPERATURE (C; = 50 pF) 


v__~ 
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c 
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onl 
~ tad 
Oo 
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al 
< 
> 
—_ 
= 
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= 
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NOTE: 
This graph will not be linear outside of the C, range shown. 


3.2.8 TYPICAL OUTPUT RISE TIME VERSUS LOAD CAPACITANCE 
- AT MAXIMUM OPERATING TEMPERATURE 


RISE TIME (ns) 0.8V - 2.0V 


C, (picofarads) 
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NOTE: 
This graph will not be linear outside of the C, range shown. 
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$2 
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Figure 3-6. Output Float Delay and HLDA Valid Delay Timing 


INITIALIZATION SEQUENCE. ———————> 
$2 OR $1 
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The second internal processor phase following RESET high-to-low transition (provided tas and tog are met) is 2. 


Figure 3-7. RESET Setup and Hold Timing, and Internal Phase 
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Intel387T™ DX 


MATH COPROCESSOR 
@ High Performance 80-Bit Internal m@ Upward Object-Code Compatible from 
Architecture 8087 and 80287 
= Implements ANSI/IEEE Standard 754- @ Full-Range Transcendental Operations 
1985 for Binary Floating-Point for SINE, COSINE, TANGENT, : 
Arithmetic ARCTANGENT and LOGARITHM 
m@ Expands Intel386™ DX CPU Data @ Built-in Exception Handling 


Types to Include 32-, 64-, 80-Bit 

Ail, = Operates Independently of Real, 
Floating Point, 32-, 64-Bit Integers and arciaciad and Virtual-8086 Modes of 
18-Digit BCD Operands the Intel386™ DX Microprocessor 


Peet puteuns sid ll DX CPU = Eight 80-Bit Numeric Registers, Usable 
nstruction set to Include as Individually Addressable General 


Trigonometric, Logarithmic, ; 
Exponential and Arithmetic Instructions Registers or as a Register Stack 


for All Data Types @ Available in 68-Pin PGA Package 
: m@ One Version Supports 16 MHz-33 MHz 
Speeds 
(See Packaging Spec: Order #231369) 


The Intel387™ DX Math CoProcessor (MCP) is an extension of the Intel886™ microprocessor architecture. 
The combination of the Intel387 DX MCP with the Intel386™ DX Microprocessor dramatically increases the 
processing speed of computer application software which utilize mathematical operations. This makes an ideal 
computer workstation platform for applications such as financial modeling and spreadsheets, CAD/CAM, or 
graphics. 


The Intel387 DX Math CoProcessor adds over seventy mnemonics to the Intel886 DX Microprocessor instruc- 
tion set. Specific Intel387 DX MCP math operations include logarithmic, arithmetic, exponential, and trigono- 
metric functions. The Intel3887 DX MCP supports integer, extended integer, floating point and BCD data 
formats, and fully conforms to the ANSI/IEEE floating point standard. 


The Intel387 DX Math CoProcessor is object code compatible with the Intel887 SX MCP, and upward object 
code compatible from the 80287 and 8087 math coprocessors. Object code for Intel386 DX/Intel387 DX is 
also compatible with the Intel486™ microprocessor. The Intel3887 DX MCP is manufactured on 1 micron, 
CHMOS IV technology and packaged in a 68-pin PGA package. 
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Figure 0.1. Intel387™ DX Math CoProcessor Block Diagram 
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Intel386™ DX Microprocessor Registers 


GENERAL REGISTERS SEGMENT REGISTERS 
31 15 0 15 
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intel387™ DX MCP Data Registers 
Tag 
Field 


(2 278 64 63 tra 


RO | Sign | Exponent. Significand 


0 


Instruction Pointer (in i3886™ DX CPU) 
Status Register Data Pointer (in i886™ DX CPU) 
Tag Word 


Figure 1.1. intel386™ DX Microprocessor and Intel387™ DX Math Coprocessor Register Set 


1.0 FUNCTIONAL DESCRIPTION 


The Intel387™ DX Math Coprocessor provides 
arithmetic instructions for a variety of numeric data 
types in Intel886™ DX Microprocessor systems. It 
also executes numerous built-in transcendental 
functions (e.g. tangent, sine, cosine, and log func- 
tions). The Intel887 DX MCP effectively extends the 
register and instruction set of a Intel386 DX Micro- 


processor system for existing data types and adds . 


several new data types as well. Figure 1.1 shows the 
model of registers visible to programs. Essentially, 
the Intel387 DX MCP can be treated as an additional 
resource or an extension to the Intel386 DX Micro- 
processor. The Intel386 DX Microprocessor togeth- 
er with a Intel387 DX MCP can be used as a single 
unified system. 


The Intel387 DX MCP works the same whether the 
Intel386 DX Microprocessor is executing in real-ad- 
dress mode, protected mode, or virtual-8086 mode. 
All memory access is handled by the Intel386 DX 
Microprocessor; the Intel387 DX MCP merely oper- 
ates on instructions and values passed to it by the 
Intel386 DX Microprocessor. Therefore, the Intel387 
DX MCP is not sensitive to the processing mode of 
the Intel386 DX Microprocessor. 


In real-address mode and virtual-8086 mode, the In- 
tel386 DX Microprocessor and Intel387 DX MCP are 
completely upward compatible with software for 
8086/8087, 80286/80287 real-address mode, and 
Intel386 DX Microprocessor and 80287 Coproces- 
sor real-address mode systems. 


In protected mode, the Intel386 DX Microprocessor 
and Intel3887 DX MCP are completely upward com- 
patible with software for 80286/80287 protected 
mode, and Intel386 DX Microprocessor and 80287 
Coprocessor protected mode systems. 


The only differences of operation that may appear 
when 8086/8087 programs are ported to a protect- 
ed-mode Intel386 DX Microprocessor and Intel387 
DX MCP system (not using virtual-8086 mode), is in 
the format of operands for the administrative instruc- 
tions FLDENV, FSTENV, FRSTOR and FSAVE. 
These instructions are normally used only by excep- 
tion handlers and operating systems, not by applica- 
tions programs. 


The Intel387 DX MCP contains three functional units 
that can operate in parallel to increase system per- 
formance. The Intel886 DX Microprocessor can be 
transferring commands and data to the MCP bus 
control logic for the next instruction while the MCP 
floating-point unit is performing the current numeric 
instruction. 
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2.0 PROGRAMMING INTERFACE 


The MCP adds to the Intel886 DX Microprocessor 
system additional data types, registers, instructions, 
and interrupts specifically designed to facilitate high- 
speed numerics processing. To use the MCP re- 
quires no special programming tools, because all 
new instructions and data types are directly support- 
ed by the Intel886 DX CPU assembler and compilers 
for high-level languages. All 8086/8088 develop- 
ment tools that support the 8087 can also be used 
to develop software for the Intel886 DX Microproc- 
essor and Intel887 DX Math Coprocessor in real-ad- 
‘dress mode or virtual-8086 mode. All 80286 devel- 
opment tools that support the 80287 can also be 
used to develop software for the Intel886 DX Micro- 
processor and Intel887 DX Math Coprocessor. 


All communication between the Intel386 DX Micro- 
processor and the MCP is transparent to applica- 
tions software. The CPU automatically controls the 
MCP whenever a numerics instruction is executed. 
All physical memory and virtual memory of the CPU 
are available for storage of the instructions and op- 
erands of programs that use the MCP. All memory 
addressing modes, including use of displacement, 
base register, index register, and scaling, are avail- 
able for addressing numerics operands. 


Section 6 at the end of this data sheet lists by class 


the instructions that the MCP adds to the instruction 
set of the Intel886 DX Microprocessor system. 
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2.1 Data Types 


Table 2.1 lists the seven data types that the Intel387 
DX MCP supports and presents the format for each 
type. Operands are stored in memory with the least 
significant digit at the lowest memory address. Pro- 
grams retrieve these values by generating the low- 
est address. For maximum system performance, all 
operands should start at physical-memory address- 
es evenly divisible by four (doubleword boundaries); 
operands may begin at any other addresses, but will 
require extra memory cycles to access the entire op- 
erand. 


Internally, the Intel387 DX MCP holds all numbers in 
the extended-precision real format. Instructions that 
load operands from memory automatically convert 
operands represented in memory as 16-, 32-, or 64- 
bit integers, 32- or 64-bit floating-point numbers, or 
18-digit packed BCD numbers into extended-preci- 
sion real format. Instructions that store operands in 
memory perform the inverse type conversion. 


2.2 Numeric Operands 


A typical MCP instruction accepts one or two oper- 
ands and produces a single result. In two-operand 
instructions, one operand is the contents of an MCP 
register, while the other may be a memory location. 
The operands of some instructions are predefined; 
for example FSQRT always takes the square root of 
the number in the top stack element. 
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Table 2.1. Intel387™ DX MCP Data Type Representation in Memory 


Ss Most Significant Byte = Highest Addressed Byte 
Word Integer 16 Bits 


Long Integer | +1018 64 Bits COMPLEMENT) 
re MAGNITUDE 
Packed BCD 18 Digits B15 49, Gay G12, G11» Giu, Go » Ga , G7 , 
Single Precision | +10*°8| 24 Bits [8] etednewr | sioniricano | 


Bg rj ote] em FT ee 
Extended +4932 ’ 
ripisy eR eee ee 
0 
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NOTES: 
(1) S = Sign bit (0 = positive, 1 = negative) 
(2) d, = Decimal digit (two per byte) 
(3) X = Bits have no significance; Intel387™ DX MCP ignores when loading, zeros when storing 
(4)4 = Position of implicit binary point 
(5) | = Integer bit of significand; stored in temporary real, implicit in single and double precision 
(6) Exponent Bias (normalized values): 

Single: 127 (7FH) 

Double: 1023 (SFFH) 

Extended Real: 16383 (SFFFH) 
(7) Packed BCD: (—1)§ (Dj7...Do) 
(8) Real: (—1)S (2E-BIAS) (Fo F4...) 
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15 0 


NOTE: 
The index i of tag(i) is not top-relative. A program typically uses the “top” field of Status Word to determine which tag(i) 


field refers to logical top of stack. 
TAG VALUES: 

00 = Valid 

01 = Zero 


10 = QNaN, SNaN, Infinity, Denormal and Unsupported Formats 


11 = Empty 


Figure 2.1. intel387™ DX MCP Tag Word 


2.3 Register Set 


Figure 1.1 shows the Intel387 DX MCP register set. 
When an MCP is present in a system, programmers 
may use these registers in addition to the registers 
normally available on the Intel386 DX CPU. 


2.3.1 DATA REGISTERS 


Intel887 DX MCP computations use the MCP’s data 
registers. These eight 80-bit registers provide the 
equivalent capacity of twenty 32-bit registers. Each 
of the eight data registers in the MCP is 80 bits wide 
and is divided into “fields” corresponding to the 
MCPs extended-precision real data type. 


The Intel387 DX MCP register set can be accessed 
either as a stack, with instructions operating on the 
top one or two stack elements, or as a fixed register 
set, with instructions operating on explicitly designat- 
ed registers. The TOP field in the status word identi- 
fies the current top-of-stack register. A “push” oper- 
ation decrements TOP by one and loads a value into 
the new top register. A “pop” operation stores the 
value from the current top register and then incre- 
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ments TOP by one. Like the Intel886 DX Microproc- 
essor stacks in memory, the MCP register stack 
grows “down” toward lower-addressed registers. 


Instructions may address the data registers either 
implicitly or explicitly. Many instructions operate on 
the register at the TOP of the stack. These instruc- 
tions implicitly address the register at which TOP 
points. Other instructions allow the programmer to 
explicitly specify which register to user. This explicit 
register addressing is also relative to TOP. 


2.3.2 TAG WORD 


The tag word marks the content of each numeric 
data register, as Figure 2.1 shows. Each two-bit tag 
represents one of the eight numerics registers. The 
principal function of the tag word is to optimize the 
MCPs performance and stack handling by making it 
possible to distinguish between empty and nonemp- 
ty register locations. It also enables exception han- 
diers to check the contents of a stack location with- 
out the need to perform complex decoding of the 
actual data. 


Intel387™ DX MATH COPROCESSOR 


MCP BUSY 
TOP OF STACK POINTER 
CONDITION CODE 


ERROR SUMMARY STATUS 
STACK FLAG 


EXCEPTION FLAGS: 
PRECISION 
UNDERFLOW 
OVERFLOW 
ZERO DIVIDE 
DENORMALIZED OPERAND 
INVALID OPERATION 
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ES is set if any unmasked exception bit is set; cleared otherwise. 
See Table 2.2 for interpretation of condition code. 
TOP values: 
000 = Register 0 is Top of Stack 
001 = Register 1 is Top of Stack 
e 


111 = Register 7 is Top of Stack 


For definitions of exceptions, refer to the section entitled 


“Exception Handling” 


Figure 2.2. MCP Status Word 


2.3.3 STATUS WORD 


The 16-bit status word (in the status register) shown 
in Figure 2.2 reflects the overall state of the MCP. It 
may be read and inspected by CPU code. 


Bit 15, the B-bit (busy bit) is included for 8087 com- 
patibility only. It reflects the contents of the ES bit 
(bit 7 of the status word), not the status of the 
BUSY # output of the Intel887 DX MCP. 


Bits 13-11 (TOP) point to the Intel387 DX MCP reg- 
ister that is the current top-of-stack. 


The four numeric condition code bits (C3-Co) are 
similar to the flags in a CPU; instructions that per- 
form arithmetic operations update these bits to re- 
flect the outcome. The effects of these instructions 
on the condition code are summarized in Tables 2.2 
through 2.5. 


Bit 7 is the error summary (ES) status bit. This bit is 
set if any unmasked exception bit is set; it is clear 
otherwise. If this bit is set, the ERROR# signal is 
asserted. 


Bit 6 is the stack flag (SF). This bit is used to distin- 
guish invalid operations due to stack overflow or un- 
derflow from other kinds of invalid operations. When 
SF is set, bit 9 (C;) distinguishes between stack 
overflow (C; = 1) and underflow (C; = 0). 


Figure 2.2 shows the six exception flags in bits 5-0 
of the status word. Bits 5-0 are set to indicate that 
the MCP has detected an exception while executing 
an instruction. A later section entitled “Exception 
Handling” explains how they are set and used. 


Note that when a new value is loaded into the status 
word by the FLDENV or FRSTOR instruction, the 
value of ES (bit 7) and its reflection in the B-bit (bit 
15) are not derived from the values loaded from 
memory but rather are dependent upon the values of 
the exception flags (bits 5-0) in the status word and 
their corresponding masks in the control word. If ES 
is set in such a case, the ERROR# output of the 
MCP is activated immediately. 


f 
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Table 2.2. Condition Code Interpretation 


FPREM, FPREM1 Three least significant bits 


(see Table 2.3) of quotient ies 
QO Q1 


or O/U# 1 = incomplete 


FCOM, FCOMP, 

FCOMPP, FTST, Result of comparison Zero Operand is not 
FUCOM, FUCOMP, (see Table 2.4) or O/U# comparable 
FUCOMPP, FICOM, (Table 2.4) 
FICOMP 


FXAM Operand class Sign Operand class 
(see Table 2.5) or O/U# (Table 2.5) — 


FCHS, FABS, FXCH, 

FINCSTP, FDECSTP, Zero 

Constant loads, UNDEFINED UNDEFINED 
FXTRACT, FLD, or O/U# : 

FILD, FOLD, 

FSTP (ext real) 


FIST, FBSTP, 
FRNDINT, FST, 
FSTP, FADD, FMUL, 


FDIV, FDIVR, UNDEFINED Roundup 


UNDEFINED 


FSUB, FSUBR, or O/U# 
FSCALE, FSQRT, , 

FPATAN, F2XM1, 

FYL2X, FYL2XP1 


FPTAN, FSIN Roundup Reduction 

FCOS, FSINCOS UNDEFINED or O/U#, 0 = complete 
undefined 1 = incomplete 
ifC2 = 1 


FLDENV, FRSTOR Each bit loaded from memory 


FLDCW, FSTENV, 

FSTCW, FSTSW, UNDEFINED 
FCLEX, FINIT, 

FSAVE 


O/U# When both IE and SF bits of status word are set, indicating a stack exception, this bit 
distinguishes between stack overflow (C1 = 1) and underflow (C1 = 0). 


Reduction lf FPREM or FPREM1 produces a remainder that is less than the modulus, reduction is 
complete. When reduction is incomplete the value at the top of the stack is a partial 
remainder, which can be used as input to further reduction. For FPTAN, FSIN, FCOS, and 
FSINCOS, the reduction bit is set if the operand at the top of the stack is too large. In this 
case the original operand remains at the top of the stack. 


Roundup When the PE bit of the status word is set, this bit indicates whether the last rounding in the 
instruction was upward. 


UNDEFINED Do not rely on finding any specific value in these bits. 
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Table 2.3. Condition Code Interpretation after FPREM and FPREM1 Instructions 


Interpretation after FPREM and FPREM1 


Incomplete Reduction: 
further interation required 
for complete reduction 


Complete Reduction: 
CO, C3, C1 contain three least 
significant bits of quotient 


0 
0 
1 
1 
0 
0 
1 
1 


TOP > Operand 
TOP < Operand 
TOP = Operand 
Unordered 


Table 2.5. Condition Code Defining Operand Class 


pcs | cz | ct | co | Vaueat top 


+ Unsupported ° 
+ NaN 

— Unsupported 
— NaN 

+ Normal 

+ Infinity 

— Normal 

— Infinity 


+ Denormal 
— Denormal 


—~ a oe we HSH HSH OOOO OCOO CO Oo 


0 
0 
0 
0 
1 
1 
1 
1 
0 
0 
0 
0 
1 
1 


=—=—O-j-=-_ OO°0o + =+$" Odo + $+ — CO EO 
oo}-or+-0+t0+0+0-+ 0 
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2.3.4 INSTRUCTION AND DATA POINTERS 


Because the MCP operates in parallel with the CPU, 
any errors detected by the MCP may be reported 
after the CPU has executed the ESC instruction 
which caused it. To allow identification of the failing 
numeric instruction, the Intel886 DX Microprocessor 
and Intel3887 DX Math CoProcessor contains two 
pointer registers that supply the address of the fail- 
ing numeric instruction and the address of its numer- 
ic memory operand (if appropriate). 


The instruction and data pointers are provided for 
user-written error handlers. These registers are ac- 
tually located in the Intel886 DX CPU, but appear to 
be located in the MCP because they are accessed 
by the ESC instructions FLDENV, FSTENV, FSAVE, 
and FRSTOR. (In the 8086/8087 and 80286/80287, 
these registers are located in the MCP.) Whenever 


a . 

intel. 
the Intel386 DX CPU decodes a new ESC instruc- 
tion, it saves the address of the instruction (including 


any prefixes that may be present), the address of 
the operand (if present), and the opcode. 


The instruction and data pointers appear in one of 
four formats depending on the operating mode of 
the Intel386 DX Microprocessor (protected mode or 
real-address mode) and depending on the operand- 
size attribute in effect (32-bit operand or 16-bit oper- 
and). When the Intel386 DX Microprocessor is in vir- 
tual-8086 mode, the real-address mode formats are 
used. (See Figures 2.3 through 2.6.) The ESC in- 
structions FLDENV, FSTENV, FSAVE, and FRSTOR 
are used to transfer these values between the In- 
tel386 DX Microprocessor registers and memory. 
Note that the value of the data pointer is undefined if 
the prior ESC instruction did not have a memory op- 
erand. 


32-BIT PROTECTED MODE FORMAT 


31 23 15 7 0 
RESERVED CONTROL WORD 


RESERVED STATUS WORD 
RESERVED TAG WORD 


IP OFFSET 


00000 


Figure 2.3. Protected Mode Intel387™ DX MCP Instruction and 


OPCODE 19.0 CS SELECTOR 
DATA OPERAND OFFSET 
RESERVED OPERAND SELECTOR 


Data Pointer Image in Memory, 32-Bit Format 


474 
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32-BIT REAL-ADDRESS MODE FORMAT 


of 23 pe 7 0 


ga00 | _netaycnonronrenai.ie [0 | ongooe a 


Figure 2.4. Real Mode Intel387™ DX MCP Instruction and Data Pointer Image in Memory, 32-Bit Format 


16-BIT PROTECTED MODE FORMAT 16-BIT REAL-ADDRESS MODE AND 
, VIRTUAL-8086 MODE FORMAT 


15 7 0 
15 zt 0 
CONTROL WORD 
CONTROL WORD 


STATUS WORD 
| STATUS WORD | 
TAG WORD , 
TAG WORD 


iastiel INSTRUCTION POINTER 15..0 


CS SELECTOR 1Pia.te {0 OPCODE 10..0 
OPERAND OFFSET OPERAND POINTER 15..0 


OPERAND SELECTOR DP 19.16/00 90000000 0.0 


Figure 2.5. Protected Mode Intel387™ DX MCP Figure 2.6. Real Mode intel387™ DX MCP 
Instruction and Data Pointer instruction and Data Pointer 
image in Memory, 16-Bit Format image in Memory, 16-Bit Format 
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RESERVED 


EXCEPTION MASKS : 
PRECISION 
UNDERFLOW 
OVERFLOW 
ZERO DIVIDE 
DENORMALIZED OPERAND 
INVALID OPERATION 


Precision Control 
00—24 bits (single precision) 
01—(reserved) 
10—53 bits (double precision) 
11—64 bits (extended precision) 


RESERVED 
RESERVED* 
ROUNDING CONTROL 
PRECISION CONTROL 


* "0" AFTER RESET OR FINIT; 
CHANGEABLE UPON LOADING THE 
CONTROL WORD (CW). PROGRAMS 
MUST IGNORE THIS BIT. 
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Rounding Control 
00—Round to nearest or even 
01—Round down (toward — ©) 
10—Round up (toward + ©) 
11—Chop (truncate toward zero) 


Figure 2.7. Intel387™ DX MCP Control Word 


2.3.5 CONTROL WORD 


The MCP provides several processing options that 
are selected by loading a control word from memory 
into the control register. Figure 2.7 shows the format 
and encoding of fields in the control word. 


The low-order byte of this control word configures 
the MCP error and exception masking. Bits 5-0 of 
the control word contain individual masks for each of 
the six exceptions that the MCP recognizes. 


The high-order byte of the control word configures 
the MCP operating mode, including precision and 
rounding. 


e Bit 12 no longer defines infinity control and is a 
reserved bit. Only affine closure is supported for 
infinity arithmetic. The bit is initialized to zero after 
RESET or FINIT and is changeable upon loading 
the CW. Programs must ignore this bit. 


e The rounding control (RC) bits (bits 11-10) pro- 
vide for directed rounding and true chop, as well 
as the unbiased round to nearest even mode 
specified in the IEEE standard. Rounding control 
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affects only those instructions that perform 
rounding at the end of the operation (and thus 
can generate a precision exception); namely, 
FST, FSTP, FIST, all arithmetic instructions (ex- 
cept FPREM, FPREM1, FXTRACT, FABS, and 
FCHS), and all transcendental instructions. 


e The precision control (PC) bits (bits 9-8) can be 
used to set the MCP internal operating precision 
of the significand at less than the default of 64 
bits (extended precision). This can be useful in 
providing compatibility with early generation arith- 
metic processors of smaller precision. PC affects 

only the instructions ADD, SUB, DIV, MUL, and 
SQRT. For all other instructions, either the preci- 
sion is determined by the opcode or extended 
precision is used. 


2.4 Interrupt Description 


Several interrupts of the Intel886 DX CPU are used 
to report exceptional conditions while executing nu- 
meric programs in either real or protected mode. Ta- 
ble 2.6 shows these interrupts and their causes. 
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Table 2.6. Intel386™ DX Microprocessor Interrupt Vectors Reserved for MCP 


An operand of a coprocessor instruction wrapped around an addressing limit (OFFFFH for 
small segments, OFFFFFFFFH for big segments, zero for expand-down segments) and 
spanned inaccessible addresses(1). The failing numerics instruction is not restartable. The 
address of the failing numerics instruction and data operand may be lost; an FSTENV does 
not return reliable addresses. As with the 80286/80287, the segment overrun exception 
should be handled by executing an FNINIT instruction (i.e. an FINIT without a preceding 
WAIT). The return address on the stack does not necessarily point to the failing instruction 
nor to the following instruction. The interrupt can be avoided by never allowing numeric 
data to start within 108 bytes of the end of a segment. 


The first word or doubleword of a numeric operand is not entirely within the limit of its 
segment. The return address pushed onto the stack of the exception handler points at the 
ESC instruction that caused the exception, including any prefixes. The Intel887™ DX MCP 
has not executed this instruction; the instruction pointer and data pointer register refer to a 
previous, correctly executed instruction. 


The previous numerics instruction caused an unmasked exception. The address of the 
faulty instruction and the address of its operand are stored in the instruction pointer and 
data pointer registers. Only ESC and WAIT instructions can cause this interrupt. The 
Intel386™ DX CPU return address pushed onto the stack of the exception handler points 
to a WAIT or ESC instruction (including prefixes). This instruction can be restarted after 


vaayeerues 
Cause of Interrupt 
clearing the exception condition in the MCP. FNINIT, FNCLEX, FNSTSW, FNSTENV, and 


An ESC instruction was encountered when EM or TS of the Intel386™ DX CPU control 
register zero (CRO) was set. EM = 1 indicates that software emulation of the instruction is 
‘required. When TS is set, either an ESC or WAIT instruction causes interrupt 7. This 
indicates that the current MCP context may not belong to the current task. 
[ FNSAVE cannot cause this interrupt. 
1. An operand may wrap around an addressing limit when the segment limit is near an addressing limit and the operand is near the largest valid 
address in the segment. Because of the wrap-around, the beginning and ending addresses of such an operand will be at opposite ends of the 
segment. There are two ways that such an operand may also span inaccessible addresses: 1) if the segment limit is not equal to the addressing 
limit (e.g. addressing limit is FFFFH and segment limit is FFFDH) the operand will span addresses that are not within the segment (e.g. an 8-byte 
operand that starts at valid offset FFFC will span addresses FFFC-FFFF and 0000-0003; however addresses FFFE and FFFF are not valid, 


because they exceed the limit); 2) if the operand begins and ends in present and accessible pages but intermediate bytes of the operand fall in a 
not-present page or a page to which the procedure does not have access rights. 


2.5 Exception Handling tion and the address of any memory operand re- 
quired by that instruction. 

The Intel387 DX MCP detects six different exception 

conditions that can occur during instruction execu- 

tion. Table 2.7 lists the exception conditions in order 2.6 Initialization 

of precedence, showing for each the cause and the Mas Gade 

default action taken by the MCP if the exception is Intel887 DX MCP initialization software must exe- 


masked by its corresponding mask bit in the control cute an FNINIT instruction (i.e. an FINIT without a 
word. preceding WAIT) to clear ERROR #. After a hardware 

RESET, the ERROR# output is asserted to indicate 
Any exception that is not masked by the control ~ that a Intel387 DX MCP is present. To accomplish 


word sets the corresponding exception flag of the this, the IE and ES bits of the status word are set, 
status word, sets the ES bit of the status word, and and _the IM bit in the control word is reset. After 
asserts the ERROR# signal. When the CPU at- FNINIT, the status word and the control word have 
tempts to execute another ESC instruction or WAIT, the same values as in an 80287 after RESET. 
exception 7 occurs. The exception condition must 

be resolved via an interrupt service routine. The In- 

tel386 DX Microprocessor saves the address of the 

floating-point instruction that caused the excep- 
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2.7 8087 and 80287 Compatibility 


This section summarizes the differences between 
the Intel387 DX MCP and the 80287. Any migration 
from the 8087 directly to the Intel387 DX MCP must 
also take into account the differences between the 
8087 and the 80287 as listed in Appendix A. 


Many changes have been designed into the Intel387 
DX MCP to directly support the IEEE standard in 
hardware. These changes result in increased per- 
formance by eliminating the need for software that 
supports the standard. 


2.7.1 GENERAL DIFFERENCES 


The Intel387 DX MCP supports only affine closure 
for infinity arithmetic, not projective closure. Bit 12 of 
the Control Word (CW) no longer defines infinity 
control. It-is a reserved bit; but it is initialized to zero 
after RESET or FINIT and is changeable upon load- 
ing the CW. Programs must ignore this bit. 


intel. 


Operands for FSCALE and FPATAN are no longer 
restricted in range (except for + °°); F2XM1 and 
FPTAN accept a wider range of operands. 


The results of transcendental operations may be 
slightly different from those computed by 80287. 


In the case of FPTAN, the Intel387 DX MCP supplies 
a true tangent result in ST(1), and (always) a floating 
point 1 in ST. 


Rounding control is in effect for FLD constant. 


Software cannot change entries of the tag word to 
values (other than empty) that do not reflect the ac- 
tual register contents. 


After reset, FINIT, and incomplete FPREM, the In- 
tel387 DX MCP resets to zero the condition code 
bits C3—Co of the status word. 


In conformance with the IEEE standard, the Intel387 
DX MCP does not support the special data formats: 
pseudozero, pseudo-NaN, pseudoinfinity, and un- 
normal. 


Table 2.7. Exceptions 


Invalid 
Operation 


Inexact 
Result 


(Precision) according to the rounding mode. 
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Cause Default Action 
} (if exception is masked) 


Operation on a signaling NaN, unsupported format, 
indeterminate form (0* °°, 0/0, (+ ©) + (— °%), etc.), or 
stack overflow/underflow (SF is also set). 


Denormalized | Atleast one of the operands is denormalized, i.e. it has Normal processing 
Operand the smallest exponent but a nonzero significand. continues 
Zero Divisor The divisor is zero while the dividend is a noninfinite, Result is 0 
nonzero number. 
Overflow The result is too large in magnitude to fit in the specified Result is largest finite value 
format. or 00 


Underflow The true result is nonzero but too small to be 
represented in the specified format, and, if underflow 
exception is masked, denormalization causes loss of 
accuracy. 


The true result is not exactly representable in the 
specified format (e.g. 1/3); the result is rounded 


Result is a quiet NaN, integer 
indefinite, or BCD indefinite 


Result is denormalized or 
zero 


Normal processing 
continues 
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2.7.2 EXCEPTIONS 


A number of differences exist due to changes in the 
IEEE standard and to functional improvements to 
the architecture of the Intel387 DX MCP: 


1. When the overflow or underflow exception is 
masked, the Intel887 DX MCP differs from the 
80287 in rounding when overflow or underflow 
occurs. The Intel387 DX MCP produces results 
that are consistent with the rounding mode. 


2. When the underflow exception is masked, the 
Intel387 DX MCP sets its underflow flag only if 
there is also a loss of accuracy during denormali- 
zation. 


3. Fewer invalid-operation exceptions due to de- 
normal operands, because the _ instructions 
FSQRT, FDIV, FPREM, and conversions to BCD 
or to integer normalize denormal operands be- 
fore proceeding. 


4. The FSQRT, FBSTP, and FPREM instructions 
may cause underflow, because they support de- 
normal operands. 


5. The denormal exception can occur during the 
transcendental instructions and the FXTRACT 
instruction. 


6. The denormal exception no longer takes prece- 
dence over all other exceptions. 


7. When the denormal exception is masked, the In- 
tel387 DX MCP automatically normalizes denor- 
mal operands. The 8087/80287 performs unnor- 
mal arithmetic, which. might produce an unnor- 
mal result. 


8. When the operand is zero, the FXTRACT in- 
struction reports a zero-divide exception and 
leaves — © in ST(1). 

9. The status word has a new bit (SF) that signals 
when invalid-operation exceptions are due to 
stack underflow or overflow. 


10. FLD extended precision no longer reports denor- 
mal exceptions, because the instruction is not 
numeric. 


11. FLD single/double precision when the operand 
is denormal converts the number to extended 
precision and signals the denormalized operand 
exception. When loading a signaling NaN, FLD 
single/double precision signals an invalid-oper- 
and exception. ) 


12. The Intel3887 DX MCP only generates quiet 
NaNs (as on the 80287); however, the Intel387 
DX MCP distinguishes between quiet NaNs and 
signaling NaNs. Signaling NaNs trigger excep- 
tions when they are used as operands; quiet 
NaNs do not (except for FCOM, FIST, and 
FBSTP which also raise IE for quiet NaNs). 

13. When stack overflow occurs during FPTAN and 
overflow is masked, both ST(0) and ST(1) con- 
tain quiet NaNs. The 80287/8087 leaves the 
original operand in ST(1) intact. 
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14. When the scaling factor is +o, the FSCALE 
(ST(0), ST(1)) instruction behaves as follows 
(ST(0) and ST(1) contain the scaled and scaling 
operands respectively): 


e FSCALE(0,) generates the invalid operation 
exception. 


e FSCALE(finite, — ©) generates zero with the 
same sign as the scaled operand. 


e FSCALE(finite, + °©) generates © with the 
same sign as the scaled operand. 


The 8087/80287 returns zero in the first case 
and raises the invalid-operation exception in the 
other cases. 


15. The Intel387 DX MCP returns signed infinity/ 
zero as the unmasked response to massive 
overflow/underflow. The 8087 and 80287 sup- 
port a limited range for the scaling factor; within 
this range either massive overflow/underflow do 
not occur or undefined results are produced. 


3.0 HARDWARE INTERFACE 


In the following description of hardware interface, 
the # symbol at the end of a signal name indicates 
that the active or asserted state occurs when the 
signal is at a low voltage. When no # is present after 
the signal name, the signal is asserted when at the 
high voltage level. 


3.1 Signal Description 


In the following signal descriptions, the Intel387 DX 
Math Coprocessor pins are grouped by function as 
follows: 


1. Execution control—CPUCLK2, NUMCLK2, CKM, 
RESETIN 


2. MCP handshake—PEREQ, BUSY #, ERROR # 


3. Bus interface pins—D31-D0, W/R#, ADS#, 
READY #, READYO# 


4. Chip/Port Select—STEN, 
CMDO # 


5. Power supplies—Vcc, Vss 


NPS1#, NPS2, 


Table 3.1 lists every pin by its identifier, gives a brief 
description of its function, and lists some of its char- 
acteristics. All output signals are tristate; they leave 
floating state only when STEN is active. The output 
buffers of the bidirectional data pins D31-—D0 are 
also tristate; they leave floating state only in read 
cycles when the MCP is selected (i.e. when STEN, 
NPS1#, and NPS2 are all active). 


Figure 3.1 and Table 3.2 together show the location 
of every pin in the pin grid array. 
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Referenced 
To 


Table 3.1. Intel387™ DX MCP Pin Summary 


Active input/ 
State Output 


CPUCLK2 Intel386™ DX CPU CLocK 2 

NUMCLK2 Intel387™ DX MCP CLock 2 

CKM Intel887™ DX MCP CLocKing Mode 

RESETIN System reset High CPUCLK2 

PEREQ Processor Extension High CPUCLK2/STEN 
REQuest 

BUSY # Busy status Low CPUCLK2/STEN 

ERROR # Error status Low NUMCLK2/STEN 


D31-D0O Data pins CPUCLK2 
W/R# Write/Read bus cycle CPUCLK2 
ADS # ADdress Strobe CPUCLK2 
READY # Bus ready input CPUCLK2 


READYO# CPUCLK2/STEN 


STatus ENable i CPUCLK2 
MCP select #1 CPUCLK2 
MCP select #2 i CPUCLK2 
CoMmanD CPUCLK2 


Ready output 


NOTE: 
STEN is referenced to only when getting the output pins into or out of tristate mode. 


Table 3.2. Intel387™ DX MCP Pin Cross-Reference 


ADS # D18 L4 
BUSY # D19 K4 
CKM D20 | 
CPUCLK24 D21 A6, AQ, B4, 
CMDO # D22 El, Pag id, 
DO D23 J2, K5, 
D1 D24 LT. 
D2 D25 
D3 D26 B2, B7, C11, 
D4 D27 Ee; Fe, eth 
D5 D28 J1,J10, L5 
D6 D29 
D7 D30 NO CONNECT K9 
D8 D31 TIE HIGH K3, L9* 
D9 ERROR # 
D10 NPS1 # 
D11 NPS2 
D12 NUMCLK2 
D13 PEREQ 
D14 READY # 
D15 READYO # 
D16 RESETIN 
D17 


*Tie high pins may either be tied high with a pullup resistor or connected to Vcc. 
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Voc BUSY# ERROR# 
e e 


TIE HIGH _READYO# 
e e 


W/R# STEN 


Veco Yss 
@ e@ 


PIN SIDE VIEW NPS2 NPS1# 
(BOTTOM) eo Se 


ADS# Voc 
e e 


READY# CMDO# 
a e 


N/C TIE HIGH 
e e 


Vsgg CPUCLK2 RESETIN 
8 ® e 


CKM NUMCLK2 
® e 


240448-5 


PEREQ 
6 


ERROR# BUSY# Vo 
e e e 


READYO# TIE HIGH 
6 ° 


STEN W/R#¥ 
es e 


Vss_ Vee 
e@ 6 


NPS1# NPS2 TOP VIEW 


Voc ADS# 
e e 


CMDO# READY# 
e e 


TIE HIGH N/C 
e 8 


RESETIN CPUCLK2 Vg5 
td e 6 


NUMCLK2 CKM 
€ a 


240448-6 


Figure 3.1. Intel387™ DX MCP Pin Configuration 
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3.1.1 Intel386™ DX CPU CLOCK 2 (CPUCLK2) 


This input uses the Intel386 DX CPU CLK2 signal to 
time the bus control logic. Several other MCP sig- 
nals are referenced to the rising edge of this signal. 
When CKM = 1 (synchronous mode) this pin also 
clocks the data interface and control unit and the 
floating-point unit of the MCP. This pin requires 
MOS-level input. The signal on this pin is divided by 
two to produce the internal clock signal CLK. 


3.1.2 Intel387™ DX MCP CLOCK 2 (NUMCLK2) 


When CKM = 0 (asynchronous mode) this pin pro- 
vides the clock for the data interface and control unit 
and the floating-point unit of the MCP. In this case, 
the ratio of the frequency of NUMCLK2 to the fre- 


CPUCLK2 


Intel386™™px CPU 


s ‘ 

intel ‘ 
quency of CPUCLK2 must lie within the range 10:16 
to 14:10. When CKM = 1 (synchronous mode) this 
pin is ignored; CPUCLK2 is used instead for the data 


interface and control unit and the floating-point unit. 
This pin requires TTL-level input. 


3.1.3 Intel387™ DX MCP CLOCKING MODE 
(CKM) 


This pin is a strapping option. When it is strapped to 
Vcc, the MCP operates in synchronous mode; when 
strapped to Vss, the MCP operates in asynchronous 
mode. These modes relate to clocking of the data 
interface and control unit and the floating-point unit 
only; the bus control logic always operates synchro- 
nously with respect to the Intel886 DX Microproces- 
sor. 


INTERFACE SYNCHRONOUS 


NUMERIC 
CORE 


ASYNCHRONOUS 


Intel387/™px MCP 


NUMCLK2 


240448-7 


Figure 3.2. Asynchronous Operation 
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3.1.4 SYSTEM RESET (RESETIN) 


A LOW to HIGH transition on this pin causes the 
MCP to terminate its present activity and to enter a 
dormant state. RESETIN must remain HIGH for at 
least 40 NUMCLK2 periods. The HIGH to LOW tran- 
sitions of RESETIN must be synchronous with 
CPUCLK2, so that the phase of the internal clock of 
the bus control logic (which is the CPUCLK2 divided 
by 2) is the same as the phase of the internal clock 
of the Intel386 DX CPU. After RESETIN goes LOW, 
at least 50 NUMCLK2 periods must pass before the 
first MCP instruction is written into the Intel887 DX 
MCP. This pin should be connected to the Intel386 
DX CPU RESET pin. Table 3.3 shows the status of 
other pins after a reset. 


Table 3.3. Output Pin Status During Reset 


3.1.5 PROCESSOR EXTENSION REQUEST 
(PEREQ) 


When active, this pin signals to the Intel886 DX CPU 
that the MCP is ready for data transfer to/from its 
data FIFO. When all data is written to or read from 
the data FIFO, PEREQ is deactivated. This signal 
always goes inactive before BUSY # goes inactive. 
This signal is referenced to CPUCLK2. It should be 
connected to the Intel386 DX CPU PEREQ input. 


3.1.6 BUSY STATUS (BUSY #) 


When active, this pin signals to the Intel3886 DX CPU 
that the MCP is currently executing an instruction. 
This signal is referenced to CPUCLK2. It should be 
connected to the Intel386 DX CPU BUSY ¥ pin. 
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3.1.7 ERROR STATUS (ERROR #) 


This pin reflects the ES bits of the status register. 
When active, it indicates that an unmasked excep- 
tion has occurred (except that, immediately after a 
reset, it indicates to the Intel886 DX Microprocessor 
that a Intel3887 DX MCP is present in the system). 
This signal can be changed to inactive state only by 
the following instructions (without a preceding 
WAIT): FNINIT, FNCLEX, FNSTENV, and FNSAVE. 
This signal is referenced to NUMCLK2. It should be 
connected to the Intel886 DX CPU ERROR # pin. 


3.1.8 DATA PINS (D31-D0) 


These bidirectional pins are used to transfer data 
and opcodes between the Intel886 DX CPU and In- 
tel387 DX MCP. They are normally connected direct- 
ly to the corresponding Intel386 DX CPU data pins. 
HIGH state indicates a value of one. DO is the least 
significant data bit. Timings are referenced to 
CPUCLKk2. 


3.1.9 WRITE/READ BUS CYCLE (W/R#) 


This signal indicates to the MCP whether the In- 
tel386 DX CPU bus cycle in progress is a read or a 
write cycle. This pin should be connected directly to 
the Intel3886 DX CPU W/R# pin. HIGH indicates a 
write cycle; LOW, a read cycle. This input is ignored 
if any of the signals STEN, NPS1 #, or NPS2 is inac- 
tive. Setup and hold times are referenced to 
CPUCLK2. 


3.1.10 ADDRESS STROBE (ADS #) 


This input, in conjunction with the READY # input 
indicates when the MCP bus-control logic may sam- 
ple W/R# and the chip-select signals. Setup and 
hold times are referenced to CPUCLK2. This pin 
should be connected to the Intel386 DX CPU ADS # 


pin. 
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3.1.11 BUS READY INPUT (READY #) 


This input indicates to the MCP when a Intel386 DX 
CPU bus cycle is to be terminated. It is used by the 
bus-control logic to trace bus activities. Bus cycles 
can be extended indefinitely until terminated by 
READY #. This input should be connected to the 
same signal that drives the Intel886 DX CPU 
“READY # input. Setup and hold times are refer- 
enced to CPUCLK2. 


3.1.12 READY OUTPUT (READYO#) 


This pin is activated at such a time that write cycles 
are terminated after two clocks (except FLDENV 
and FRSTOR) and read cycles after three clocks. In 
configurations where no extra wait states are re- 
quired, this pin must directly or indirectly drive the 
Intel886 DX CPU READY # input. Refer to section 
3.4 “Bus Operation” for details. This pin is activated 
only during bus cycles that select the MCP. This sig- 
nal is referenced to CPUCLK2. 


3.1.13 STATUS ENABLE (STEN) 


This pin serves as a chip select for the MCP. When 
inactive, this pin forces BUSY #, PEREQ, ERROR #, 
and READYO ¥ outputs into floating state. D31-—D0 
are normally floating and leave floating state only if 
STEN is active and additional conditions are met. 
STEN also causes the chip to recognize its other 
chip-select inputs. STEN makes it easier to do on- 
board testing (using the overdrive method) of other 
chips in systems containing the MCP. STEN should 
be pulled up with a resistor so that it can be pulled 
down when testing. In boards that do not use on- 
board testing, STEN should be connected to Vcc. 
Setup and hold times are relative to CPUCLK2. Note 
that STEN must maintain the same setup and hold 
times as NPS1#, NPS2, and CMD0O# (i.e. if STEN 
changes state during a Intel887 DX MCP bus cycle, 
it should change state during the same CLK period 
as the NPS1#, NPS2, and CMD0O# signals). 


3.1.14 MCP Select #1 (NPS1#) 


When active (along with STEN and NPS2) in the first 
period of a Intel886 DX CPU bus cycle, this signal 
indicates that the purpose of the bus cycle is to com- 
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municate with the MCP. This pin should be connect- 
ed directly to the Intel886 DX CPU M/IO# pin, so 
that the MCP is selected only when the Intel386 DX 


CPU performs I/O cycles. Setup and hold times are 
referenced to CPUCLk2. 


3.1.15 MCP SELECT #2 (NPS2) 


When active (along with STEN and NPS1#) in the 
first period of an Intel886\DX CPU bus cycle, this 
signal indicates that the purpose of the bus cycle is 
to communicate with the MCP. This pin should be 
connected directly to the Intel886 DX CPU A31 pin, 
so that the MCP is selected only when the Intel386 
DX CPU uses one of the I/O addresses reserved for 
the MCP (800000F8 or 800000FC). Setup and hold 
times are referenced to CPUCLK2. 


3.1.16 COMMAND (CMD0#) 


During a write cycle, this signal indicates whether an 
opcode (CMDO# active) or data (CMDO# inactive) 
is being sent to the MCP. During a read cycle, it 
indicates whether the control or status register 
(CMDO # active) or a data register (CMD0 # inactive) 
is being read. CMD0O# should be connected directly 
to the A2 output of the Intel886 DX Microprocessor. 
Setup and hold times are referenced to CPUCLkK2. 


3.2 Processor Architecture 


As shown by the block diagram on the front page, 


-the MCP is internally divided into three sections: the 


bus control logic (BCL), the data interface and con- 
trol unit, and the floating point unit (FPU). The FPU 
(with the support of the control unit which contains 
the sequencer and other support units) executes all 
numerics instructions. The data interface and control 
unit is responsible for the data flow to and from the 
FPU and the control registers, for receiving the in- 
structions, decoding them, and sequencing the mi- 
croinstructions, and for handling some of the admin- 
istrative instructions. The BCL is responsible for the 
Intel386 DX CPU bus tracking and interface. The 
BCL is the only unit in the Intel887 DX MCP that 
must run synchronously with the Intel886 DX CPU; 
the rest of the MCP can run asynchronously with 
respect to the Intel886 DX Microprocessor. 
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3.2.1 BUS CONTROL LOGIC 


The BCL communicates solely with the CPU using 
I/O bus cycles. The BCL appears to the CPU as a 
special peripheral device. It is special in two re- 
spects: the CPU initiates |/O automatically when it 
encounters ESC instructions, and the CPU uses re- 
served |/O addresses to communicate with the BCL. 
The BCL does not communicate directly with memo- 
ry. The CPU performs all memory access, transfer- 
ring input operands from memory to the MCP and 
transferring outputs from the MCP to memory. 


3.2.2 DATA INTERFACE AND CONTROL UNIT 


The data interface and control unit latches the data 
and, subject to BCL control, directs the data to the 
FIFO or the instruction decoder. The instruction de- 
coder decodes the ESC instructions sent to it by the 
CPU and generates controls that direct the data flow 
in the FIFO. It also triggers the microinstruction se- 
quencer that controls execution of each instruction. 
If the ESC instruction is FINIT, FCLEX, FSTSW, 
FSTSW AX, or FSTCW, the control executes it inde- 
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pendently of the FPU and the sequencer. The data 
interface and control unit is the one that generates 
the BUSY #, PEREQ and ERROR # signals that syn- 
chronize Intel887 DX MCP activities with the In- 
tel386 DX CPU. It also supports the FPU in all opera- 
tions that it cannot perform alone (e.g. exceptions 
handling, transcendental operations, etc.). 


3.2.3 FLOATING POINT UNIT 


The FPU executes all instructions that involve the 
register stack, including arithmetic, logical, transcen- 
dental, constant, and data transfer instructions. The 
data path in the FPU is 84 bits wide (68 significant 
bits, 15 exponent bits, and’a sign bit) which allows 
internal operand transfers to be performed at very 
high speeds. 


3.3 System Configuration 


As an extension to the Intel886 DX Microprocessor, 
the Intel887 DX Math Coprocessor can be connect- 
ed to the CPU as shown by Figure 3.3. A dedicated 
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Table 3.4. Bus Cycles Definition 


communication protocol makes possible high-speed 
transfer of opcodes and operands between the In- 
tel386 DX CPU and Intel387 DX MCP. The Intel387 
DX MCP is designed so that no additional compo- 
nents are required for interface with the Intel386 DX 
CPU. The Intel3887 DX MCP shares the 32-bit wide 
local bus of the Intel386 DX CPU and most control 
pins of the Intel887 DX MCP are connected directly 
to pins of the Intel3886 DX Microprocessor. 


3.3.1 BUS CYCLE TRACKING 


The ADS# and READY # signals allow the MCP to 
track the beginning and end of the Intel886 DX CPU 
bus cycles, respectively. When ADS # is asserted at 
the same time as the MCP chip-select inputs, the 
bus cycle is intended for the MCP. To signal the end 
of a bus cycle for the MCP, READY # may be assert- 
ed directly or indirectly by the MCP or by other bus- 
control logic. Refer to Table 3.4 for definition of the 
types of MCP bus cycles. 


3.3.2 MCP ADDRESSING 


The NPS1#, NPS2 and STEN signals allow the 
MCP to identify which bus cycles are intended for 
the MCP. The MCP responds only to I/O cycles 
when bit 31 of the I/O address is set. In other words, 
the MCP acts as an I/O device in a reserved |/O 
address space. 


Because A3; is used to select the MCP for data 
transfers, it is not possible for a program running on 
the Intel386 DX CPU to address the MCP with an |/ 
O instruction. Only ESC instructions cause the In- 
tel386 DX Microprocessor to communicate with the 
MCP. The Intel386 DX CPU BS16# input must be 
inactive during |/O cycles when A3; is active. 


3.3.3 FUNCTION SELECT 


The CMDO# and W/R# signals identify the four 
kinds of bus cycle: control or status register read, 
data read, opcode write, data write. 
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STEN | NPSi# | NPS2_ | CMDo# Bus Cycle Type 


MCP not selected and all 
outputs in floating state 

MCP not selected 

MCP not selected 

CW or SW read from MCP 

Opcode write to MCP 

Data read from MCP 

Data write to MCP 


3.3.4 CPU/MCP Synchronization 


The pin pairs BUSY#, PEREQ, and ERROR# are 
used for various aspects of synchronization between 
the CPU and the MCP. 


BUSY # is used to synchronize instruction transfer 
from the Intel886 DX CPU to the MCP. When the 
MCP recognizes an ESC instruction, it asserts 
BUSY #. For most ESC instructions, the Intel386 DX 
CPU waits for the MCP to deassert BUSY # before 
sending the new opcode. 


The MCP uses the PEREQ pin of the Intel386 DX 
CPU to signal that the MCP is ready for data transfer 
to or from its data FIFO. The MCP does not directly 
access memory; rather, the Intel386 DX Microproc- 
essor provides memory access services for the 
MCP. Thus, memory access on behalf of the MCP 
always obeys the rules applicable to the mode of the 
Intel386 DX CPU, whether the Intel386 DX CPU be 
in real-address mode or protected mode. 


Once the Intel386 DX CPU initiates an MCP instruc- 
tion that has operands, the Intel386 DX CPU waits 
for PEREQ signals that indicate when the MCP is 
ready for operand transfer. Once all operands have 
been transferred (or if the instruction has no oper- 
ands) the Intel386 DX CPU continues program exe- 
cution while the MCP executes the ESC instruction. 


In 8086/8087 systems, WAIT instructions may be 
required to achieve synchronization of both com- 
mands and operands. In 80286/80287, Intel386 DX 
Microprocessor and Intel3887 DX Math Coprocessor 
systems, WAIT instructions are required only for op- 
erand synchronization; namely, after MCP stores to 
memory (except FSTSW and FSTCW) or loads from 
memory. Used this way, WAIT ensures that the val- 
ue has already been written or read by the MCP be- 
fore the CPU reads or changes the value. 


oa 
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Once it has started to execute a numerics instruction 
and has transferred the operands from the Intel386 
DX CPU, the MCP can process the instruction in par- 
allel with and independent of the host CPU. When 
the MCP detects an exception, it asserts the ER- 


ROR # signal, which causes a Intel886 DX CPU in- 
terrupt. 


3.3.5 SYNCHRONOUS OR ASYNCHRONOUS 
MODES 


The internal logic of the Intel887 DX MCP (the FPU) 
can either operate directly from the CPU clock (syn- 
chronous mode) or from a separate clock (asynchro- 
nous mode). The two configurations are distin- 
guished by the CKM pin. In either case, the bus con- 
trol logic (BCL) of the MCP is synchronized with the 
CPU clock. Use of asynchronous mode allows the 
Intel386 DX CPU and the FPU section of the MCP to 
run at different speeds. In this case, the ratio of the 
frequency of NUMCLK2 to the frequency of 
CPUCLK2 must lie within the range 10:16 to 14:10. 
Use of synchronous mode eliminates one clock gen- 
erator from the board design. 


3.3.6 AUTOMATIC BUS CYCLE TERMINATION 


In configurations where no extra wait states are re- 
quired, READYO# can be used to drive the Intel386 
DX CPU READY # input. If this pin is used, it should 
be connected to the logic that ORs all READY out- 
puts from peripherals on the Intel886 DX CPU bus. 
READYO# is asserted by the MCP only during I/O 
cycles that select the MCP. Refer to section 3.4 
“Bus Operation” for details. 


3.4 Bus Operation 


With respect to the bus interface, the Intel887 DX 
MCP is fully synchronous with the Intel886 DX Mi- 
croprocessor. Both operate at the same rate, be- 
cause each generates its internal CLK signal by di- 
viding CPUCLK2 by two. 


The Intel886 DX CPU initiates a new bus cycle by 
activating ADS #. The MCP recognizes a bus cycle, 
if, during the cycle in which ADS# is activated, 
STEN, NPS1#, and NPS2 are all activated. Proper 
operation is achieved if NPS1# is connected to the 
M/lO# output of the Intel386 DX CPU, and NPS2 to 
_ the A31 output. The Intel3886 DX CPU’s A31 output 
is guaranteed to be inactive in all bus cycles that do 
not address the MCP (i.e. |1/O cycles to other devic- 
es, interrupt acknowledge, and reserved types of 
bus cycles). System logic must not signal a 16-bit 
bus cycle via the Intel3886 DX CPU BS16 # input dur- 
ing |/O cycles when A931 is active. 
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During the CLK period in which ADS # is activated, 
the MCP also examines the W/R# input signal to 
determine whether the cycle is a read or a write cy- 
cle and examines the CMD0O# input to determine 
whether an opcode, operand, or control/status reg- 
ister transfer is to occur. 


The Intel887 DX MCP supports both pipelined and 
nonpipelined bus cycles. A nonpipelined cycle is one 
for which the Intel386 DX CPU asserts ADS # when 
no other MCP bus cycle is in progress. A pipelined 
bus cycle is one for which the Intel386 DX CPU as- 
serts ADS# and provides valid next-address and 
control signals as soon as in the second CLK period 
after the ADS# assertion for the previous Intel386 
DX CPU bus cycle. Pipelining increases the availabil- 
ity of the bus by at least one CLK period. The MCP 
supports pipelined bus cycles in order to optimize 
address pipelining by the Intel386 DX CPU for mem- 
ory cycles. 


Bus operation is described in terms of an abstract 
state machine. Figure 3.4 illustrates the states and 
state transitions for MCP bus cycles: 


e T; is the idle state. This is the state of the bus 
logic after RESET, the state to which bus logic 
returns after evey nonpipelined bus cycle, and 
the state to which bus logic returns after a series 
of pipelined cycles. 


¢ Trs is the READY# sensitive state. Different 
types of bus cycle may require a minimum of one 
or two successive Trs states. The bus logic re- 
mains in Trs state until READY # is sensed, at 
which point the bus cycle terminates. Any number 
of wait states may be implemented by delaying 
READY #, thereby causing additional successive 
Trs states. 


e Tp is the first state for every pipelined bus cycle. | 


READY * ADS 


“ALWAYS” 


READY * ADS# 
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Figure 3.4. Bus State Diagram 
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The READYO # output of the Intel887 DX MCP indi- 
cates when a bus cycle for the MCP may be termi- 
nated if no extra wait states are required. For all 
write cycles (except those for the instructions 
FLDENV and FRSTOR), READYO# is always as- 
serted in the first Tas state, regardless of the num- 
ber of wait states. For all read cycles and write cy- 
cles for FLDENV and FRSTOR, READYO# is al- 
ways asserted in the second Trs state, regardless 
of the number of wait states. These rules apply to 
both pipelined and nonpipelined cycles. Systems de- 
signers must use READYO # in one of the following 
ways: 


1. Connect it (directly or through logic that ORs 
READY signals from other devices) to the 
READY # inputs of the Intel886 DX CPU and In- 
tel387 DX MCP. 


2. Use it as one input to a wait-state generator. 


The following sections illustrate different types of 
MCP bus cycles. 


Because different instructions have different 
amounts of overhead before, between, and after op- 
erand transfer cycles, it is not possible to represent 
in a few diagrams all of the combinations of succes- 
sive operand transfer cycles. The following bus-cy- 
cle diagrams show memory cycles between MCP 
operand-transfer cycles. Note however that, during 
the instructions FLDENV, FSTENV, FSAVE, and 
FRSTOR, some consecutive accesses to the MCP 
do not have intervening memory accesses. For the 
timing relationship between operand transfer cycles 
and opcode write or other overhead activities, see 
Figure 3.8. 


3.4.1 NONPIPELINED BUS CYCLES 


Figure 3.5 illustrates bus activity for consecutive 
nonpipelined bus cycles. 


3.4.1.1 Write Cycle 


At the second clock of the bus cycle, the Intel387 . 


DX MCP enters the Tras (READY #-sensitive) state. 
During this state, the Intel887 DX MCP samples the 
READY # input and stays in this state as long as 
READY # is inactive. 
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In write cycles, the MCP drives the READYO# sig- 
nal for one CLK period beginning with the second 
CLK of the bus cycle; therefore, the fastest write 
cycle takes two CLK cycles (see cycle 2 of Figure 
3.5). For the instructions FLDENV and FRSTOR, 
however, the MCP forces a wait state by delaying 
the activation of READYO# to the second Trs cy- 
cle (not shown in Figure 3.5). 


When READY # is asserted the MCP returns to the 
idle state, in which ADS# could be asserted again 
by the Intel386 DX Microprocessor for the next cy- 
Cle. 


3.4.1.2 Read Cycle 


At the second clock of the bus cycle, the MCP en- 
ters the Tps state. See Figure 3.5. In this state, the 
MCP samples the READY # input and stays in this 
state as long as READY # is inactive. 


At the rising edge of CLK in the second clock period 
of the cycle, the MCP starts to drive the D31-D0 
outputs and continues to drive them as long as it 
Stays in Trs state. 


In read cycles that address the MCP, at least one 
wait state must be inserted to insure that the In- 
tel386 DX CPU latches the correct data. Since the 
MCP starts driving the system data bus only at the 
rising edge of CLK in the second clock period of the 
bus cycle, not enough time is left for the data signals 
to propagate and be latched by the Intel386 DX CPU 
at the falling edge of the same clock period. The 
MCP drives the READYO# signal for one CLK peri- 
od in the third CLK of the bus cycle. Therefore, if the 
READYO# output is used to drive the Intel386 DX 
CPU READY # input, one wait state is inserted auto- 
matically. 


Because one wait state is required for MCP reads, 
the minimum is three CLK cycles per read, as cycle 
3 of Figure 3.5 shows. 


When READY # is asserted the MCP returns to the 
idle state, in which ADS# could be asserted again 
by the Intel386 DX CPU for the next cycle. The tran- 
sition from Trs state to idle state causes the MCP to 
put the tristate D31-D0 outputs into the floating 
state, allowing another device to drive the system 
data bus. 


CYCLE 1 CYCLE 2 


NON=PIPELINED | NON=PIPELINED 
MEMORY READ MCP WRITE 


y Trs T; Trs Lbs 


CPUCLK2 


“UU 
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ue 
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CYCLE 3 
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Cycles 1 & 2 represent part of the operand transfer cycle for instructions involving either 4-byte or 8-byte operand loads. 
Cycles 3 & 4 represent part of the operand transfer cycle for a store operation. 
*Cycles 1 & 2 could repeat here or T; states for various non-operand transfer cycles and overhead. 


Figure 3.5. Nonpipelined Read and Write Cycles 


3.4.2 PIPELINED BUS CYCLES 


Because all the activities of the Intel3887 DX MCP 
bus interface occur either during the Trs state or 
during the transitions to or from that state, the only 
difference between a pipelined and a nonpipelined 
cycle is the manner of changing from one state to 
another. The exact activities in each state are de- 
tailed in the previous section ‘‘Nonpipelined Bus Cy- 
cles”. 


When the Intel886 DX CPU asserts ADS# before 
the end of a bus cycle, both ADS# and READY # 
are active during a Trs state. This condition causes 
the MCP to change to a different state named Tp. 
The MCP activities in the transition from a Trs state 
to a Tp state are exactly the same as those in the 
transition from a Trs state to a T; state in nonpipe- 
lined cycles. 


Tp state is metastable; therefore, one clock period 
later the MCP returns to Trs state. In consecutive 
pipelined cycles, the MCP bus logic uses only Trs 
and Tp states. 


Figure 3.6 shows the fastest transition into and out 
of the pipelined bus cycles. Cycle 1 in this figure 
represents a nonpipelined cycle. (Nonpipelined write 
cycles with only one Trg state (i.e. no wait states) 
are always followed by another nonpipelined cycle, 
because READY # is asserted before the earliest 
possible assertion of ADS# for the next cycle.) 


Figure 3.7 shows the pipelined write and read cycles 
with one additional Tras states beyond the minimum 
required. To delay the assertion of READY# re- 
quires external logic. 
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3.4.3 BUS CYCLES OF MIXED TYPE 


When the Intel3887 DX MCP bus logic is in the Tras 
state, it distinguishes between nonpipelined and 
pipelined cycles according to the behavior of ADS # 
and READY#. In a nonpipelined cycle, only 
READY # is activated, and the transition is from Trs 
to idle state. In a pipelined cycle, both READY # and 
ADS # are active and the transition is first from Tras 
state to Tp state then, after one clock period, back 
to Trs state. 


3.4.4 BUSY # AND PEREQ TIMING 
RELATIONSHIP 


Figure 3.8 shows the activation of BUSY# at the 
beginning of instruction execution and its deactiva- 


cy 

intel. 
tion after execution of the instruction is complete. 
When possible, the Intel887 DX MCP may deacti- 
vate BUSY # prior to the completion of the current 
instruction allowing the CPU to transfer the next in- 
struction’s opcode and operands. PEREQ is activat- 
ed in this interval. If ERROR# (not shown in the 
diagram) is ever asserted, it would occur at least six 
CPUCLK2 periods after the deactivation of PEREQ 
and at least six CPUCLK2 periods before the deacti- 
vation of BUSY #. Figure 3.8 shows also that STEN 
is activated at the beginning of a bus cycle. 


CYCLE 2 
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MCP WRITE 


CYCLE 1 
NON=PIPELINED 
MEMORY READ 


CYCLE 3 
PIPELINED 
MEMORY READ 


CYCLE 4 
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Cycle 1-Cycle 4 represent the operand transfer cycle for an instruction involving a transfer of two 32-bit loads in total. 


The opcode write cycles and other overhead are not shown. 


Note that the next cycle will be a pipelined cycle if both READY # and ADS# are sampled active at the end of a Tps 


state of the current cycle. 


Figure 3.6. Fastest Transitions to and from Pipelined Cycles 
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1. Cycles between operand write to the MCP and storing result. 


Figure 3.7. Pipelined Cycles with Wait States 


OPCODE 
WRITE 


CPUCLK2 


(CLK) 


ADS# 


READY# 


BUSY# 


NOTE 1] NOTE 2 


NOTES: 

1. Instruction dependent. 
2. PEREQ is an asynchronous input to the Intel886™ DX Microprocessor; it may not be asserted (instruction depen- 
dent). 

3. More operand transfers. 

4. Memory read (operand) cycle is not shown. 


1ST OPERAND 
WRITE 


NOTE 3| NOTE 1 


Figure 3.8. STEN, BUSY # and PEREQ Timing Relationship 
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4.0 ELECTRICAL DATA 


4.1 Absolute Maximum Ratings* 


Case Temperature Tc 


Under BIAS Cients apni adness —65°C to, F1IeC 
Storage Temperature .......... —65°C to +150°C 
Voltage on Any Pin with — 

Respect to Ground ......... —0.5 to Voc +0.5V 
POWEr DISSINBNOMN ss cvcletwaks cuddasae cick ¥ 1.5W 


4.2 DC Characteristics 


in | a 


NOTICE: This is a production data sheet. The specifi- 
cations are subject to change without notice. 


*WARNING: Stressing the device beyond the “Absolute 
Maximum Ratings” may cause permanent damage. 
These are stress ratings only. Operation beyond the 
“Operating Conditions” is not recommended and ex- 
tended exposure beyond the “Operating Conditions”’ 
may affect device reliability. 


Table 4.1. DC Specifications Tc = 0° to 85°C, Voc = 5V +5% 


| Symbol | ____Parameter_ | Min 


Input LO Voltage 

Input HI Voltage 

CPUCLK2 Input LO Voltage 

CPUCLK2 Input HI Voltage 

Output LO Voltage 

Output HI Voltage 

Supply Current 
NUMCLK2 = 32 MHz(4) 
NUMCLK2 = 40 MHz(4) 
NUMCLK2 = 50 MHz(4) 
NUMCLK2 = 66.6 MHz(4) 

Input Leakage Current 

1/O Leakage Current 

Input Capacitance 

1/O or Output Capacitance 

Clock Capacitance 


NOTES: 


| Units Test Conditions 


(Note 1) 
_ (Note 1) 


(Note 2) 
(Note 3) 


95 mA 
105 mA 
loc typ. = 125mA 
Icc typ. = 150 mA 
OV < Vin < Voc 
0.45V < Vo < Vcc 
fc = 1 MHz 

fc = 1 MHz 

fc = 1 MHz 


Icc typ. = 
loc typ. 


1. This parameter is for all inputs, including NUMCLK2 but ve CPUCLKk2. 


2. This parameter is measured at lo, as follows: 
data = 4.0 mA 
READYO# = 2.5 mA 
ERROR #, BUSY #, PEREQ = 2.5mA 

. This parameter is measured at Ioy as follows: 
data = 1.0mA 
READYO# = 0.6 mA 
ERROR#, BUSY #, PEREQ = 0.6 mA 


ie) 


4. lcc is measured at steady state, maximum capacitive loading on the outputs, CPUCLK2 at the same frequency as 


NUMCLK2. 


1-192 


a 
intel | Intel387™ DX MATH COPROCESSOR 


4.3 AC Characteristics 
Table 4.2a. i387 DX/i386 DX Interface and Execution Frequencies 


i387 DX 16-33 
Execution Frequency (MHz) 


10.0 MHz 
12.5 MHz 
15.6 MHz 
20.6 MHz 


i386 DX System 
Frequency (MHz) 


22.4 MHz 
28.0 MHz 
33.0 MHz 
33.0 MHz 


NOTE: 
The external clock frequencies for the i887 DX and i386 DX are 
equal to twice the interface and execution frequencies show 
above. 


Table 4.2b. Timing Requirements of the Execution Unit 
Tc = 0°C to + 85°C, : aaa = 5V +5% 


Test Figure 


NUMCLK2 Period 2.0V 
NUMCLK2 High Time 2.0V 
NUMCLK2 High Time 3.7V 
NUMCLK2 Low Time 2.0V 
~NUMCLK2 Low Time 0.8V 
NUMCLK2 Fall Time 3.7V to 0.8V 
NUMCLK2 Rise Time 0.8V to 2.7V 


Table 4.2c. Timing Requirements of the Bus Interface Unit 
Tc = O°C to + 85°C, Voc = 5V +5% 
(All measurements made at 1.5V and 50 a ae unless otherwise specified) 


CPUCLK2 
CPUCLK2 
CPUCLK2 
CPUCLK2 
CPUCLK2 
CPUCLK2 
CPUCLK2 


READYO # 
READYO #()) 
PEREQ 
BUSY # 
BUSY # (1) 
ERROR # 


D31-D0 
D31-D0O 
D31-D0 
D31-DOo(2) 


Period 
High Time 
High Time 
Low Time 
Low Time 
Fall Time 
Rise Time 


Out Delay 
Out Delay 
Out Delay 
Out Delay 
Out Delay 
Out Delay 


Out Delay 
Setup Time 
Hold Time 
Float Time 


oOowowo;rFP HAHAH 


2.0V 
2.0V 
3.7V 
2.0V 
0.8V 
3.7V to 0.8V 
0.8V to 3.7V 


. sy a 
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Table 4.2c. Timing Requirements of the Bus Interface Unit (Continued) 
Te = O°C to + 85°C, Voc = 5V +5% 
(All measurements made at 1.5V and 50 pF unless otherwise specified) 


parameter | 1OMHz-33MHz | Test Figure 
rame Conditions Reference 
NOTES: 


1. Not tested at 25 pF. 


2. Float delay is not tested. Float condition occurs when maximum output current becomes less than |.o in magnitude. 


PEREQ(2) t13 Float Time 1 30 
BUSY # (2) t13 Float Time 1 30 
ERROR 4 (2) t13 Float Time 1 30 
READYO # (2) t13 Float Time 1 30 


t14 Setup Time 13 

t15 Hold Time 4 

t14 Setup Time 13 
t15 Hold Time 4 

NPS2 

STEN 


Setup Time rg 
Hold Time 4 
Setup Time 13 
Hold Time 2 
Setup Time 13 
Hold Time 2 
Setup Time 13 
STEN Hold Time 2 


RESETIN t18 Setup Time 
RESETIN t19 Hold Time 


READY # 
READY # 
CMDO # 
CMDO # 
NPS1 # 
NPS2 
NPS1 # 


125 150 


240448-15 


‘needy « Teartindl alias | 240448-14 This graph will not be linear outside of the C_ range 


shown. 


NOTE: x : 
This graph will not be linear outside of the C, range Figure 4.0b. Typical Output Rise Time vs Load 


shown. Capacitance at Max Operating Temperature 


Figure 4.0a. Typical Output Valid Delay vs Load 
Capacitance at Max Operating Temperature 
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VCH (MIN) VCH (MIN) 


CPUCLK2/NUMCLK2 
2.0V ° 2.0V 


MIN DELAY 


1.5V 
INPUTS 


OUTPUTS 1.5V 


MAX DELAY 
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Figure 4.1. CPUCLK2/NUMCLK2 Waveform and Measurement Points for 
Input/Output A.C. Specifications 
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Figure 4.2. Output Signals 
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Figure 4.3. Input and I/O Signals 


(PH1 or PH2) (PH1 or PH2) 


CPUCLK2 


RESET l Wn 


NOTE: 240448-19 
The second internal processor phase following RESET high to low transition is PH2. 


Figure 4.4. RESET Signal 
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Figure 4.5. Float from STEN 
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Table 4.3. Other Parameters 


[Symbor [Parameter | win 
ae ee 
[te1 | RESETIN inactive to tet Opcode wite | 50 
2 
Tausv#,eRROR® | te | ERRORS (in) Ace to BUSY racive | 6 

PEREG. ERRORe | te4 | PEREQInactvetoERROR® Acive | 6 | | CPUCLKA 


READY # Minimum Time from Opcode Write to CPUCLK2 
Opcode/Operand Write 

READY # t37 Minimum Time from Operand Write to CPUCLK2 
Operand Write 


ss 
1ST OPCODE 1ST OPERAND | 2ND opERAND 
WRITE WRITE WRITE (NOTE 1) 


= 
on 
i 
O 
A 
De) 


CPUCLK2 


(CLK) 


ERROR# 


ed ed 


240448-21 
* In NUMCLK2’s 
** or last operand 


NOTE: 
1. Memory read (operand) cycle is not shown. 


Figure 4.6. Other Parameters 
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5.0 Intel387™ DX MCP EXTENSIONS 
TO THE Intel386™ DX CPU 
INSTRUCTION SET 


Instructions for the Intel887 DX MCP assume one of 
the five forms shown in the following table. In all 
cases, instructions are at least two bytes long and 
begin with the bit pattern 11011B, which identifies 
the ESCAPE class of instruction. Instructions that 
refer to memory operands specify addresses using 
the Intel386 DX CPU addressing modes. 


OP = Instruction opcode, possible split into two 
fields OPA and OPB 


MF = Memory Format 
00—32-bit real 
01—32-bit integer 
10—64-bit real 
11—16-bit integer 


= Pop 
O—Do not pop stack 
1—Pop stack after operation 


ESC = 11011 


d = Destination 
0—Destination is ST(0) 
1—Destination is ST(i) 


d = 0—Destination (op) Source 


XO 
XOR d = 1—Source (op) Destination 


R 
R 
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Second Byte 


Optional 
Fields 


ST(i) = Register stack element / 
000 = Stack top 
001 = Second stack element 
& 
e 
@ 


111 = Eighth stack element 


MOD (Mode field) and R/M (Register/Memory spec- 
ifier) have the same interpretation as the corre- 
sponding fields of the Intel886 DX Microprocessor 
instructions (refer to /nte/386™ DX Microprocessor 
Programmer’s Reference Manual’). 


SIB (Scale Index Base) byte and DISP (displace- 
ment) are optionally present in instructions that have 
MOD and R/M fields. Their presence depends on 
the values of MOD and R/M, as for Intel386 DX Mi- 
croprocessor instructions. 


The instruction summaries that follow assume that 
the instruction has been prefetched, decoded, and is 
ready for execution; that bus cycles do not require 
wait states; that there are no local bus HOLD re- 
quest delaying processor access to the bus; and 
that no exceptions are detected during instruction 
execution. If the instruction has MOD and R/M fields 
that call for both base and index registers, add one 
clock. 
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Intel387™ DX MCP Extensions to the Intel386™ DX CPU Instruction Set 


DATA TRANSFER 
FLD = Load@ 
Integer/real memory to ST(0) 


Long integer memory to ST(0) 
Extended real memory to ST(0) 
BCD memory to ST(0) 
ST(i) to ST(0) 

FST = Store 
ST(0) to integer/real memory 
ST(0) to ST(i) 

FSTP = Store and Pop 
ST(0) to integer/real memory 
ST(0) to long integer memory 
ST(0) to extended real 
ST(0) to BCD memory 
ST(0) to ST(i) 

FXCH = Exchange 
ST(i) and ST(0) 

COMPARISON 

FCOM = Compare 
Integer/real memory to ST(0) 
ST(i) to ST(O) 

FCOMP = Compare and pop 
Integer/real memory to ST 


ST(i) to ST(O) 


FCOMPP = Compare and pop twice 


ST(1) to ST(0) 
FTST = Test ST(0) 


FXAM = Examine ST(0) 


CONSTANTS 

FLDZ = Load +0.0 into ST(0) 
FLD1 = Load + 1.0 into ST(0) 
FLDPI = Load pi into ST(0) 


FLDL2T = Load loga(10) into ST(0) 


Clock Count Range 


Byte Byte Optional 32-Bit 32-Bit 64-Bit 16-Bit 
0 1 Bytes 2-6 Real Integer Real Integer 


9-18 26-42 16-29 
26-54 
12-43 
45-97 
7-12 


ESC MF 1 MOD 010 R/M S!IB/DISP 25-43 57-76 32-44 
ESC 101 . 11010 ST(i) 7-11 


SIB/DISP 25-43 57-76 32-44 
60-82 
46-52 
112-190 
7-11 


ESC 001 11001 ST(i) 


ESC MF 0 MOD 010 R/M SIB/DISP 13-25 34-52 14-27 
ESC 000 11010 ST(i) 13-21 


ESCMFO | MOD011R/M SIB/DISP 19-25 34-82 - 44-87 
11011 ST(i) 13-21 


Esciro [11011001 | 19-21 
ESC 001 1110 0100 17-25 


Escoot | 11100101 


Shaded areas indicate instructions not available in 8087/80287. 


NOTE: 


a. When loading single- or double-precision zero from memory, add 5 clocks. 
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Intel387T™ DX MCP Extensions to the Intel386™ DX CPU Instruction Set (Continued) 


Encoding Clock Count Range 
Byte Byte Optional 32-Bit 32-Bit 64-Bit 16-Bit 
0 1 Bytes 2-6 Real Integer Real Integer 


CONSTANTS (Continued) 


FLDL2E = Load logoa(e) into ST(0) ESC 001 1110 1010 
FLDLG2 = Load logj0(2) into ST(0) ESC 001 1110 1100 
FLDLN2 = Load log,(2) into ST(0) ESC 001 1110 1101 


ARITHMETIC 
FADD = Add 


Integer/real memory with ST(0) 
ST()) and ST(0) 

FSUB = Subtract 
Integer/real memory with ST(0) 
ST()) and ST(0) 

FMUL = Multiply 
Integer/real memory with ST(0) 
ST(i) and ST(0) 


FDIV = Divide 


12-29 34-56 15-34 38-64 


12-265 


12-29 34-56 15-34 38-64¢ 


12-264 


43-71 23-53 


46-74 


17-50¢ 


Integer/real memory with ST(0) ESC MF 0 MOD 11 R R/M SIB/DISP 101-114f 81-91 
ST(i) and ST(0) ESCdPO 1111 RR/M 77-80h 


FSQRTi = Square root ESC 001 1111 1010 
FSCALE = Scale ST(0) by ST(1) ESC 001 1111 1101 
FPREM = Partial remainder ESC 001 1111 1000 


97-111 


44-82 


56-140 


FRNDINT = Round ST(0) ESC 001 1111 1100 
to integer 


FXTRACT = Extract components 


of ST(0) ESC 001 11110100 
FABS = Absolute value of ST(0) ESC 001 1110 0001 
FCHS = Change sign of ST(0) ESC 001 1110 0000 


Shaded areas indicate instructions not available in 8087/80287. 


NOTES: 

b. Add 3 clocks to the range when d = 1. 

c. Add 1 clock to each range when R = 1. 

d. Add 3 clocks to the range when d = 0. 

e. typical = 52 (When d = 0, 46-54, typical = 49). 
f. Add 1 clock to the range when R = 1. 

g. 135-141 when R = 1. 

h. Add 3 clocks to the range when d = 1. 

L-0 6s S70) <= +m, 
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, Intel387T™ DX MCP Extensions to the Intel386™ DX CPU Instruction Set (Continued) 
| 


Byte Byte Optional Clock Count Range 
0 1 Bytes 2-6 


TRANSCENDENTAL 


FPTANK = Partial tangent of ST(0) ESC 001 11110010 162-430i 
FPATAN = Partial arctangent ESC 001 11110011 250-420 


F2XM1! = 2ST(0) — 1 ESC 001 1111 0000 167-410 
FYL2X™ = ST(1) * loga(ST(0)) ESC 001 99-436 
FYL2XP1" = ST(1) * logo(ST(0) + 1.0) ESC 001 210-447 


PROCESSOR CONTROL 


FINIT = Initialize MCP ESC 011 33 
FSTSW AX = Store status word 13 
FLDCW = Load control word 19 
FSTCW = Store control word 15 
FSTSW = Store status word 15 


FCLEX = Clear exceptions 11 
FSTENV = Store environment 103-104 
FLDENV = Load environment 71 
FSAVE = Save state 375-376 
FRSTOR = Restore state 

FINCSTP = Increment stack pointer 


FDECSTP = Decrement stack pointer ESC 001 11110110 
FFREE = Free ST(i) ESC 101 1100 0 ST(i) 
FNOP = No operations ESC 001 1101 0000 


Shaded areas indicate instructions not available in 8087/80287. 


NOTES: 

j. These timings hold for operands in the range |x| < a/4. For operands not in this range, up to 76 additional clocks may be 
needed to reduce the operand. 

k.0 < | ST(O)| < 263, 

#102 STO} = 2.0.-.2° 

m. 0 < ST(0) < 0, —o% < ST(1) < +0. 

n.0 < |ST(0)| < (2 — SQRT(2))/2, —2 < ST(1) < +0. 
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APPENDIX A 
COMPATIBILITY BETWEEN 
THE 80287 AND THE 8087 


The 80286/80287 operating in Real-Address mode 
will execute 8086/8087 programs without major 
modification. However, because of differences in the 
handling of numeric exceptions by the 80287 MCP 
and the 8087 MCP, exception-handling routines may 
need to be changed. 


This appendix summarizes the differences between 
the 80287 MCP and the 8087 MCP, and provides 
details showing how 8086/8087 programs can be 
ported to the 80286/80287. 


1. The MCP signals exceptions through a dedicated 
ERROR # line to the 80286. The MCP error signal 
does not pass through an interrupt controller (the 
8087 INT signal does). Therefore, any interrupt- 
controller-oriented instructions in numeric excep- 
tion handlers for the 8086/8087 should be delet- 
ed. 


2. The 8087 instructions FENI/FNENI and FDIS!/ 
FNDISI perform no useful function in the 80287. If 
the 80287 encounters one of these opcodes in its 
instruction stream, the instruction will effectively 
be ignored—none of the 80287 internal states will 
be updated. While 8086/8087 containing these 
instructions may be executed on the 
80286/80287, it is unlikely that the exception- 
handling routines containing these instructions 
will be completely portable to the 80287. 


3. Interrupt vector 16 must point to the numeric ex- 
ception handling routine. 


4. The ESC instruction address saved in the 80287 
includes any leading prefixes before the ESC op- 
code. The corresponding address saved in the 
8087 does not include leading prefixes. 


5. In Protected-Address mode, the format of the 
80287’s saved instruction and address pointers is 
different than for the 8087. The instruction op- 
code is not saved in Protected mode—exception 
handlers will have to retrieve the opcode from 
memory if needed. 


6. Interrupt 7 will occur in the 80286 when executing 
ESC instructions with either TS (task switched) or 
EM (emulation) of the 80286 MSW set (TS = 1 or 
EM = 1). If TS is set, then a WAIT instruction will 
also cause interrupt 7. An exception handler 
should be included in 80286/80287 code to han- 
die these situations. 
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7. Interrupt 9 will occur if the second or subsequent 
words of a floating-point operand fall outside a 
segment’s size. Interrupt 13 will occur if the start- 
ing address of a numeric operand falls outside a 
segment’s size. An exception handler should be 
included in 80286/80287 code to report these 
programming errors. 


8. Except for the processor control instructions, all 
of the 80287 numeric instructions are automati- 
cally synchronized by the 80286 CPU—the 80286 
automatically tests the BUSY# line from the 
80287 to ensure that the 80287 has completed its 
previous instruction before executing the next 
ESC instruction. No explicit WAIT instructions are 
required to assure this synchronization. For the 
8087 used with 8086 and 8088 processors, ex- 
plicit WAITs are required before each numeric in- 
struction to ensure synchronization. Although 
8086/8087 programs having explicit WAIT in- 
structions will execute perfectly on _ the 
80286/80287 without reassembly, these WAIT in- 
structions are unnecessary. 


9. Since the 80287 does not require WAIT instruc- 
tions before each numeric instruction, the 
ASM286 assembler does not automatically gener- 
ate these WAIT instructions. The ASM86 assem- 
bler, however, automatically precedes every ESC 
instruction with a WAIT instruction. Although nu- 
meric routines generated using the ASM86 as- 
sembler will generally execute correctly on the 
80286/80287, reassembly using ASM286 may re- 
sult in a more compact code image. 


The processor control instructions for the 80287 
may be coded using either a WAIT or No-WAIT 
form of mnemonic. The WAIT forms of these in- 
structions cause ASM286 to precede the ESC in- 
struction with a CPU WAIT instruction, in the iden- 
tical manner as does ASM86. 


DATA SHEET REVISION REVIEW 


The following list represents the key differences be- 
tween this and the -003 versions of the Intel887™ 
Math Coprocessor Data Sheet. Please review this 
summary carefully. 


1. Corrected typographical errors. 


2. Corrected clock ratio ““PIN’’ name on Table 4.2c 
to NUMCLK/CPUCLK. 
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RELATED DOCUMENTATION 


This Application Note should be used in conjunction 
with the 386 DX microprocessor Data Sheet (Order 
Number 231630-011) and the 386 DX Hardware Refer- 
ence Manual (Order Number 231732-004). A list of re- 
lated references is provided in the appendix for getting 
more information on high speed design issues. 


SECTION |. INTRODUCTION 


The 386 DX Microprocessor is an advanced 32-bit mi- 
croprocessor designed using Intel’s CHMOS IV process 
for applications which require very high performance. 
It is optimized for multitasking operating systems. The 
32-bit register and data paths support 32-bit address 
and data types allowing up to four gigabytes of physical 
memory and 64 terabytes of virtual memory to be ad- 
dressed. The integrated memory management and pro- 
tection architecture includes address translation regis- 
ters, advanced multitasking hardware and a protection 
mechanism to support operating systems. In addition, 
the 386 DX microprocessor allows the simultaneous 
running of DOS with other operating systems. 
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Instruction pipelining, on chip address translation and 
high bus bandwidth ensure short average instruction 
execution times and high system throughput. To facili- 
tate high performance system hardware designs, the 
386 DX microprocessor bus interface offers address 
pipelining, dynamic data bus sizing and direct byte en- 
able signals for each byte of the data bus. 


This Application Note is intended to show how to com- 
plete a successful design of a ’Core’ system using the 
386 DX-33, the 33 MHz clock version. A Core system 
is a minimum system configuration, in this case com- 
prising the CPU, the 82385 32-bit Cache controller, 
Dynamic and Static RAM and an I/O mechanism with 
which to communicate with the CPU. 


The Application Note examines the design techniques 
necessary when executing a design at this frequency. 
Many of the methods used at lower frequencies, such as 
16 MHz and 20 MHz, are no longer valid at this higher 
frequency. Phenomena, whose effects are negligible at 
the lower frequencies, must be taken into account in the 
design. The physical positioning of components relative 
to each other plays a significant part in the success of 
the design, since transmission line effects (reflection, 
radiation) are no longer negligible. 
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Figure 1-2. CLK2 Signal and Internal Processor Clock 
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SECTION Ii. HIGH SPEED SYSTEM 
DESIGN CONSIDERATIONS 


2.1 Overview Of High Speed Effects 


This section is included as a brief overview of general 
issues that are applicable to both higher and lower fre- 
quencies of circuit design. 


The CHMOS IV 386 DX CPU differs from previous 
HMOS microprocessors in that its power dissipation is 
primarily capacitive; there is almost no DC power dissi- 
pation. Power dissipation depends mostly on frequency. 
This fact is used in designs where power consumption is 
critical. 


Power dissipation can be distinguished as either inter- 
nal (logic) power or I/O (bus) power. Internal power 
varies with operating frequency and to some extent 
with wait states and software. Internal power increases 
with supply voltage also. Process variations in manu- 
facturing affect internal power, although to a lesser ex- 
tent than with NMOS processes. 


I/O power, which accounts for roughly one-fifth of the 
total power dissipation, varies with frequency and volt- 
age. It also depends on capacitive bus load. Capacitive 
bus loadings for all output pins are specified in the 386 
DX CPU data sheet. The 386 DX CPU output valid 
delays will increase if these loadings are exceeded. The 
addressing pattern of the software can affect I/O power 
by changing the effective frequency at the address pins. 
The variation in frequency at the data pins tends to be 
smaller; thus varying data patterns should not cause a 
significant change in power dissipation. 


POWER AND GROUND PLANES 


Power and ground planes must be used in 386 DX CPU 
systems to minimize noise. Power and ground lines 
have inherent inductance and capacitance, therefore an 
impedance z = (L/C)*'/2. The total characteristic im- 
pedance for the power supply can be reduced by adding 
more lines. This effect is illustrated in 2.1 which shows 
that two lines in parallel have half the impedance of 
one. To reduce the impedance even further, the user 
should add more lines. In the limit, an infinite number 
of parallel lines, or a plane, results in the lowest imped- 
ance. Planes also provide the best distribution of power 
and ground. 
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Figure 2-1. Reducing Characteristic Impedance 


The 386 DX CPU has 20 Vcc pins and 21 Vss 
(ground) pins. All power and ground pins must be con- 
nected to a plane. Ideally, the 386 DX CPU is located 
at the center of the board, to take full advantage of 
these planes. Although the 386 DX CPU generally de- 
mands less power than the 80286, the possibility of 
power surges is increased due to higher frequency and 
pin count. Peak-to-peak noise on Vcc relative to Vss 
should be maintained at no more than 400 mV, and 
preferably to no more than 200 mV. 


DECOUPLING CAPACITORS 


The switching activity of one device can propagate to 
other devices through the power supply. For example, 
in the TTL NAND gate of Figure 2.2, both Q3 and Q4 
transistors are on for a short time when the output is 
switching. This increased load causes a negative spike 
on Vcc and a positive spike on ground. 
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In synchronous systems in which many gates switch 
simultaneously, the result is signifcant noise on the 
power and ground lines. 


Decoupling capacitors placed across the device between : 
Vcc and ground reduce Voltage spikes by supplying the (] 
extra current needed during switching. These capaci- 
tors should be placed close to their devices because the =1.0 uF 
inductance or connection lines negates their effect. 4 


=0.1 pF 


When selecting decoupling capacitors, the user should 
provide 0.01 microfarads for each device and 0. 1 mi- 


crofarads for every 20 gates. Radio-frequency capaci- | 240725-5 
_ tors must be used; they should be distributed evenly 
over the board to be most effective. In addition, the Figure 2-3. Decoupling Chip Capacitors 


board should be decoupled from the external supply 
line with a 2.2 microfarad capacitor. 


Chip capacitors (surface-mount) are preferable because y (] y (] 
they exhibit lower inductance and require less total 


board space. They should be connected as in Figure 2.3. 
Leaded capacitors can also be used if the leads are kept 
as short as possible. Six leaded capacitors are required 
to match the effectiveness of one chip capacitor, but 
because only a limited number can fit around the 386 
DX, the configuration in Figure 2.4 results. 


NaOg 


Figure 2-4. Decoupling Leaded Capacitors 
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HIGH FREQUENCY DESIGN CONSIDERATIONS 


At high signal frequencies, the transmission line prop- 
erties of signal paths in a circuit must be considered. 
Reflections, interference, and noise become significant 
in comparison to the high-frequency signals. They can 
cause false signal transitions, data errors, and input 
voltage level violations. These errors can be transient 
and therefore difficult to debug. In this section, some 
high-frequency design issues are discussed. Their effects 
and ways to minimize will be introduced in the next 
section. 


REFLECTION AND LINE TERMINATION 


Input voltage level violations are usually due to voltage 
spikes that raise input voltage levels above the maxi- 
mum limit (overshoot) and below the minimum limit 
(undershoot). These voltage levels can cause excess cur- 
rent on input gates that results in permanent damage to 
the device. Even if no damage occurs, most devices are 
not guaranteed to function as specified if input voltage 
levels are exceeded. 


Signal lines are terminated to minimize signal reflec- 
tions and prevent overshoot and undershoot. If the 
round-trip signal path delay is greater than the rise time 
or fall time of the signal, terminate the line. If the line is 
not terminated, the signal reaches its high or low level 
before reflections have time to dissipate, and overshoot 
and undershoot occur. There are a few termination 
techniques that are used in different applications, these 
will be discussed in the next section. 


INTERFERENCE 


Interference is the result of electrical activity in one 
conductor causing transient voltages to appear in an- 
other conductor. It increases with frequency and close- 
ness of the two conductors. 


There are two types of interference to consider in high 
frequency circuits: electromagnetic interference (EMI) 
and electrostatic interference (ESI). 


EMI (also called crosstalk) is caused by the magnetic 
field that exists around any current carrying conductor. 
The magnetic flux from one conductor can induce cur- 
rent in another conductor, resulting in transient volt- 
age. Several precautions can minimize EMI. 


Running a ground line between two adjacent lines 
wherever they traverse a long section of the circuit 
board. The ground line should be grounded at both 
ends. 
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Running ground line between the lines of an address 
bus or a data bus if either of the following conditions 
exist. 


— The bus is on an external layer of the board. 


— The bus is on an internal layer but not sandwiched 
between power and ground planes that are at most 
10 mils away. 


Avoiding closed loops in signal paths (see Figure 2.5). 
Closed loops cause excessive current and create induc- 
tive noise, especially in the circuitry enclosed by a loop. 
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Figure 2-5. Avoid Closed-Loop Signal Paths 


ESI is caused by the capacitive coupling of two adjacent 
conductors. The conductors act as the plates of a capac- 
itor; a charge built up on one induces the opposite 
charge on the other. 


The following steps reduce ESI: 


Separating signal lines so that capacitive coupling be- 
comes negligible. 


Running a ground line between two lines to cancel the 
electrostatic fields. 


LATCHUP 


Latchup is a condition in a CMOS circuit in which 
Vcc becomes shorted to Vss. Intel’s CHMOS IV pro- 
cess is immune to latchup under normal operating con- 
ditions. Latchup can be triggered when the voltage lim- 
its on I/O pins are exceeded, causing internal PN junc- 
tions to become forward biased. The following guide- 
lines help prevent latchup: , 


Observing the maximum rating for input voltage on 
I/O pins. 


Never applying power to an 386 DX CPU pin or a 
device connected to an 386 DX CPU pin before apply- 
ing power to the 386 DX CPU itself. 


Preventing overshoot and undershoot on I/O pins by 


adding line termination and by designing to reduce 
noise and reflection on signal lines. 
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THERMAL CHARACTERISTICS 


The thermal specification for the 386 DX CPU defines 
the maximum case temperature. This section describes 
how to ensure that an 386 DX CPU system meets this 
specification. 


Thermal specifications for the 386 DX CPU are de- 
signed to guarantee a tolerable temperature at the sur- 
face of the 386 DX CPU chip. This temperature (called 
the junction temperature) can be determined from ex- 
ternal measurements using the known thermal charact- 
cristics of the package. Two equations for calculating 
junction temperature are as follows: 


Tj = Junction Temperature 
@j, = Junction to ambient temperature coeff. 
T, = Case Temperature 
T, = Ambient Temperature 
@j, = Junction to Case 
PD = Power Dissapation temperature coeff. 


Case temperature calculations offer several advantages 
over ambient temperature calculations. 


Case temperature is easier to measure accurately than 
ambient temperature because the measurement is local- 
ized to a single point (top center of the package). 


The worst-case junction temperature (Tj) is lower when 
calculated with case temperature for the following rea- 
sons: 


— The junction-to-case thermal coefficient (@j,) is 
lower than the junction-to-ambient thermal coeffi- 
cient (@j,); therefore, calculated junction tempera- 
ture varies less with power dissipation (PD). 


— @j, is not affected by airflow in the system; @j, 
varies with air flow. 


With the case-temperature specification, the designer 
can either set the ambient temperature or use fans to 
control case temperature. Finned heat sinks or conduc- 
tive cooling may also be used in environments where 
the use of fans is precluded. To approximate the case 
temperature for various environments, the two equa- 
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tions above should be combined by setting the junction 
temperature equal for both, resulting in this equation: 


Ta = Te — ((@ia — @ic) * PD) 


The current data sheet should be consulted to deter- 
mine the values of @ja (for the system’s air flow) and 
ambient temperature that will yield the desired case 
temperature. Whatever the conditions are, the case 
temperature is easy to verify. 


2.2 Transmission Line Effects 


As a general rule, any interconnection is considered a 
transmission line when the time required for the signal 
to travel the length of the interconnection is greater 
than one-eighth of the signal rise time. (True K. M. , 
“Reflection: Computations and Waveforms, The Inter- 
face Handbook”, Fairchild Corp, Mountain View, CA, 
1975, Ch. 3). As frequencies increase, designers must 
account for the negative effects associated with trans- 
mission lines. The section that follows will attempt to 
describe these effects and provide some suggestions for 
minimizing their negative effect on the system. 


Before describing each effect, it is important to know 
how to characterize a trace on different types of trans- 
mision lines. This includes knowing the characteristic 
impedance of a trace, Zp, and the propagation delay for 
a given trace, tpg. These parameters will be used in 
determining what effects must be accounted for and to 
select component values used in minimizing the effects. 


TRANSMISSION LINES TYPES 


Although many types of transmission lines (conduc- 
tors) exist, those most commonly used on the printed 
circuit boards are microstrip lines, strip lines, printed 
circuit traces, side-by-side conductors and flat conduc- 
tors. 


MICRO STRIP LINES 


The micro strip trace consists of a signal plane that is 
seperated from a ground plane by a dielectric as shown 
in Figure 2.6. G-10 fiber-glass epoxy, which is most 
common, has an e, = 5 where e, is the dielctric con- 
stant of the insulation. Let: 


w = the width of the signal line (inches) 
t = the thickness of copper 


h = the height of dielectric for controlled imped- 
ance (inches) 


The characteristic impedance Zp, is a function of dielec- 
tric constant and the geometry of the board. This is 
given by: 


Zo = (87/(e, + 1.41)% In (5.98/0.8 w + t) 2 


where e; is the relative dielectric constant of the board 
material. 


The propagation delay (t,q) associated with the trace is 
a function of the dielectric only. 


tod = 1.017 (0.475e, + 0.67) 2 ns/ft 


STRIP LINES 


A strip line is a strip conductor centered in a dielectric 
medium between two voltage planes. The characteristic 
impedance is given by: © 


Zo = 60/(e,)% In (5.98b/(0.8W + t)) 2 
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where b = distance between the planes for the con- 
trolled impedance as shown in Figure 2.10 


The propagation delay is given by: 
tod = 1.017 (e,) 2 ns/ft 


Typical values of the characteristic impedance and 
propagation delay of these types of lines are: 


Zo = 509. 
tog = 2 ns/ft (or 6 in/ns) 


2.3 Reflection 


The first effect is reflection. As the name indicates it is 
the reflection of a signal as it propagates down the 
trace. The reflection results from a mismatch in imped- 
ance. The impedance of a transmission line is a function 
of the geometry of the line, its distance from the ground 
plane, and the loads long the line. Any discontinuity in 
the impedance will cause reflections. 
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Figure 2-7. Strip Lines 
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Impedance mismatch occurs between the transmission 
line characteristic impedance and the input or output 
impedance of the devices that are connected to the line. 
The result is that the signals are reflected back and 
forth on the line. These reflections can attentuate or 
reinforce the signal depending upon the phase relation- 
ships. The results of these reflections include overshoot, 
undershoot, ringing and other undesirable effects. 


At lower edge rates, the effects of these reflections are 
not severe. However at higher rates, the rise time of the 
signal is short with respect to the propagation delay. 
Thus it can cause problems as shown in Figure 2-8. 


Overshoot occurs when the voltage level exceeds the 
maximum (upper) limit of the output voltage, while un- 
dershoot occurs when the level passes below the mini- 
mum (lower) limit. These conditions can cause excess 
current on the input gates which results in permanent 
damage to the device. 


The amount of reflection voltage can be easily calculat- 
ed. Figure 2-9 shows a system exhibiting reflections. 


| 
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The magnitude of a reflection is usually represented in 
terms of a reflection coefficient. This is illustrated in 
the following equations: 
T = v,/v; = Reflected voltage/Incident voltage 
Tload = (Zioad — Zo)/(Zioad + 20) 
Tsource = (Zsource ~ 20)/(Zsource + 20) 
Reflections voltage V, is given by Vj, the voltage inci- 


dent at the point of the reflections, and the reflection 
coefficient. 


The model transmission line can now be completed. In 
Figure 2-9, the voltage seen at point A is given by the 
following equation: 


Va = Vs * Zo/(Zo + Zs) 


This voltage V, enters the transmission line at “A” and 
appears at “B” delayed by tpg. 


Expected Output 
Signal 


Output Signal 
Received 


= 
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Figure 2-8. Overshoot and Undershoot Effects 
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Figure 2-9. Loaded Transmission Line 
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Vp(t — x/t) H(t — x/v) 


where x = distance along the transmission line from 
point “A” and H(t) is the unit step function. The wave- 
form encounters the loads ZL, and this may cause re- 
flection. The reflected wave enters the transmission line 
at ““B” and appears at point “A” after time delay (tpg): 


Vr1 = Tload * Vb 


This phenomenon continues infinitely, but it is negligi- 
ble after 3 or 4 reflections. Hence: 


Vr2 = Tsource * Vr1 


Each reflected waveform is treated as a seperate source 
that is independent of the reflection coefficient at that 
point and the incident waveform. Thus the waveform 
from any point and on the transmission line and at any 
given time is as follows: 


V(x,t) = (Zo/(Zo+Zs)) {Vg(t—(x/v)) H(t— (x/v)) + 
Ty [Vg(t—((2L —x)/v) H(t—(t—((2L —x)/v)))] + 
TiTs [Vs(t— ((2L + x)/v) H(t—(t— ((2L + x)/v)))] + 
TyaTs [Vs(t— ((4L—x)/v) H(t—(t—((4L—x)/v)))] + 
Ty2T 52 [Vg (t—((4L + x)/v) H(t—(t—((4L + x)/v)))] 
gant 


Each reflection is added to the total voltage through the 
unit step function H(t). The above equation can be re- 
written as follows: 


V(x,t) = (Zo/(Zo+Zs)) {Vs(t—(t—tpgx) H(t—tpgx) + 
Ty [Vg(t—tpg(2L —x)) H(t—tpg(2L —x))] + 
T1Ts [Ve(t—tpg(2L + x)) H(t—tpg(2L +x))] +... 3 


- Impedance discontinuity problems are managed by im- 
posing limits and control during the routing phase of 
the design. Design rules must be observed to control 
trace geometry, including specification of the trace 
width and spacing for each layer. This is very impor- 
tant because it ensures the traces are smooth and con- 
stant without sharp turns. 


HOW TO MINIMIZE 


There are several techniques which can be employed to 
further minimize the effects caused by an impedance 
mismatch during the layout process: 


i. Impedance Matching 

2. Daisy Chaining 

3. Avoid 90° Corners 

4, Minimize the Number of Vias 
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IMPEDANCE MATCHING 


Impedance matching is the process of matching the im- 
pedance of the the source or load to the impedance of 
the trace. This matching is accomplished using a tech- 
nique called termination. Termination makes the effec- 
tive source or load impedance, seen by the trace, to be 
approximately equal to the characteristic impedance of 
the trace. Before terminating a line one must determine 
if termination is required. This is done by a simple cal- 
culation. If the propagation delay down a trace from 
source to destination is greater than or equal to one- 
third the signals rise time, termination is needed. (i. e. 
Tpa 2 /3 tr). The rise time is the 0%-100% rise time 
specified for the source. If this value is specified for 
10%-90% or 20%-80%, it must be scaled by multiply- 
ing the specified value by 1.25 or 1.67, respectively. The 
propagation delay is caculated by multiplying the trace 
propagation delay, tpq, descibed earlier by the trace 
length. 


Once it is determined that termination is needed, use 
the equation described earlier to calculate the trace’s 
characteristic impedance. The specification sheets for 
the load can be consulted to determine the load imped- 
ance, Z,. These values are needed to select the compo- 
nent values used to terminate. 


The next chore is selecting the type of termination to 
use. In this section we will examine 4 different tech- 
niques and point out the advantages and disadvantages. 
Figure 2.10 shows the four types of termination and the 
corresponding component values. 


Parallel termination, shown in Figure 2-10(a), is a good 
technique to maintain the waveform. The waveform at 
the load is a perfect image of the waveform at the 
source. In addition there is no added propagation delay 
associated with this technique. The disadvantage of this 
technique is that it requires a fair amount of additional 
power and it is not suggested for characteristic imped- 
ances of less than 100 ohms because of the large d.c. 
current required. | 


Thevenin termination, shown in Figure 2-10(b), is an- 
other option. This technique also requires a large 
amount of power, but does not have the restrictions for 
characteristic impedance. This technique is very good 
at removing overshoot and undershoot while not add- 
ing any additional delay. Another advantage is that the 
trace can be biased toward Vcc or GND by simpling 
selecting the appropriate resistor values. This can help 
maintain fast edges on important signal transitions. 
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Parallel Waveform at receiver is almost High power dissipation 
perfect image of input Zo = 1009, else D.C. 
Bipolar/ Advanced CMOS current limit 


No added Tpp 


Good overshoot and undershoot High power dissipation 
suppression 
Bipolar or Bipolar/CMOS systems 


No added Tpp 


Low power consumption 
CMOS—CMOS Systems 
Easy to adjust signal 

amplitude to match 
switching threshold 


Added Tpp 


Low—medium power 
dissipation (capacitor 
blocks D.C. coupling of 
signal) 

No added delays 
High-speed CMOS families 


Two added components 


R = Zo, C = 200 pF-500 pF 
Figure 2-10(b). Termination Techniques 
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Series termination, shown in Figure 2-10(b), is a very 
easy technique of matching impedance. It only requires 
on resistor and very little additional power is required. 
In addition the resistor value can be selected to provide 


constructive or destructive reflections and thus alter the 
signal amplitude to match the switching threshold. The 


major disadvantage of this technique is the added delay . 


it introduces. 


The fourth technique is A.C. termination, shown in 
Figure 2-10(b). It requires a small amount of additional 
power, this is decreased over parallel termination by the 
introduction of the capacitor, and adds no extra delay 
to the path. The major disadvantage is that it requires 
two extra components. 


After examing the systems needs and selecting a termi- 
nation technique, the impedance values determined ear- 
lier, Zo and Zy,, can be used to determine the compo- 
nent values to implement the termination. These values 
should be seen as a starting point and may be altered to 
remove a specific problem experienced on a signal or to 
bias signals in an appropriate fashion. 


Source 
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DAISY CHAINING 


Another technique of minimizing reflections is to daisy- 
chain signals, shown in Figure 2-11. This means to run 
a single trace from a source and to distribute the loads 
along this trace. The alternative is to run multiple 
traces from the source to each load. Each trace will 
have reflections of its own and these will be transmitted 
down the other traces once they have returned to the 
source. To manage such a system separate termination 
would be required for each branch. To eliminate these 
multiple terminators from T-connections, high frequen- 
cy designs are routed as daisy chains. 


Because each gate provides its own impedance load 
along the chain, it is necessary to distribute these loads 
evenly along the length of the chain. Hence, the imped- 
ance along the chain will change in a series of steps and 
is easier to match. The overall speed of this line is faster 
and predictable. Also all loads should be placed at 
equal distances (regular intervals). 


90 DEGREE ANGLES 


Eliminating 90° angles also minimizes reflections. It is 
much more desirable to use 45° or 135° angles as shown 
in Figure 2-12. 


240725-16 


Figure 2-11. Daisy Chaining 


Receiver 


Driver 
240725-17 


Receiver 


Driver 
240725-18 


Figure 2-12. Avoiding 90 Degree Angles 
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VIAS (FEED THROUGH CONNECTIONS) 


Another impedance source that degrades high frequen- 
cy circuit performance is the via. Expert layout tech- 
niques can reduce vias to avoid reflection sites on 
PCBs. 


Following these guidelines will not guarantee elimina- 
tion of all reflections, but they will minimize the num- 
ber and size. 


2.4 Cross Talk 


Cross talk is another negative effect of transmission 
lines. It is a problem at high frequencies because, as 
operating frequency increase, the signal wavelength be- 
come comparable to the length of the interconnections 
on the PC board. In general, interference such as cross 
talk, occurs when electrical activity in one conductor 
causes a transient voltage to appear in another conduc- 
tor. Main factors that increase interference in any cir- 
cuit are: 


1. Variation of current and voltage in the lines causes 
frequency interference. This interence increases with 
increase in frequency. 


2. Coupling occurs when conductors are in close prox- 
imity. 


Cross talk is the phenomenom of a signal in one trace 
producing a similar signal in an adjacent trace. It may 
not be a carbon copy of the original signal. It may only 
be occasional noise that corrupts the integrity of the 
second signal. The easiest way to minimize crosstalk is 
to eliminate or at least minimize the number of parallel 
traces. Parallel traces can be on a single layer or on 
adjacent signal layers. 


There are three ways that parallel traces can couple and 
thereby produce a signal or at least influence the signal 
on a second trace. These methods of coupling are in- 
ductive, radiative, and capacitive. Inductive coupling is 
where the two traces act as inductors. The field pro- 
duced by a signal in one trace induces a current in the 
second trace. Radiative coupling occurs when the two 
parallel traces act as a dipole, an antenna. One radiates 
a signal and the other receives it, thus corupting the 
signal already present on the trace. The final method is 
capacitive coupling. Two parallel traces separated by a 
dielectric act as a capacitor. If both traces are in a high 
state and one transitions to a low. The capacitor will try 
to maintain the high and thus cause a slow transition 
time on the second trace. These effects can be mini- 
mized by reducing the number of parallel traces. 
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HOW TO MINIMIZE 


When laying out a board for an high speed 386 DX 
based system, several guidelines should be followed to 
minimize crosstalk. Some of them are as follows: 


1. To reduce crosstalk, it is necesary to minimize the 
common impedance paths. 


2. Run a ground line between two adjacent lines. The 
lines should be grounded at both ends. 


3. Seperate the address and data busses by a ground 
line. This technique may however be expensive due 
to large number of address and data lines. 


4. Remove closed loop signal paths which create induc- 
tive noise. 


5. Capacitive coupling can be reduced by reducing the 
number of parellel traces. Parallel traces can be mini- 
mized by insuring that signals on adjacent signal lay- 
ers run orthogonal, perpendicular. Ground planes or 
traces can be inserted to provide shielding. A ground 
plane between signal layers eliminates any coupling 
that could occur. On a single trace, a ground trace 
can be run between traces to prevent coupling. 


In some instances it is necessary to run traces parallel 
to each other. In these cases try to make the distance as 
short as possible and choose signals in which the tran- 
sition time is not as critical so that the coupling effects 
do not produce problems. In addition the coupling can 
be minimized by increasing the spacing between paral- 
lel traces. 


2.5 Skew 


Skew is another effect of transmission lines. This is very 
important in a synchronous system. Long traces add 
propagation delay. A longer trace or a load placed fur- 
ther down a trace will experience more delay than a 
short trace or loads very close to the source. This must 
be taken into account when doing the worst case timing 
analysis. In a system where events must occur synchro- 
nous to a clock signal, it is important to make sure the 
signal is available to all input a sufficient amount of 
time prior to the corresponding clock edge. When per- 
forming the component placement this is one of the 
considerations that must be accounted for. 


These guidelines have always been recommended for 
board design; however, they are much more important 
at higher frequencies. At the slower frequencies design- 
ers could ignore these practices occassionally and not 
experience difficulties. This is not the case at higher 
frequencies. 
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2.6 DC Loading 


To maintain proper logic levels, all digital signal out- 
puts have a maximum load, they are capable of driving. 
DC loading is the constant current required by an input 
in either the high or the low state. It limits the ability of 
a device driving the bus to maintain proper logic levels. 
For a 386 DX based system, a careful analysis must be 
performed to ensure that in a worst case situation no 
loading limits are exceeded. Even if a bus is loaded 
slightly beyond its worst case limit, it might cause prob- 
lems if a batch of parts whose input loading is close to 
maximum is encountered. Proper logic level will then 
fail to be maintained and unreliable operation may re- 
sult. Marginal loading problems are particularly insidi- 
ous, since the effect is often erratic operation and non 
repetitive errors that are extremely difficult to track 
down. For both the high and low logic levels, the sum 
of the currents required by all the inputs and the leak- 
age currents of all outputs (drivers) on the bus must be 
added together. This sum must be less than the output 
capability of the weakest driver. Since the 386 DX is a 
CHMOS device having negligible dc loading, the main 
contributors to dc loading will be the TTL devices. 


2.7 AC Loading 


The AC or capacitive loading is caused by the input 
capacitance of each device and limits the speed at 
which a device driving a bus signal can change the state 
from high to low or low to high. Designers of micro- 
processor systems have traditionally calculated load ca- 
pacitance of their systems by determining the number 
of devices and their individual capacitance loading at- 
tached to a signal plus the amount of trace capacitance. 
Typically, the trace capacitance was a set “lumped” 
number of pf (i.e. 2 pf to 3 pf per inch) when it is 
thought of at all. This lumped method is a general rule- 
of-thumb which generates a good first pass approxima- 
tion. For low frequency designs, the lumped method 
works since system and component margins are large 
enough to cover any minor differences due to the ap- 
proximation. 


For high frequency designs, the component and system 
margins are no longer available to the designer. With 
less than 1 ns of margin, even the amount of trace ca- 
pacitance can make a circuit path critical. 


A more accurate calculation of capacitive loading can 
be derived by modeling the device loads and system 
traces as a series of Transmission Lines Theory. Trans- 
mission Line Theory provides a more accurate picture 
of system loading in high frequency systems. In addi- 
tion, it allows new factors such as inductance and the 
effect of reflections upon the quality of the signal wave- 
form to be factored into consideration. 
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2.8 Derating Curve and Its Effects: 


A derating curve is a graph that plots the output buffer 
against the capacitive load. The curve is used to analyze 
a signal delay without necessitating a simulation every 
time the processor’s loading changes. This graph as- 
sumes the lumped capacitance model to calculate the 
total capacitance. The delay in the graph should be 
added to the specified AC timing value for the device 
that is driving the load. The derating curve is different 
for different devices because each device has different 
output buffers. 


A derating curve is generated by tying the chip’s output 
buffers to a range of capacitors. The voltage and resist- 
ance values chosen for the output buffers are at the 
highest specified temperature and are rising (worst 
case) values. The value of the capacitors centres around 
the AC timing values for the chip. For 33 MHz and 
above, this is 50 pF. Since the AC timing specifications 
are measured for a signal reaching 1.5 V. A curve is 
then drawn from kthe range of time and capacitance 
values, with 50 pF representing the average and with 
nominal or zero derating. These curves are valid only 
for 50 pF-150 pF load range. Beyond this range the 
output buffers are not characterized. The the derating 
curve for the 386 DX are shown in 2-13. These curves 
use the lumped capacitance model for circuit capaci- 
tance measurements and must be modified slightly 
when doing worst-case calculations that involve trans- 
mission line effects. 
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This graph will not be linear outside of the C_ range 
shown. — 


Figure 2-13. Typical Output Valid Delay 
Versus Load Capacitance at Maximum 
Operating Temperature (C, = 120 pF) 
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2.9 High Speed Clock Circuits 


For performance at high frequencies, the clock signal 
(CLK2) for the 386 DX CPU must be free of noise and 
within the specifcations listed in the 386 DX CPU data 
sheet. Achieving the proper clock routing around a 
33 MHz printed circuit board is delicate because a myr- 
iad of problems, some of them subtle, can arise design 
guidelines are not followed. For example, fast clock 
edges cause reflections from high impedance termina- 
tions. These reflections can cause significant signal deg- 
radation in systems operating at 33 MHz clock rates. 
This section covers some design guidelines which 
should be observed to properly lay out the clock lines 
for efficient 386 DX operation. 


e Since the rise/fall time of the clock signal is typical- 
ly in the range of 2-4 ns, the reflections at this speed 
could result in undesirable noise and unacceptable 
signal degradation. The degree of reflections de- 
pends on the impedance of the traces of the clock 
connections. These reflections can be optimized by 
terminating the CLK2 output with proper termina- 
tions and by keeping length of the traces as short as 
possible. The preferred method is to connect all of 
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the loads via a single trace as shown in Figure 2-14, 
thus avoiding the extra stubs associated with each 
load. The loads should be as close to one another as 


possible. Multiple clock sources should be for dis- 
tributed loads. 


A less desirable method is the star connection layout 
in which the clock traces branch to the load as close- 
ly as posssible (Figure 2-15). In this layout, the stubs 
should be kept as short as possible. The maximum 
allowable length of the traces depends upon the fre- 
quency and the total fanout, but the length of all the 
traces in the star connection should be equal. 
Lengths of less than one inch are recommended. In 
this method the CLK2 signal is terminated by a se- 
ries resistor. The resistor value is calculated by mea- 
suring the total capacitive load on the CLK2 signal 
and referring to Figure 2-16. If the total capacitive 
load is less than 80 pF, the user should add capaci- 
tors to make up the diference. Because of the high 
frequency of CLK2, the terminating resistor must 
have low inductance; carbon resistors are recom- 
mended. 


Use an oscilloscope to compare the CLK2 waveform 
with those in Figure 2-17. 


Thevenin’s 
Termination 
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Figure 2-14. Clock Routing 


Clock 
Source 


Series 
Termination 
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Figure 2-15. Star Connection 
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10 20 30 40 
TERMINATION RESISTOR (OHMS) 


240725-22 
© Cy = Cyn (386) + Cyn (387) + Cyn (PALs) + ... + Cpoarp. 
CRoARD is calculated from layout and board parameters; thickness, dielectric constant, distance to ground/Vcc planes. 


¢ Termination resistor must be low inductance type. Recommend carbon filled type. 


Figure 2-16. CLK2 Series Termination 


240725-23 


240725-24 


Figure 2-17. CLK2 Waveforms 
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SECTION Ill. DESIGN EXAMPLE 


At higher processor speeds the window of time avail- 
able to perform specific tasks become very small. This 
window can be equated to multiples of the CLK2 peri- 
od. Within this time signals must be supplied from a 
source and reach a destination in time to meet any set- 
up requirements. At 16 MHz the CLK2 period is 31 ns. 
At 33 MHz it shrinks to half this value, 15 ns. The 
longer time allowed the use of slower logic families and 
the delays associated with longer traces. As the window 
decreases system designers have to practice more care 
in the selection of logic families and in the choices 
made for component placement and signal routing on 
PCBs. This section attempts to list the signal paths 
whose worst case timing analysis results in very small 
margins and therefore require closer attention from de- 
signers to guarantee that all a. c. timing specifications 
are met. 


This section also includes a sample design based on 
33 MHz version of the 386 DX. It should not be taken 
as a recommended design. The circuit is used only to 
highlight the design considerations for high speed sys- 
tems. 


3.1 System Architecture 


Figure 3.1 shows the system block diagram. It has four 
major subsystems. 


1) CPU subsystem 

2) DRAM subsystem 

3) Cache subsystem 

4) ROM and I/O subsystem 


The system has 1 megabytes of Page-Mode DRAMS 
(60 ns RAS access time), 128 kilobytes of EPROMS 
(200 ns access time), an 8259A-2, and an 82510. The 
cache subsystem is optional. Schematics and PAL 
codes are given in appendix A and B respectively. 


3.2 CPU Subsystem 


The CPU subsystem consists of the 386 DX microproc- 
essor, a clock and reset circuitry, and bus control logic. 
Clean and proper clock is very important in the designs 
at high frequencies. | 


RESET STATE MACHINE 


This state machine is used to generate three control 
signals, namely RESET, REFREQ and CLK. The 
CLK signal is half of the CPU clock, CLK2 and is used 
mainly in I/O and EPROM subsystem. 
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RESET is generated through the input from RESET 
triggering circuitry (as shown in the CPU schematic). 


The min RESET Setup and Hold time for operation at 
33 MHz are 5 ns and 2 ns respectively. 


A 61.44 KHz clock is used to produce a synchronous 
refresh request (REFREQ) signal for the DRAM con- 
troller, which employ a transparent, distributed, 
DRAM refresh technique that allows the processor and 
cache to run while the refresh cycle is in progress. 


3.3 DRAM Subsystem 


An non-interleaved DRAM system is used in the sam- 
ple board, which simplifies the design. Since the board 
provide caching, the performance of DRAM subsystem 
is outweighed by the simplicity and economy of the 
design. It employs a transparent, distributed, DRAM 
refresh technique which allows the processor and cache 
to run while the refresh cycle is in progress. It uses the 
3-state capability of the 16R8-7 and the 74ACT258 to 
multiplex the refresh address. A further consideration 
is the choice of DRAM devices. If one uses a memory 
device such as the AAA2801 (which supports a CAS # 
before RAS# refresh and provides an internal refresh 
counter) further simplifications can be made in both the 
circuitry and the control logic. 


DRAM CONTROL STATE MACHINE 


The state machine is implemented with three 16R8- 
type E-speed PALs (see page 4 of the schematics). 
E-speed PALs must be used since the CLK2 frequency; 
66.67 MHz, is higher than the maximum clock frequen- 
cy of the D-speed PALs. 


In order to generate DRAM control signals with small- 
est delay from the CLK2 edges, all state machines are 
implemented as Moore machines. The state machines 
flip-flops generate most of the DRAM control signals 
directly. This is an expensive design approach in terms 
of hardware but allows signal timings and skews to be 
fine tuned. 


DRAM CYCLES—NO CACHE CONFIGURATION 


Pages 1-290 through 1-293 show examples of DRAM 
cycles. In order to hide the DRAM page hit-or-miss 
decision time, the DRAM controller always tries to put 
the 386 DX in pipelined mode. The first read cycle 
requires only two wait states since RAS # has been pre- 
charged (see page 1-290). The second cycle takes only 
two clock cycles. The second cycle is a pipelined, page- 
hit read cycle, which is the best case. The third cycle is 
a pipelined, page-hit write cycle. This cycle requires one 
wait state. DRAMs capture data at the falling edge of 
CAS# during Early Write cycles. The 386 DX drives 
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valid write data at the rising edge in the middle of Tip 
(edge C) with a max prop delay of 24 ns (T12 max). 
This means that the CAS # is generated after the rising 
edge in the middle of the second T2p (edge A). CAS# 
is, therefore, generated at the end of RAS# hold time 
with respect to CAS# (if the next cycle is a page miss, 
RAS # will go inactive at the end of the current write 
cycle), and so on. 


The fifth cycle is a page miss, which is actually detected 
at the end of the fourth cycle (page 1-291). Since the 
DRAM controller must wait for minimum RAS#¥ pre- 
charge time, the fifth cycle requires three wait states. 
The sixth cycle is also a page miss. This cycle, however, 
requires only two wait states because the miss was de- 
tected early enough in the previous cycle to have 
RAS # precharged by the end of the T1p. If the seventh 
cycle is another page miss, it will require three wait 
states. 


The eighth cycle is ended with T2i. Consequently, the 
ninth cycle must wait for minmum RAS# precharge 
time and requires three wait states. 


A DRAM refresh cycle is shown on page 1-293. The 
DRAM address multiplexer output is disabled, and the 
refresh address counter output is enabled. The cycle 
does a RAS# only refresh cycle where only RAS# is 
asserted with a proper refresh address. After the refresh 
cycle is completed, a read cycle which has been sus- 
pended due to the refresh is resumed. 


STATE DIAGRAMS 


Pages 1-243 through 1-253 show state diagrams of the 
DRAM controller. The precharge state machine on 
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page 1-244 measures the required RAS# precharge 
time and CAS#-to-RAS# precharge time. The 
CAS #-READY # state machine on page 1-244 imple- 
ments a pin strap option of having or not having the 


82385. For no cache configuration, the Cache variable 
must be forced low. 


TIMING CALCULATIONS 


Timing equations are described on pages 1-303 and 
1-304. Their corresponding results are given on pages 
1-305 through 1-309. 


Capacitive load on the 386 DX address bus was as- 
sumed to be less than 85 pF. Capacitive load on the 
DRAM address bus was calculated to be less than 
22 pF. 


3.4 CACHE Subsystem 


At 33 MHz DRAM speeds are not fast enough to de- 
sign zero wait state memory systems. A cache can be 
used to take advantage of the higher performance avail- 
able from the higher speed 386 DX microprocessors. 
The cache takes advantage of the faster SRAM while 
keeping system costs down by using the cheaper but 
slower DRAMs. 


Details of the cache subsystem are shown on Figure 3.2 
and 3.3. The 82385 address and data busses are inter- 
faced to the 386 DX address and data busses via 
74AS574s and 74AS646s. Static RAMs (20 ns access 
time) are used for the cache memory. 


Control 


Figure 3-2. Block Diagram of Cache Subsystem 
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Figure 3-3. Address Valid Delay for Cache Subsystem 
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In selecting SRAM there are several types one can 
choose to use. Some.SRAM require a latch for the ad- 
dress and a transceiver for the data. Others have an 
OE#, output enable, signal and incorporate the trans- 
ceiver on chip. The third type is called integrated 
SRAM and these contain both the latch and the trans- 
ceiver on chip. However, there are two timing paths 
that dictate the speed selection within each type. Figure 
3.4 shows a typical system configuration using each 


type. 


Address Bus 
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Figure 3.4(a) SRAM w/o OE # 


Address Bus 


NO CONNECTION 


Data Bus 
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Figure 3.4(b) SRAM with OE # Control 


Address Bus 


NO CONNECTION 
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Figure 3-4. (c) Integrated SRAM 


The critical times for the SRAM are the SRAM OE# 
to data delay and the SRAM address to data delay. The 
following analysis applies to SRAMs with an OE# sig- 
nal as shown in Figure 3.4b. First examine the path of 
OE# to data. This path must be completed within 2 
CLK periods. The COE# signal from the 385 Cache 
Controller must be valid and the SRAM must drive 
data onto the data bus so that the data setup time of the 
386 DX CPU is met. 


2 X CLK2 period - tz5, 82385 COE# valid delay 
(max) - SRAM access time (OE# to data) - tz; 386 DX 
data setup = 0 


Using the specified values from the data sheets reveals 
that the SRAM must have an OE# to data delay of 
10ns or less. The other path is for the address to be- 
come available and data to reach the 386 DX CPU. 
This path has 4 CLK2 periods. The 385 Cache Control- 
ler must supply the CALEN signal to pass the address 
to the SRAM and then the SRAM must drive the data 
on the data bus so that the data setup time is met on the 
386 DX CPU. 


4 X CLK2 period - t2;, 82385 CALEN valid delay 
(max) - tpg (x373 latch) - SRAM access time (address 
to data) - tz; 386 DX data setup = 0 


Once again using the data sheet the access time can be 
determined. Depending on the type of transparent latch 
the SRAM needs an address to data access time of 20ns 
or 25ns. If an F series 373 is used the faster 20ns 
SRAM must be used, but if an FCT373a or PCT373a is 
used the 25ns SRAM is sufficient. 


The A 9 path is another path with a small margin. The 
reason is the AND gate that many designers insert to 
provide 1MB wraparound of address in real mode. Fig- 
ure 3.5 shows the circuit block diagram. A79 must leave 
the 386 DX and reach the 385 Cache Controller within 
2 CLK2 periods. 
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| 240725-31 
2 X CLK2 period - tg 386 DX address valid delay (max) - typ AND prop. delay - t7g 82385 address setup 2 0 


Figure 3-5. Critical Timing A20 


To meet this timing the propagation delay of the AND insert to disable the LOCK # signal to the 385 Cache 

gate must be less than 6ns. This dictates the use of a Controller. This allows locked accesses to be cached. 

74AS08 gate or faster device. Figure 3.6 shows the circuit block diagram. LOCK # 
must leave the 386 DX and reach the 385 Cache Con- 

Analysis of the LOCK # path also shows a small mar- troller within 2 CLK2 periods. 

gin. The reason is the OR gate that many designers 


74AS32 


1/0 Port 
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2 X CLK2 period - tg 386 DX LOCK# valid delay (max) - typ OR prop. delay - t7p 82385 LOCK# setup = 0 


Figure 3-6. Critical Timing Lock # 
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To meet this timing the propagation delay of the OR 


gate must be less than 6ns. This dictates the use of a 
74AS32 gate or faster device. , 


The final path examined here is the NA# path. Re- 
cently designers have selected to use an I/O port and 
an OR gate to disable pipelining selectively. Figure 3.7 
shows the circuit block diagram. NA# must leave the 
386 DX and reach the 385 Cache Controller within 2 
CLK2 periods. 


Using the specified values in the appropriate data sheets 
results in the need for the propagation delay of the OR 
gate must be no greater than 5.8ns. This dictates the 
use of a 74AS32 gate or faster device. 
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This list is not meant to be exhaustive. It is merely 
meant to highlight a few of the critical timings. Each 
designer should perform a thorough timing analysis of 
the system they are designing to verify that all timing 
requirements are met. 


In addition to the specified timing parameters in the 
data sheets, designers should account for propagation 
delays introduced by the trace and by capacitive load- 
ing. The propagation delay added by the trace is ex- 
plained in the section on transmission line effects and 
supplies an equation to determine the amount of delay. 


74AS32 


1/0 Port 


240725-33 


2 X CLK2 period - ty7 386 DX NA# valid delay (max) - tt) OR prop. delay - t5 82385 NA# setup = 0 
Figure 3-7. Critical Timing NA# 
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Another factor that becomes more important at higher 
frequencies is loading. DC loading and especially ca- 
pacitive loading must be considered during the design 
stage. If the board is to be assembled and tested in 
stages, then the DC loads should be considered for all 
configurations of the board. Most termination tech- 
niques require additional current. If a board has a mar- 
ginal loading situation, one is limited in one’s choices of 
termination techniques. If a capacitive loading problem 
exists, the timing situations can become extremely diffi- 
cult at higher frequencies. If timing is critical, do not 


overload the capacitance at which a device was tested. | 


If a device is overloaded, derating must be taken into 
consideration. 


Capacitive loading also introduces a delay on signals. 
Many components including the 386 DX include a ca- 
pacitive derating curve in the data sheet. To use the 
curve in the 386 DX data sheet, the capacitive load 
must be calculated. This is done by summing the input 


capacitances of all devices driven by a given output — 


from the 386 Microprocessor. Find this value on the X- 
axis of the derating curve in the data sheet and move up 
till the derating curve is intersected. Then move at a 
right angle to the left until intersecting the Y-axis. A 
value of nom+ or nom— something is found. This is 
the nominal value plus or minus some amount. The 
nominal value is the value found in the data sheet. Add 
the offset from the curve to this nominal value to get 
the resulting delay corresponding to the capacitive 
loading in the system. Note: The trace capacitance was 
not included in this calculation. It is accounted for in 
the trace propagation delay mentioned earlier. 


DRAM CYCLES WITH 82385 ENABLED 


When the 82385 is enabled (the CACHE variable of the 
state machine on page 1-244 is forced High), the 
DRAM controller inserts one extra wait state in all 
read cycles. This extra time is needed to allow a cache 
update cycle to occur after each cache read miss cycle. 
During a cache update cycle, the read data from 
DRAMs must propagate through the 74AS646 and the 
74F245 (optional) and must be ready for a SRAM write 
cycle with enough setup time. 
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intel. 


Timing diagrams on pages 1-294 through 1-298 show 
cache and DRAM cycles. 


TIMING CALCULATIONS 


Timing equations are found on pages 1-310 and 1-311. 
Only tCAS, tRAC, tCAC, tAA, tPC, and tCAP are 
different in this configuration. Actual values for 
DRAM timings are-found on page 1-312. 


3.5 1/0 - EPROM Subsystem 


A block diagram of the I/O-EPROM subsystem is 
shown on Figure 3.8. This subsystem has separate ad- 
dress and data busses. The address bus is 14 bits wide, 
and the data bus is 16 bits wide. 


The bus controller is designed with B-speed PALs 
which are clocked by the CLK # signal (Figure 3.8). 
There are a few unique design issues in this scheme. 


As shown on Figure 3.10, ADS# is now an asynchro- 
nous signal for the state machine. It is impossible for 
the state machine to capture valid ADS# without re- 
synchronization of the signal. To guarantee recognition 
of valid ADS#, two D flip-flop is clocked by CLK # 
and provides a synchronous ADS# (or Latched 
ADS #) which is in phase with the state machine. 


The second issue is its asynchronous nature of the state 
machine output signal. With the state machine running 
almost asynchronously to CLK2 (B PALs also have a 
long clock-to-output propagation delay), signals gener- 
ated by the state machine must be re-synchronized be- 
fore they are returned to the 386 DX. Signals that go to 
I/O devices and EPROMs need no re-synchronization 
since these devices are asynchronous. Signals which re- 
quire re-synchronization are BS16# and DEN#. Each 
rising edge of DEN# is synchronized to CLK2 by a 
J-K flip-flop as shown on Figure 3.9. This is important 
to avoid bus contention after an I/O or EPROM read- 
cycle. BS16# is synchronized to CLK2 by D flip-flops. 


EPROM and I/O cycle timings are shown on pages 
1-299 through 1-302. The worst case is a write cycle to 
the 82510 and may require as many as 14 wait states. 
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Figure 3-8. Block Diagram of |/O, EPROM Subsystem 
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STATE MACHINE (B PALS) 


DT/R# 
lORDY# 


MRDC# 


lIORCH¥ 


LEPROM# 
L510CS¥ 
L59CS# 
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NOTE: 
Create BS16# for 386 Using DEN# and EPROM# (Synch to CLk) 


Figure 3-9. Control Logic for I/O, EPROM Subsystem 


1-230 


ntel ® AP-442 


k— 15ns—> 


3-6.5ns 3-6.5ns 
sl ee 
CLK 


+ 4=15 ns>| 
ADS# 


CLK¥ 


|p-8-7.8n$) 


6.5-11.5ns 


ALE 

Qualify latched 

<a) MEETS TESTA NTN w/LALE, so the 

Chip Selects w/LALE, so the 
Chip Select Signals 
satisfy the setup 


LALE / ] \ \ time before CLK# 


}-————+| 12 ns max 


ED: SR RETORES TE 
3.5-10.5ns | 


BPAL Output 


DEN# 
240725-36 


Figure 3-10. ADS # Should Be Synchronized to Guarantee Recognition 


1-231 


cEo-l 


mle 


PD22 


Poo4_P7I0>, 


PDSC 
POS 


¥ 
Loiozv 


zVd IM 


Pri fate eet 
022 Pe ee: 
C10 PD2ZS5 
38 Lor Dio P24 
SE888 


S29< 


240725-37 


SUILVINSAHOS 
V XIGNdAddV 


Cvy-dV 


Ec" 


_ 
- 


= 
- 


eFnNnw oo Noo oo 


pwr | “——3} 


A1A2A3A4A5A6A7A8 
G 
DIR 


CBA 
SBA 74AS646 


CAB © 
SAB 
B1B2B384B5B6B7B8 


D(O—31 


6,7,9 


240725-38 


ovy-dV 


vece-l 


en. NYO PS 


CALEN 
PAL2"14] 


CAL 2°14] 


P4C1B4-20 P4C1B4=20 


P4C1B4=20 


P4C1B4=20 


11_PD24 

12 PD25_ 
113 PD26 _ | 
115 PD27_ 
117_PD29 | 
118 PDSO_ 


Jn 


Sd385585 


118 PDS5O_ | 
119 PD31__| 


1Q 
2Q 
3Q 
4Q 
5Q 
6Q 
7Q PALO'31) 
8Q 
BREADY# 
READ 
X16 
an 
240725-39 


12 


—~p 


cvr-dV 


= | 


== iS 
oOo ww NNNN NY 


Ww 


GEc-1 


MS=503 


DCLK2 - DELAY — 


—— UM44 P16R8-7 
Sco 
ADS} MEMCS# anaes | 
M/IO# | 2) LMEMCS4 Ree ee | 
A31 Sais iat 
A30 a | 
A29 pate 
eae 
She et ae 

A8 


JEDEC=ADDR_PAL 


ae ai 


RESET 
CLK maz 
Bee As 6 
ie ee ois 
READY} Bina Gee Gee 
R2 
OUT UM13 
OUT JEDEC=PAGE3 
PULLUP R1 
R29 — 
CACHE OUT PULLDOWN 
1 
JM1©O 


ae 


REFRESH 


CAL 


NAj 
RAS 


U7 
> Ay 12 * DELAY ou MUXSEL 


74AS04 UM27 


REF 
MUXDE¥ 


DRAMRDY 
CAS} 


RAMDT/Rj 
RAMDEN# 
WER 


- 


ana 
NNN 


ovr-dV 


9Ec-l 


4,6, 702A 
yeti 
« MUXDE} 

MUXSEL 
4 
A(2=10 
2, 4,9 
cAS# 13.7 
11 
1 
get 
BEOS 
E BEI, 
+o BE 
+o BES 
ee CASH 


-_ 
C) W] CON} OV is 


(j] OO] MIO] U1] i Cairo 


PULLUP 


74AS573 


‘) >: 
UM32 74PCT521B 


> 
os 
~~ . 


P16 RB=-7 


—_ 
11) 
C) 


RA(0-7) 
R18 pay 
R19 pad 


HIT# 


REF # 


DA(O-8) 


CAS#(0=3) 


240725-41 


ovr-dV 


LEo-1 


RAS4 
4.5.7 
5 eCAS#s 


NMB2801-06 NMB2801-06 NMB2801-06 NMB2801-06 


74AS245 _U81 


DD23 
DD22 
DD21 
DD20 
DD19 
DD18 
DD17 
DD16 


DD(16-23 


74AS245 U86 


>>rPrrrrrp 
>rPrrrrrr 
ON OUhWNH—-O 


: |b 
5 5 | 
(Fe) 
: S| 
Ww 


ONODMNAWNH =O 


‘ <5 


| ERAMDENG 


4 


240725-42 


Cvp-dV 


8Ec-1 


RAS 
—. CAS#1 


4.5.6 


NMB2801-06 NMB2801-06 NMB2801-06 NMB2801-06 


74AS245 _U58 


DD15 D15 
DD14 D14 
DD13 D13 
DD12 D12 
DD11 D11 
DD10 D10 
DD9 D9 
D8& 


DO(16-23 D(8=15 


RAMDT/R# 


ak i | RAMEN 


74AS245 _UBO 


4 


240725-43 


ovy-dV 


6Ec-1 


MRDC# 


Ui 
1 == 6 
1,2,4,9 
9 
So 
PULLUP 
PULLUP 
R8 
2:4 OUT 
oil um19 
IORC 
1:4 10 ! 
i 
PI6H6A _- UM20 
15 
INTA# 
2:9 
P2 10DT/R 
P3 Prt 9 
P4 
P5 
P6 
9 P7 
9 P8 
9 P9 
IODEN# 
PI6H6A  _— UM9 9 
iow 
ka 9 
P 
a P 
P. 
P. 
P 
P IORDY 
- # 
P16H6A  — UM8 
BS164 
PULLUP 
R11 ! 
OUT 
1,2 CLK2 
240725-44 


ovr-dV 


Ove-l 


2.4.5 


Ww > 
pan RaRRO 


NN 


oom ow CO 


A( 2-14 


~U 
UM29 OPMR isa524> D(8-15 b 
+ = 2.7 b 
= Tic ie) 
A14 - 
HUE i bet 
pAI2 | Si-5 
AIL | Zp 
AIO | 8h 55 
rag [970 
lODT/R#e g 
OL 8 
e [ne 
C 
a 
Wm a 
LAG | 4isD 
ras [5] 5 
Cs EP 
Ye Be 
AZ | 8h 75 
1A1 | 9Q| 
8D 
= Lie 
INTAS 
INTRe 
MC1488 
a P72 RS-232 
=C : P/3 4 Rs-232 
UM1 P/7 


18.432MHz 


CLK=61.44KHz 1 


UMS 


240725-45 


intel - AP-442 ~ 


P 


rd 

Y 
Q 
©) 
4) 
@ 
6) 


+ 


eg a 


240725-46 


1-241 


AP-442 


oO 


, O=n 
~ Caan So 


een 


C63 
omnes EE ae 


PNMLKJHGFEDCBA gq PNMLKJHGFEDCBA eg 


C55_CS6 C57 C58 


C51_C52_ C53 C54 


C049 C3699 


= 
@ 
> 


ia 
(|s 


c—34 699 Co 5649 


N 
wo 


C86 


C81 C82 C83 C84 C85 


a) 


JABBBBAE 


INTEL 


25/33 MHZ 80386 SYSTEMS REV 001 


240725-47 


1-242 


i ntel 4 . AP-442 


, APPENDIX B 
STATE DIAGRAMS AND PALCODES 


RAS # Generator DRAM 1—ABL 
CAS# 


CLK * MEMCS# ° HIT# + 
CLK * MEMCS# : DRAMRDY# + 
CLK‘ refresh ‘ DRAMRDY# 


Reel CLK * MEMCS# 


precharge 


wine CLK * REFRESH * WAIT# 


ELSE 
240725-51 


MEMCS# = M/IO# e ADS# e [A31-0E{1FFFFFFF..00000000}] 
LMEMCS# = MEMCS# + mreq 
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Precharge 


precharge =0 
a=1 


precharge = 0 precharge = 1 
a=0 a=1 


RESET | . oF 
precharge = 1 


a=0 
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CAS #, READY # 


CAS#=1 le ae aede 
DRAMRDY# = 1 CLK * RAS# * MUXOE# 


CAS#=0 


i aplee DRAMRDY# = 1 
CLK * MEMCS# ° HIT# + 


CLK  MEMCS# + 


CLK ‘ refresh eich 


CLK * lwr 
CAS#=0 
DRAMRDY# = 1 


CAS# =0 
DRAMRDY# = 0 


CAS#=1 CAS# = 1 
DRAMRDY# = 1 DRAMRDY# = 1 


CLK * RAS#* Iwr 
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CAL Generator 


ve NA#* CASH 
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Refresh 


refresh =0 
wait# = 0 


CLK ° refreq 


refresh = 1 
wait# = 0 


refresh = 1 
wait# =0 


refreq ‘CLK 
refresh =0 
wait# = 1 
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MUXOE #, REF # Generator 


q 


MUXOE# = 0 


T2X# = 1 
REF#=1 


TIP#=1 
CLK * refreq * RAS#* MEMCS# eT. 


+ CLK ‘ refresh * RAS#* DRAMRDY# 


MUXOE# = 1 
REF#=1 


CLK‘ ADS#° CLK‘ ADS# 
READY# 


MUXOE# = 1 
REF#=0 


CLK* RAS# 


MUXOE# = 1 
REF#=0 


MUXOE# = 1 
REF#=1 
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(DRAM2) 
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CLK: DEN#° IWR 


(DRAM3) 


CLK MEMCS# *W/R#*T2X# + 
IWR TIP# 
240725-59 


(DRAM3) 
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CLK MEMCS# * W/R# * T2X# 
+ IWR * TIP# 
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READY# ‘ MEMCS# 


+ READY#* W/R# 
CLK MEMCS#*W/R¥ 
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CuK READY ey 


CLK MEMCS#° W/R# * T2X# + 
CLK * mreq: TIP#+ 
mreq ‘T2X# 
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module RESET GEN flag ’-r3’ 
title ‘RESET GENERATION LOGIC - INTEL CORPORATION’ 


RESET_PAL 
x= .X.5 
6» ,G2% 

" Inputs 
CLK2 pin 
RESTRIG pin 
CLK_61 pin 

" Outputs 
REFREQ pin 
RFQTMP pin 
CLK~ pin 
CLK pin 
RESTMP pin 
RESET pin 

equations 


device ‘P16R8’; 


"ABEL don’t care symbol 
"ABEL clocking input sybol 


"CLK2 
"signal from reset circuitry 
"61.44KHz clock 


"REFREQ, sync 61.44KHz clock 
"temporary stage in sync of 61.44MHz clk 
"CLK# 


"CLK = CLK2 / 2 
“temporary stage in generating RESET 
"RESET 


CLK := (!CLK # (!RESTMP & RESET)); 


CLK~ := CLK; 


RESTMP := RESTRIG; 
RESET := RESTMP; 
RFQTMP := CLK 61; 
REFREQ := RFQTMP; 


test_vectors 


({CLK2, CLK_61, RESTRIG, CLK, CLK~, RESTMP, RESET, RFQTMP, REFREQ] -> 
RESTMP, RESET, RFQTMP, REFREQ]) 


(CLK, CLK-, 


C 
L 
K 


= 
mM ACO 

ras 
Oe DAMM D 
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R RR c £R & RF 
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ie ie: - FT ET R 
TOME MTtéME 
P Q P P Q 
n % ‘s ae (x, Oy de Me Be EDI 
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1, X, ¥] => C1, Xy % XR MUG =" Clk Generation 
GO, Ss Bi 10, 1, hs Me Ee Sls 
S, ty HY > TR By a, HR 415 


PAL Codes: RESET 
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lc, By Bi dy Re LR a) => 107.1, 2 Ba 5s BS 

[Cy My OF Me Xa Me Me Me RM) > Et, B O,.Xs MKS.” Teste den 
iG, Ry Sy Ke Se Oy My By R1- => [Ty Ry Z, GU, Ke RPE * reset cen 
le, My ly Be Ma Be Ma Bye O) > [es Me Lyn Mer & BY 

[c, X, X, X, X, i X, X, x] <2 [x, X, X, i, X, x]; 


fe, 0, Ky Bs Be My Me BR) -O [Kh He Hy Be Oy Ble. * CLA Elk 
[C, X, X, X, Xy X, Xy O, XJ} -> [x, xX, X, xX, X, 0]; 


[Gis Ky By Rp Mg My Bey Ly MR] =® (XK, Ks BeBe Ke Ls 


end RESET GEN; 
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RESET GENERATION LOGIC - INTEL CORPORATION 
Equations for Module RESET GEN 


Device RESET PAL 


- Reduced Equations: 


ICLK := (CLK & !RESET # CLK & RESTMP); 


ICLK~ := (!CLK); 
IRESTMP := (!RESTRIG); 


IRESET := (!RESTMP); 
IRFQTMP := (!CLK 61); 


!REFREQ := (!RFQTMP); 
240725-D4 


PAL Codes: RESET (Continued) 


AP-442 


1-249 


AP-442 ; intel : 


ABEL 3.10—Document Generator 14-Feb-90 09:53 AM 
RESET__GENERATION__LOGIC—INTEL CORPORATION 
Chip diagram for Module RESET_GEN 


Device RESET__PAL 


13.) RFQTMP 
12 LJ REFREQ 
1190.5 _REFREQ_E 
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PAL Codes: RESET (Continued) 
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module ADDR_DEC flag ’-r3’ 
title ‘ADDRESS _DECODE LOGIC - INTEL CORPORATION’ 
ADDR_PAL device ‘P16L8’; 


- ~~ 


- 


tie old "ABEL don’t care symbol 
c= £3 "ABEL clocking input sybol 


"Inputs 


ADS~ pin ;  "“ADS# 

M I0~ pin >;  "M/I0# 

A31 pin ; “Addr bit 31 

A30 i 4; "Addr bit 30 

A29 pin ; “Addr bit 29 

A6 pin ; “Addr bit 6 

mreq pin ;  “Latched memory chip select 


- 


COMP ee eH HOH 
~~ ~ ~~ ~~ ~~ ~~ 


- 


v_ =v © 


] 
l 
1 
0, 
0 


end ADDR_DEC; 


" Outputs ' 


“ 


MEMCS~ pin ; "Memory chip select 
59CS~ pin ;  "8259A chip select 
_510CS~ pin ; "82510 chip select 
EPRDM~ pin ; "EPROM chip select 
LMEMCS~ pin 12; "Latched/unlatched memory chip select 


240725-93 


equations 


IMEMCS- = !ADS- & M_IO~ & !A31 & !A30 & !A29; 

ILMEMCS~ = (!ADS~ & M_I[0~ & !A31 & !A30 & !A29) # mreq; 
| 59CS~ = IM I0~ & !AG; 

1510CS~ = !M I0~ & AG; 

'EPRDM~ = M IO- & A3] & A30 & A29; 


test_vectors 


([ADS~, M_I0~, A31, A30, A29, A6, mreq, MEMCS~] -> 
[MEMCS~, LMEMCS~, 59CS~, 510CS-, EPRDM-]) 


A A A 
3 2 6 
09 


A 
3 
1 


G, ij > 1, 1% % AG 


i, 1] > El, 0, % % x): “LAENCS~ 
xX, x} 22 [o, X, I, i, 1}; 
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ADDRESS_DECODE LOGIC - INTEL CORPORATION 
Equations for Module ADDR_DEC 


Device ADDR_PAL 


- Reduced Equations: 


IMEMCS~ = (!A29 & !A30 & !A31 & !ADS~ & M_I0~); 


ILMEMCS~ = (mreq # !A29 & !A30 & !A31 & !ADS~ & M_I0~); 
! 59CS~ = (!A6 & !M_I0-); 
!_ 510CS~ = (A6 & !M_I0~); 


'EPRDM~ = (A29 & A30 & A31 & M_I0~); 
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ADDRESS__DECODE__LOGIC—INTEL CORPORATION 
Chip diagram for Module ADDR__DEC 


Device ADDR__PAL 


151) _59cs~ 
1410) _510CS~ 
13 OO EPRDM~ 
12 [LMEMCS~ 
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module PAGE_MODE DRAM CTRL_1 flag ‘-r3’ 
title ‘PAGE MODE DRAM CONTROLLER - PAL 1, INTEL CORPORATION’ 
PAGE] device "P16R8’ ; 


x " ABEL ‘don’t care’ symbol 


= oh 
c = Go8 " ABEL ‘clocking input’ symbol 


" Inputs 


"80386 CLK2 

"Processor Clock 

"Memory Chip Select 
"Latched/Unlatched Memory Chip Select 
"DRAM Page Hit Signal 

"Column Address Strobe 

7; "DRAM Ready Signal 

"Refresh Request Signal 

"System Reset 


CLK2 pin 
CLK pin 
MEMCS~ pin 
LMEMCS~ pin 
HIT~ pin 
CAS~ pin 
DRAMRDY~ 

refreq pin 
RESET pin 


we we 


ee tte we we we 


wOv AmLlawWrre 


oe 


" Outputs 


RAS~ pin : "Row Address Strobe 
NA~ pin : "Next Address Signal 
precharge in 14; "RAS Precharge Signal 
a pin ; 
"delays RAS~ until refresh adress is valid 
CAL ; "Column Address Latch 
refresh pin ; "Refresh Signal (active once refresh is acknowledged. ) 


unused pin 
state diagram [RAS-~, NA~] 


state [1, 1]: if precharge then [1], 1] else 
if (CLK & refresh & wait~) then [0, 1] else 
if (CLK & !LMEMCS~& !refresh) then [0, 0] else [1, 1]; 
state [0, 0]: if RESET then [1, 1] else 
if CAS~ then [0, 0] else 
if (CLK & !MEMCS~ & HIT~ # 
CLK & MEMCS~ & !DRAMRDY~ # 
CLK & refresh & !DRAMRDY~) then [1, 1] else [0, 0]; 
state [0, 1]: if RESET then [1, 1] else 
if (CLK & !refresh) then [1, 1] else (0, 1]; 
state [1], 0]: goto [1], 1]; 


state diagram [precharge, a] 


state [0, 0]: if (!RAS~) then [0, 1] else [0, 0]; 
state [0, 1]: if (RESET) then [0, 0] else 
if (RAS~) then [1, 1] else [0, 1]; 
state [1, 1]: goto [1, 0]; 
state [1, 0]: if (CAS~) then [0, 0] else [1, 0); 
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if (!NA- & CAS~) then [0] else [1]; 


if (RESET) then [1] else 


if (!CAS~) then [1] else [0]; 


aAaAtweonNM 


gram [refresh, wait~] 


gram [CAL] 


state [1]: 
[RAS~,NA~, precharge, CAL, refresh] ) 


({CLK2,CLK,MEMCS~, LMEMCS~,HIT~,CAS~,DRAMRDY~,refreq,RESET] -> 


state[0, 0): 
state[1, 0]: 
state[{1l, 1]: 
state[0, 1]: 


state [0]: 


er -¥-¥-¥-0-0-0-0 0-1-0 kkk 


sd ed et dd Fd ad 
NRA AAARAAANRNRAAAAAAARAARA 
crc 2. ee CR eee Te Pr PS 


I eS 8 FR FF IT EMEA 


oooooooooceooocooeoceo 


YVUVUVYVVYNVYV VU YNUUVYNUYV VV VV VYVVUOUUUV UU UL 
et el hel od Reel ed el el el ed Se fee fel te Neel Neel tl ee fm Set ed ed 


state dia 
state dia 
test_vectors 


1-255 


240725-95 


PAL Codes: DRAM 1 (Continued) 


AP-442 


£ 
n“ 
g 
_= 
ue 
w 
« 
a 
o 
— 
= 


CR ER CR OR OR CH OH OR OCR OR EH OR OR CR OR OR OR OR OR ER CR OR EHR OH OH CR ER OH EH OM ER OR OH OR OR ER OH EH OH EH OM OM OM OR OR OM OH EM OH OM OH OH OH Om 
CSS 8 8 I FS FS I ES ES SS ese ees eee 


SOOooooceooooooooooooooooooooooooooooOoOoO OOO OOOO OOO SM St St St St ast mie 


COO O nm HF VI BH OOOO KM HHI FH OOOCOCOCOOCCCOCO Ks It BMOOOOOCOCOCOOCOO OOO NM HH HOO 


hh hd a st a ss ed et ee es Bs ee ee es 
A NRA ARAAAARAAKRAAARAAAKRAAKAAARAARAKRAKRAKRAA AKA ARAARAAKAAKR AA KAR ANKRAKRAKRARAKR ARAMA AAARARMN 
ane rr 8 8 8 tt bt 8 ek CEM Tt ES Oo re ew Oe Pk eo 8 aa Oe ee Oe Ee 8 tr fe Oe Ue ht 


| oe | cee ee eee eee) cee) ee | eee | eee eee | cee | ee | eee eee eee Lee) ee) eee) cee cee | ee | eee | come | eee | cee cee | eee cee ee cee cee come | gee | gee | cee | cee | cee | ees | cee | ee | cee | cee | cee | ce) eee cee ee ee |) cee | eee | ee | cee | cee | ee 


qgQooooo0oocoocoooc*ooooo0ooceoo0o0noocnoooecooocnoooococoeoeoooe0oo°o°oco°od a 


YVYUVUVUNVYGUVYUVGYUVUUYU YN UYU YN YUYN YY YM VMVYVVYV YM VV MYM YVMYMVYVMV VMVMYVM VV VMYMYVYM VMYMVMVYMVVMYMNVYVM VV VV V VU YV 
a ed ed el ad ad id ed Hd cel ee ml bl a el a el el ld fa Nel Nel ad Dine Le Sl a ae ened Ne ten te Sm md tml Cael bad Ned So i a ed Nod Narm eed Sem? Nem ed Shem  i 


240725-96 


oonmns  OOCOCCOCO°C CO 


Ds sd 
RNA ARAARAAAAAAARAAAA 
a oe oe ok ee ee ee ee ie ie a ae 


oooooooooc*oc°coeo 


VYUVOVUVYUOKYVYVUYUU YU 


a sh a he 


240725-97 


PAL Codes: DRAM 1 (Continued) 


1-256 


intel i | | AP-442 


ABEL(tm) 3.10 - Document Generator 15-Feb-90 05:47 PM 
PAGE MODE DRAM CONTROLLER - PAL 1, INTEL CORPORATION 
Equations for Module PAGE MODE DRAM CTRL_1 


Device PAGE] 


- Reduced Equations: 


'RAS~ := (NA~ & !RAS~ & !RESET & refresh 
DRAMRDY~ & !HIT~ & !NA~ & !RAS~ & !RESET 
# DRAMRDY~ & MEMCS~ & !NA~ & !RAS~ & !RESET 
# !'HIT~ & !MEMCS~ & !NA~ & !RAS~ & IRESET & !refresh 
# !ICLK & !RAS~ & !RESET 
# CAS~ & !NA~ & !RAS~ & !RESET 
# CLK & !LMEMCS~ & NA~ & RAS~ & !precharge & !refresh 
# CLK & NA~ & RAS~ & !precharge & refresh & wait~); 


INA~ := (DRAMRDY~ & !HIT~ & !NA~ & !RAS~ & !RESET 
# DRAMRDY~ & MEMCS~ & !NA~ & !RAS~ & !RESET 
# 'HIT~ & !MEMCS~ & !NA~ & !RAS~ & !RESET & !refresh 
# !CLK’ & !NA~ & !RAS~ & !RESET 
# CAS~ & !NA~ & !RAS~ & !RESET 
# CLK & !LMEMCS~ & NA~ & RAS~ & !precharge & !refresh); 


Iprecharge := (CAS~ & !a 
# !RAS~ & ! precharge 
# RESET & !precharge 
# !a & !precharge) ; 


'a := (precharge # RESET & a # RAS~ & !a); 
ICAL := (!CAL & CAS~ & !RESET # CAL & CAS~ & !NA~); 


lrefresh := (!refresh & wait~ 
# CLK & NA~ & !RAS~ & wait-~ 
# RESET & refresh 
# !refreq & !refresh 
# !CLK & !refresh); 


Iwait~ := (CLK & !refreq & !refresh 
# !MEMCS~ & !wait~ 
# !CLK & !wait~ 
# RESET 
# !refresh & !wait~); 
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ABEL 3.10—Document Generator 15-Feb-90 05:47 PM 
PAGE MODE DRAM CONTROLLER—PAL 1, INTEL CORPORATION 
Chip diagram for Module PAGE __MODE__CTRL__1 


Device PAGE1 
P16R8 


MEMCS~ LJ 3 
LMEMCS~ C94 


DRAMRDY~ C37 


refreqlLjs 


240725-65 


PAL Codes: DRAM 1 (Continued) 
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ABEL(tm) 3.10 - Document Generator 15-Feb-90 06:16 PM 
PAGE MODE DRAM CONTROLLER - PAL 2, INTEL CORPORATION 
Equations for Module PAGE_MODE DRAM CTRL_2 


Device PAGE2 


- Reduced Equations: 


ICAS~ := (CAS~ & CLK & DRAMRDY- & !RESET & !a & !b 
# !CACHE & DRAMRDY~ & !RESET & a & !b & !Iwr 
# DRAMRDY~ & !RAS~ & !RESET & a & !b & !Iwr 
# ICAS~ & ICLK & !RESET & a & b 
# !CAS~ & DRAMRDY~ & !RESET & a 
# CAS~ & CLK & DRAMRDY~ & !MUXOE~ & !RAS~ & a & b); 


IDRAMRDY~ := (CAS~ & CLK & DRAMRDY~ & !RESET & !a & !b 
# !CAS~ & !CLK & !DRAMRDY~ & !RESET & a & b 
# !CAS~ & CLK & DRAMRDY~ & !RESET & a & !b 
# !CAS~ & CLK & DRAMRDY~ & !RESET & a & Iwr 
# !CACHE & !CAS~ & CLK & DRAMRDY~ & !RESET & a); 


la := (CAS~ & !ICLK & DRAMRDY~ & !RESET & !a & !b 
# CAS~ & CLK & DRAMRDY~ & !RAS~ & !RESET & a & !b & Iwr); 


lb := (CAS~ & !CLK & DRAMRDY~ & !RESET & !a & !b 
# CAS~ & DRAMRDY~ & RAS~ & !RESET & a & !b 
# !CACHE & CAS~ & DRAMRDY~ & !RESET & a & !b 
# CAS~ & DRAMRDY~ & !RESET & a & !b & Iwr 
# !CAS~ & CLK & !DRAMRDY~ & !MEMCS~ & !RAS~ & !RESET & a & b & 
lrefresh 
# !CAS~ & ICLK & DRAMRDY~ & !RESET & a & !b 
# CACHE & !CAS~ & CLK & DRAMRDY~ & !RESET & a & b & !Iwr); 


IMUXOE~ := (!MUXOE~ & !REF~ 
# REF~ & !r 


# MUXOE~ & RESET 

# DRAMRDY~ & !MUXOE~ & !RAS~ 
# !'MEMCS~ & !MUXOE~ & RAS~ 

# !MUXOE~ & !refresh 

# !ICLK & !MUXOE~); 


'REF~ := (MUXOE~ & !RESET & r); 
lr := (MUXOE~ & !REF~ & !RESET & !r 


# CLK & MUXOE~ & !RAS~ & !REF~ & !RESET); 
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ABEL 3.10—Document Generator 15-Feb-90 06:16 PM 
PAGE MODE DRAM CONTROLLER—PAL 2, INTEL CORPORATION 
Chip diagram for Module PAGE_MODE__DRAM__CTRL__2 


Device PAGE2 
P16R8 
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PAL Codes: DRAM 2 (Continued) 
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in . AP-442 


module PAGE_MODE DRAM CTRL_2 flag ’-r3’ 
title | ‘PAGE MODE DRAM CONTROLLER - PAL 2, INTEL CORPORATION’ 
PAGE2 device ‘P16R8’; 


" ABEL ‘don’t care’ symbol 
" ABEL ‘clocking input’ symbol 


" Inputs 


"80386 CLK2 

"Processor Clock 

"Row Address Strobe 

"Memory Chip Select 

"DRAM Page Hit Signal (unused) 

"Hi when 385 is used; otherwise, Low 
"Latched Write/Read 

"Refresh Signal 

"System Reset 


CLK2 pin 
CLK pin 
RAS~ pin 
MEMCS~ pin 
HIT~ pin 
CACHE pin 
lwr pin 
refresh pin 
RESET pin 


we 


we we we we we we 


we 


WOMAN SWNH- 


we 


" Outputs 


CAS~ pin : "Column Address Strobe 
DRAMRDY ~ in 13; "DRAM Ready 

a pin : - 
b pin 
unused pin ; 
MUXOE~ pin ; "DRAM Address Multiplexer Output Enable 
REF~ pin ; “Enables refresh counter instead of MUX 
r pin ; 


cstate 
idle 


= “* DRAMRDY~,a, b]; 
start = [ 
= [ 
= [ 


ols Aig ."Eidtle 
] 1, 1); "CAS~ Active 
1, 0); "CAS~ Active, Wait State 
1, 1);  "“CAS~ and DRAMRDY~ Active 
sig . OT “Page Hit, CAS~ and DRAMRDY- 


wait 
active 
inactive 1 
Inactive 
inactive 2 
Inactive 


J 


0 
0 
0 


,0, 0]; "Page Hit, CAS~ and DRAMRDY- 


(cn Looe noes | oe Le Loe eee Looe Loeee Leen BE coon BE ee 
Hee OOOO 


nuh © hh eon oe 
wea @swe#e-s-s @— « ws @ 


o~ro°oor.KOO 0° 
~ - ~~ ~~ ~ ~~ ~~ ~~ ~ ~~ 


muxstate [MUXOE~, REF~, r]; 
enabled = [ » 1 , 1}; "Multiplexer Outputs Enabled 
240725-99 


PAL Codes: DRAM 2 (Continued) 


1-261 


AP-442 


disabled 1 ; "Multiplexer Outputs Disabled 
disabled 2 ; "Refresh Address Enabled 
disabled 3 ; "Wait for RAS# 

disabled 4 ; “Refresh Address Disabled 
illegal z ; 

illegal_y 

illegal_x 


state diagram cstate 


state idle: if (CLK & !RAS~ & !MUXOE~) then start else idle; 
state start: if RESET then idle else 
if (CLK & !CACHE # CLK & Iwr) then active else 
if CLK then wait else start; 
state wait: if RESET then idle else 
if CLK then active else wait; 
state active: if RESET then idle else 
if (CLK & !MEMCS~ & RAS~ # 
CLK & MEMCS~ # 
CLK & refresh) then idle else 
if (CLK & !MEMCS~ & !RAS~) then inactive 1 
else active; 
inactive_l: if RESET then idle else 
if (CLK & !RAS~ & Iwr) then inactive 2 else 
if (!RAS~ & !lwr & CACHE) then start else 
if (!lwr & !CACHE) then wait else 
inactive 1; 
state inactive 2: if RESET then idle else 
if CLK then active else inactive 2; 
state : goto idle; 
state goto idle; 
state : goto idle; 
state goto idle; 
state i : goto idle; 
state i : goto idle; 
state i : goto idle; 
state : goto idle; 
state i i: goto idle; 
state illegal j: goto idle; 


state diagram muxstate 


1-262 


state enabled: if (CLK & refresh & RAS~ & MEMCS~ # 

CLK & refresh & !RAS~ & !DRAMRDY~) then 

disabled 1 else enabled; 
state disabled_1: if (RESET) then enabled else disabled 2; 
state disabled 2: if (RESET) then enabled else 

if (CLK & !RAS~) then disabled 3 else disabled 2; 

state disabled 3: if (RESET) then enabled else disabled 4; 
state disabled 4: goto enabled; ~ 
state illegal_z: goto enabled; 
state illegal_y: goto enabled; 
state illegal _x: goto enabled; 
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test vectors 


({CLK2,CLK,MEMCS~, lwr,HIT~,RAS~,refresh,RESET,CACHE] -> 
[CAS~, DRAMRDY~, MUXOE~, REF~]) 
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module PAGE_MODE_DRAM CTRL_3 flag ‘-r3’ 


title ‘PAGE MODE DRAM CONTROLLER -. PAL 3, INTEL CORPORATION’ 
PAGE3 device ‘P16R8’ ; 


" ABEL ‘don’t care’ symbol 
" ABEL ‘clocking input’ symbol 


"80386 CLK2 

"Processor Clock 

"Address Strobe 

"Memory Chip Select 
- 5; “Write/Read 

"System Ready 

"DRAM Ready 


we we mee we we we 


unused] 
RESET 


we 


WON FPWwnre 


"System Reset 


we 


" Outputs 


T2X~ pin ; "active during T2, T2p, and T2i 

T1P- pin : “active during Tlp 

WE~ pin : "DRAM Write Enable 

DEN~ pin : “DRAM Data Bus Transceiver Enable 

OTR pin : “DRAM Data Bus Transceiver R/W# Direction signal 
lwr pin ; "Latched Write/Read 

mreq pin : “Latched Memory Chip Select 

unused2 pin ‘ as 


state diagram [T2X~, T1P~] 


state [1], 1]: if (CLK & !ADS~) then [0, 1] else [1, 1]; 
state [0, 1]: if RESET then [1, 1] else 

if (CLK & !ADS~ & !READY~) then [1, 0] else 

if (CLK & ADS~ & !READY~) then [1, 1] else [0, 1]; 
state [l, 0]: if RESET then [1, 1] else 

if (CLK) then [0, 1] else [1, 0]; 
state [0, 0]: goto [1], 1]; 


state diagram [WE~] 


state [1]: if (CLK & !MEMCS~ & WR & T2X~ # 
lwr & !TIP~) then [0] else [1]; 
state [0]: if (RESET) then [1] else 
if (CLK & !READY~) then [1] else [0]; 


state diagram [DEN~] 


state [1]: if (CLK & !MEMCS~ & !WR & T2X~ # 
mreq & !T2X~ # 
CLK & mreq & !TIP~) then [0] else [1]; 
240725-A4 
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state [0]: if RESET then [1] else 
if (CLK & !READY~) then [1] else [0]; 


state diagram [DTR] 


state [1]: if (CLK & !MEMCS~ & WR & T2X~ # 
lwr & !TIP~) then [0] else [1]; 
state [0]: ‘if (RESET) then [1] else 
if (!CLK & DEN~ & !lwr) then [1] else [0]; 


state_diagram [Iwr] 
state [0]: if (CLK & !MEMCS~ & WR) then [1] else [0]; 
state [1]: if (RESET) then [0] else 
if (!READY~ & MEMCS- # 
!READY~ & !WR) then [0] else [1]; 


state_diagram [mreq] 


state [0]: if (CLK & !MEMCS~) then [1] else [0]; 
state [1]: if RESET then [0] else 
if (!READY~ & MEMCS~) then [0] else [1]; 
test_vectors 


({CLK2,CLK,ADS-,WR,MEMCS~,READY-,RESET] -> 
[T2X-,T1P~,DEN-, ]wr,WE~,DTR, mreq]) 
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ABEL(tm) 3.10 - Document Generator 14-Feb-90 09:54 AM 
PAGE MODE DRAM CONTROLLER - PAL 3, INTEL CORPORATION 
Equations for Module PAGE _MODE_DRAM_CTRL_3 


Device PAGE3 


- Reduced Equations: 


1T2X~ := (CLK & !RESET & !TIP- & T2X~ 
# READY~ & !RESET & T1P~ & !T2X~ 
# !CLK & IRESET & TIP~ & !T2X~ 
# !ADS~ & CLK & T1P~ & T2X~); 


r= (ICLK & IRESET & ITIP- & T2X- 
# !ADS~ & CLK & !READY- & !RESET & TIP~ & !T2X~); 


z= (READY~ & !RESET & !WE~ 
# !CLK & !RESET & !WE~ 
# !TIP~ & WE~ & Iwr 
# CLK & !MEMCS~ & T2X~ & WE~ & WR); 


:= (!DEN~ & READY~ & !RESET 
# !CLK & !DEN~ & !RESET 
# CLK & DEN~ & a & mreq 
# DEN~ & !T2X~ & mreq 
# CLK & DEN~ & !MEMCS~ & T2X~ & !WR); 


IOTR := (!DTR & !RESET & Iwr 
# 'DEN~ & !DTR & !RESET 
: CLK & !DTR & !RESET 
# OTR & !TIP- & Iwr 
# CLK & DTR & !MEMCS~ & T2X- & WR); 


'lwr := (!READY~ & !WR 
# MEMCS~ & !READY~ 
# RESET & Iwr 
# IWR & !lwr 
# MEMCS~ & !lwr 
# ICLK & !1wr); 


Imreq := (MEMCS~ & !READY~ 
# RESET & mreq 

; MEMCS~ & !mreq 

# CLK & !mreq); 
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ABEL 3.10—Document Generator 14-Feb-90 09:54 AM 
PAGE MODE DRAM CONTROLLER—PAL 3, INTEL CORPORATION 
Chip diagram for Module PAGE__MODE__DRAM__CTRL__3 


Device PAGE3 
P16R8 
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module PAGE_ MODE DRAM CTRL 4 flag ’-r3’ 
title ‘PAGE MODE DRAM CONTROLLER - PAL 4, INTEL CORPORATION’ 
PAGE4 device “P16R8’ ; 


" ABEL ‘don’t care’ symbol 
" ABEL ‘clocking input’ symbol 


we we we 


we 


we 


1; 
a 
3; 
4 
5; 
6; 
7; 
8 
9 
1 


mt we 
we 


pin 


pin 
pin 
pin 
pin 
pin 
pin 
pin 
pin 


addr = [A7..A0]; 
equations 
addr := addr + 1; 


end PAGE MODE DRAM CTRL 4; 
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PAL Codes: DRAM 4 


1-271 


AP-442 aite | in : 


ABEL(tm) 3.10 - Document Generator 14-Feb-90 09:54 AM 
PAGE MODE DRAM CONTROLLER - PAL 4, INTEL CORPORATION 
Equations for Module PAGE_MODE_DRAM CTRL 4 


Device PAGE4 


- Reduced Equations: 


1A7 := (AO & Al & AZ & A3 & A4 & AS & AG & AT 
AO & !A7 
1Al & !A7 
1A2 & !A7 
1A3 & IAT 
1A4 & IAT 
IAS & 1A7 
1A6 & !A7); 


(AO & Al & A2 & A3 & A4 & AS & AG 
'A0 & !A6 
'Al & !A6 
1A2 & !A6 
1A3 & !A6 
'A4 & !A6 
'AS & !A6); 


(AO & Al & A2 & A3 & AG & AS 
1A0 & !A5 
1Al & !A5 
1A2 & IA5 
1A3 & JAS 
1A4 & !A5); 


& A2 & A3 & A4 


(AO & Al & AZ & A3 # AO & !A3 # !Al & IA3 # !A2 & !A3); 
(AO & Al & A2 # !AO & !A2 # !Al & !A2); 
(AO & Al # !AO & !Al); 


(AQ) ; 
240725-B0 


PAL Codes: DRAM 4 (Continued) 
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PAGE MODE DRAM CONTROLLER—PAL 4, INTEL CORPORATION 
Chip diagram for Module PAGE__.MODE_DRAM__CTRL__4 


Device PAGE4 


P16R8 


240725-68 


end of module PAGE__ MODE__DRAM__CTRL__4 
PAL Codes: DRAM 4 (Continued) 
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module 


title 


" Inputs 


CLK 
RESET 
MRDC~ 
IORC~ 
1OWC~ 
INTA~ 
DEN~ 


10 CTRL_1 flag ’-r3’ 


‘10 BUS CONTROLLER - PAL 1, INTEL CORPORATION’ 


device 


IORDY~ 
L510CS~ 


OEN~ 


L59CS~ 

LEPROM~ 
unused 0 
unused 1 


" Outputs 


"P16R4’ ; 


+ " ABEL ‘don’t care’ symbol 
i " ABEL ‘clocking input’ symbol 


“Processor Clock 

"System Reset 

"Memory (EPROM) Read Command 
"1/0 Read Command 

"1/0 Write Command 
“Interrupt Acknowledge 

"I/O Bus Data Transceiver Enable 
"T/0-EPROM Ready 

"82510 Chip Select 

"PAL output Enable 

"8259A-2 Chip Select 

"EPROM Chip Select 


~ 
~~ ~~ ~~ ~~ ~~ ~~ ~~ ~~ s 
— 
So 


CO ee i 
— et OOOH Hw 
—O 0 0 Re ee YH 
~~ ~~ - + ~~ - - ~~ ~ 
——K OO” OO v 
we we we we we we we we we 


ed 


state diagram dstate 


state 


state 


idle: 


start: 


if (!DEN~ & !MRDC~ # !DEN~ & !IORC~ # 
IDEN~ & !1OWC~ # !DEN~ & !INTA~) then start 
else idle; 
if (!L510CS~ & !IOWC~) then wait_14 else 
if (!L510CS~ & !IORC~) then wait _13 else 
if (!L59CS~ & !IOWC~) then wait_11 else 
if (!LEPROM~ # !L59CS~ & !IORC~ # !INTA~) then wait_10; 


state wait_14: goto wait_13; 


state 
state 
state 
state 
state 


a 


wait_13: 
wait_12: 
wait_1l: 
wait_10: 
active: 


end 10 CTRL_1; 


a 
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goto wait_12; 

goto wait_11; 

goto wait_10; 

goto active; 

if !IORDY~ then idle else active; 


PAL Codes: iO-1 
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10 BUS CONTROLLER - PAL 1, INTEL CORPORATION 
Equations for Module I0 CTRL_1 


Device I01] 


- Reduced Equations: 


Idelay := (IORDY~ & !delay & sO & sl] & s2 # delay & sO & !s] & s2); 


!s2 := (delay & sl & !s2 
# !'IORC~ & !L510CS~ & delay & !s0 & sl 
# !TOWC~ & !L510CS~ & delay & !sO & sl); 


's] := (delay & !s0 & !sl 
# delay & sO & sl & !s2 
# 'INTA~ & IORC~ & IOWC~ & delay & !sO & s2 
# ITORC~ & IOWC~ & !LEPROM~ & delay & !s0 & s2 
# !TORC~ & L510CS~ & !L59CS~ & delay & !s0 & s2 
# !INTA~ & L510CS~ & delay & !s0 & s2 
# L510CS~ & !LEPROM~ & delay & !sO & s2 
# !TOWC~ & L510CS~ & !L59CS~ & delay & !sO & s2); 


!s0 := (delay & !s0 & !s] & !s2 
# delay & sO & sl & !s2 
'TOWC~ & !L59CS~ & delay & !sO & sl & s2 
11OWC~ & !L510CS~ & delay & !sO0 & sl & s2 
!DEN~ & !INTA~ & delay & sO & sl 
IDEN~ & !IOWC~ & delay & sO & sl 
'DEN~ & !IORC~ & delay & sO & sl 
IDEN~ & !MRDC~ & delay & sO & s1); 


240725-B3 


PAL Codes: 10-1 (Continued) 
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IO BUS CONTROLLER—PAL 1, INTEL CORPORATION 
Chip diagram for Module IO__CTRL__1 


Device IO1 


19 LJ unused_1 


18 LJ unused_0O 


1410.J delay 
lIORDY~ LJ 8 137 J LEPROM~ 
L510CS~CJ9 12LJL59CS~ 


240725-69 


end of module IO__CTRL__1 


PAL Codes: 10-1 (Continued) 
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module 10 CTRL_2 flag ‘-r3’ 
title ‘10 BUS CONTROLLER - PAL 2, INTEL CORPORATION’ 
102 device "P16R6’ ; 


shes " ABEL ‘don’t care’ symbol 
G4 " ABEL ‘clocking input’ symbol 


"Processor Clock 
"System Reset 

"Latched M/I0# 
"Latched D/C# 

"Latched W/R# 

"Latched ALE 

"82510 Chip Select 
"8259A-2 Chip Select 
"EPROM Chip Select 
OEN~ "PAL Output Enable 
rdy~ "1/0-EPROM Ready (n-1) 
rdy510~ i ;  "I/0-EPROM Ready (n-2) 


LDC 

LWR 
LALE 
L510CS~ 
L59CS~ 
LEPROM~ 


we we we we we 


we we we 


OONM OS WP 


— 
— 
» 


. owe 


— 
in) 
- 


" Outputs 


recovery i ; “I/O Recovery Time 


"1/0 Read Command 
"1/0 Write Command 
"Memory (EPROM) Read Command 


— 
o 


we we we we we we we we we 


inactive 2 
inactive 3 


illegal_a 
illegal_b 


ooroore.un 
—“O0 OK KK OW 


state diagram rstate 


state idle: if (!IORC~ # !IOWC~) then active else idle; 
state active: if (IORC~ # IOWC~) then inactive 0 else active; 
state inactive 0: goto inactive 1; 
state inactive 1: goto inactive 2; 
state inactive 2: goto inactive 3; 
state inactive 3: goto idle; 
state illegal a: goto idle; 
state illegal _b: goto idle; 
240725-B4 


state diagram [IOWC-] 


state [1]: if (!recovery & !LMIO & LDC & LWR & (!L510CS~ # !L59CS-)) 
then [0] else [1]; 

state [0]: if RESET then [1] else 
if (!L510CS~ & Irdy510~ # !rdy~) then [1] else [0]; 


state diagram [IORC~] 
state [1]: if (!recovery & !LMIO & LDC & !LWR & (!L510CS~ # !L59CS~)) 
then [0] else [1]; 
state [0]: if RESET then [1] else 
if !rdy~ then [1] else [0]; 
state diagram [MRDC~] 
state [1]: if (LALE & LMIO & !LWR & !LEPROM~) then [0] else [1]; 
state [0]: if RESET then [1] else 
if !rdy~ then [1] else [0]; 
end I0_CTRL_2; . 


mE 
240725-B5 


PAL Codes: IO-2 
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IO BUS CONTROLLER - PAL 2, INTEL CORPORATION 
Equations for Module IO CTRL 2 


Device [02 


- Reduced Equations: 


'recovery := (!recovery & !s] # !IORC~ & !IOWC~ & !recovery # !s0 & sl); 


's] := (recovery & sO); ~ 
!sO0 := (recovery & !sO # !sl # IORC~ & IOWC~ & !s0); 


1TOWC~ := (!IOWC~ & !RESET & rdy510~ & rdy~ 
# !TOWC~ & L510CS~ & !RESET & rdy~ 
# IOWC~ & !L59CS~ & LDC & !LMIO & LWR & !recovery 
# IOWC~ & !L510CS~ & LDC & !LMIO & LWR & !recovery) ; 


!TORC~ := (!IORC~ & !RESET & rdy~ 
# IORC~ & !L59CS~ & LDC & !LMIO & !LWR & !recovery 
# IORC~ & !L510CS~ & LDC & !LMIO & !LWR & !recovery); 


z= (!MRDC~ & !RESET & rdy~ 
# LALE & !LEPROM~ & LMIO & !LWR & MRDC~) ; 
240725-B6 


PAL Codes: 10-2 (Continued) 
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10 BUS CONTROLLER—PAL 2, INTEL CORPORATION 
Chip diagram for Module IO_CTRL__2 


Device 102 


L510CS~ C37 
L59CS~LJ8 
LEPROM~ LJ9 


end of module IO__CTRL_ 2 


19L J rdy510~ 
18 J MRDC~ 


‘17 LJ IOWC~ 


16LJIORC~ 


13 _Jrecovery 


PAL Codes: IO-2 (Continued) 
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module I0_CTRL_3 flag ‘-r3’ 
title ‘10 BUS CONTROLLER - PAL 2, INTEL CORPORATION’ 
103. = device "P16R6’ ; 


» “ ABEL ‘don’t care’ symbol 
Cc tes $ " ABEL ‘clocking input’ symbol 
" Inputs 


"Processor Clock 
"System Reset 
"Latched M/I0# 
"Latched D/C# 
"Latched W/R# 
"Latched ALE 
"82510 Chip Select 
"8259A-2 Chip Select 
"EPROM Chip Select 
"PAL Output Enable 
i "1/0-EPROM Ready (n-1) 
pin ;  "I/0-EPROM Ready 


" Outputs 


INTA~ pin ; “Interrupt Acknowledge 

st0 pin . 

DEN~ pin ; "I/O Bus Transceiver Enable 
stl pin ‘ 

DTR pin ; “I/O Bus Transceiver Direction 
st2 pin _ ® 


state diagram [INTA~, st0] 


state [1, 1]: if (!LMIO & !LDC & !LWR & LALE) then [1, 0] else [1], 1]; 
state [1, 0]: if RESET then [1, 1] else 
if !LALE then [0, 0] else [1, 0]; 
state [0, 0]: if RESET then [1, 1] else 
if !rdy~ then [1, 1] else [0, 0]; 
state [0, 1]: goto [1, 1]; 


state diagram [DEN~, st1] 
state [1, 1]: if LALE & (!LEPROM~ # !L510CS~ # !L59CS~) then [1, 0] else 


if !INTA~ then [0, 0] else [1, 1]; 
state [1, 0]: if RESET then [1, 1] else 

if !LALE then [0, 0] else [1, 0]; 
state [0, 0]: if RESET then [1, 1] else 

if !rdy~ then [1, 1] else [0, 0]; 
state [0, 1]: goto [1, 1]; 


state diagram [DTR, st2] 
240725-B7 


state 1]: if LALE & (!LEPROM~ # !L510CS~ # !L59CS~) & LWR then [0, 1] 


else [1], 1]; 
state : if RESET then [1, 1] else 

if !IORDY~ then [0, 0} else [0, 1]; 
state [0, ; gote fl, it; 
state [1, :. gote [, its 


end 10 CTRL_3; 
8 
240725-B8 
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10 BUS CONTROLLER - PAL 2, INTEL CORPORATION 
Equations for Module I0 CTRL_3 


Device 103 


- Reduced Equations: 


LINTA~ := (!INTA~ & !RESET & rdy~ & !st0 
# INTA~ & ILALE & !RESET & !st0); 


tstO := (!RESET & rdy~ & !st0 
# INTA~ & !RESET & !st0 
# INTA~ & LALE & !LDC & !LMIO & ILWR & stO); 


IDEN~ := (!DEN~ & !RESET & rdy~ & !stl 
# DEN~ & !LALE & !RESET & !stl 
# DEN~ & !INTA~ & L510CS~ & L59CS~ & LEPROM- & stl 
# DEN~ & !INTA~ & !LALE & stl); 


'st] := (!RESET & rdy~ & !stl 
# DEN- & !RESET & !stl 
# DEN~ & !INTA~ & stl 
# DEN~ & !L59CS~ & LALE & stl 
# DEN~ & !L510CS~ & LALE & stl 
# DEN~ & LALE & !LEPROM~ & stl); 


IDTR := ({DTR & !RESET & st2 
# DTR & !L59CS~ & LALE & LWR & st2 
# OTR & !L510CS~ & LALE & LWR & st2 
# DTR & LALE & !LEPROM~ & LWR & st2); 


Ist2 := (!DTR & !IORDY~ & !RESET & st2); 


PAL Codes: IO-3 (Continued) 
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IO BUS CONTROLLER—PAL 2, INTEL CORPORATION 
Chip diagram for Module IO__CTRL__3 


Device IO3 


L510CS~ C47 
L59CS~LJ8 
LEPROM~ C39 


240725-71 


end of module IO_.CTRL_3 


PAL Codes: 10-3 (Continued) 
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module 10 CTRL_4 flag ’-r3’ 
title ‘10 BUS CONTROLLER - PAL 2, INTEL CORPORATION’ 
104 device ‘P16R6’ ; 


x = chal " ABEL ‘don’t care’ symbol 
c se} " ABEL ‘clocking input’ symbol 
" Inputs 


CLK Pp ; "Processor Clock 

RESET i ; “System Reset 

LMIO 3; “Latched M/I0O# 

LOC ;  “Latched D/C# 

LWR 5;  “Latched W/R# 

LALE ;  “Latched ALE 

delay i ; “Delay Signal for Wait State Generation 
unused 0 i a? 

unused 1 ; 

OEN~ i ; "PAL Output Enable 
unused 3 i " 
unused 4 


" Outputs 


"1/0-EPROM Ready 
"1/0-EPROM Ready 
"1/0-EPROM Ready 


rdy510~]; 
] . 


13 
}3 
}; 
}3 
}3 
ls 
}; 
}; 


[ 
[ 
[ 
{ 
[ 
[ 
[ 
[ 
[ 


a 


state_diagram rstate 


state idle: , if (LMIO & !LDC & LWR & LALE) then rdyl else 
if !delay then rdy2 else idle; 

state rdy2: if RESET then idle else rdyl; 

state rdyl: if RESET then idle else 
if !LALE then rdyO else rdyl; 

state rdy0: goto idle; 

state illegal_a: goto idle; 

state illegal b: goto idle; 

state illegal_c: goto idle; 


240725-CO 


PAL Codes: 10-4 
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state illegal d: goto idle; 


end 10 CTRL_4; 
a 2 
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10 BUS CONTROLLER - PAL 2, INTEL CORPORATION 
Equations for Module 10 CTRL_4 


Device 104 


- Reduced Equations: 
{IORDY~ := (IORDY~ & !LALE & !RESET & rdy510~ & !rdy~); 


Irdy~ := (IORDY~ & LALE & !RESET & rdy510~ & !rdy~ 
# IORDY~ & !RESET & !rdy510- & rdy~ 
# IORDY~ & LALE & !LDC & LMIO & LWR & rdy510- & rdy~); 


Irdy510~ := gre & !LALE & !delay & rdy510~ & rdy~ 
# IORDY~ & !LWR & !delay & rdy510~ & rdy~ 
# IORDY~ & LDC & Idelay & rdy510~ & rdy- 
# IORDY~ & !LMIO & !delay & rdy510~ & rdy~); 


240725-C2 


PAL Codes: 10-4 (Continued) 
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I0 BUS CONTROLLER—PAL 2, INTEL CORPORATION 
Chip diagram for Module IO_.CTRL_4 


Device 104 


end of module IO__CTRL__4 


AP-442 


unused_0 LJ8 13 LJIORDY~ 
unused_1L.J9 12 LJ unused_3 
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PAL Codes: 10-4 (Continued) 
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module LADDR_DEC flag ’-r3’ 
title ‘LOCAL_DECODE_LOGIC - INTEL CORPORATION’ 
LADDR_PAL device ’P16L8’; 


"ABEL don’t care symbol 
"ABEL clocking input symbo} 
"logic 1 

"logic 0 


"ADS# 

"M/1O# 

"Addr bit 31: 

4; "Addr bit 30 
"Addr bit 29 


" Outputs 
X16~ pin ; “indicates a 16-bit access 
LBA~ pin ; "local bus access 
NCA~ pin ;  "non-cache access 


equations 


1X16~ !ADS~ & M_I0~ & A31 & A30 & A29; 
LBA~ h; 
NCA~ h; 


end LADDR_DEC; 
240725-C3 
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LOCAL_DECODE LOGIC - INTEL CORPORATION 
Equations for Module LADOR DEC 


Device LADDR_PAL 


- Reduced Equations: 
1X16~ = (A29 & A30 & AJ] & !ADS~ & M_IO-~); 
'LBA~ = (0); 


INCA~ = (0); 
240725-C4 


PAL Codes: Local Decoder 
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LOCAL__DECODE__LOGIC—INTEL CORPORATION 
Chip diagram for Module LADDR__DEC 


Device LADDR__PAL 


240725-73 


end of module LADDR__DEC 
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module READY flag ‘-r3’ 
title ‘READY LOGIC - INTE! CORPORATION’ 


RDY device ‘PL6L8’ ; 
" Inputs 


DRAMRDY ~ j 1; “DRAM READY# 

IORDY~ pin ;  "IO/EPROM READY# 

RDYEN~ pin ;  “RDYEN# of 82385 

RDY385~ pin ;  “READYO# OF 82385 

RDY387~ pin ;  "“READYO# OF 82387 

CACHE pin ; “High if cache exits; otherwise, Low 


" Outputs 


READY~ pin 12; “READY# for 80386 
BREADY~ pin 13; “BREADY# for 82385 


equations 


!BREADY~ = !DRAMRDY~ # !IORDY-; 

'READY~ = (CACHE & !RDY385~) # !RDY387~ # 
(CACHE & !RDYEN~ & (!DRAMRDY~ # !IORDY~) # 
ICACHE & (!DRAMRDY~ # !IORDY~)); 


end READY; 
240725-C5 
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READY LOGIC - INTEL CORPORATION 
Equations for Module READY 


Device RDY 


- Reduced Equations: 
!BREADY~ = (!IORDY~ # !DRAMRDY~); 


'READY- = (!CACHE & ! TORDY-~ 
# !CACHE & | DRAMRDY~ 
# !TORDY~ & !RDYEN~ 
# !DRAMRDY~ & !RDYEN~ 
# !RDY387~ 
# CACHE & !RDY385~) ; 
240725-C6 


PAL Codes: Ready 


1-288 


: ntel é | AP-442 


ABEL 3.10—Document Generator 15-Feb-90 07:02 PM 
READY_LOGIC—INTEL CORPORATION 
Chip diagram for Module READY 


Device RDY 


DRAMRDY~ Lj 1 


lIORDY~ LJ 2 


RDY385~ LJ] 4 
RDY387~CLJ5 


240725-74 


end of module READY 


PAL Codes: Ready (Continued) 
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O6e-1 


386 
CLK2 
CLK 
ADS# 
Addr. 
W/R# 
HIT# 
T2X# 
TIP# 
RAS# 
CAS# 
DRAMRDY# 
NA# 


Read Cycle, Pipelined Read Cycle, Pipelined Write Cycle, Pipelined 
DRAM Page Miss DRAM Page Hit DRAM Page Hit 


DRAM Cycle (R/W Hit/Miss) 


cvP-dV 


Cache = Low 


SNOILVNOSA ONIWIL 
J XIGNAddV 
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L6e-L 


386 
CLK2 
CLK 
ADS# 
Addr. 
W/R# 
HIT# 
T2X# 
TIP# 
RAS# 
CAS# 
DRAMRDY# 
NA# 
CAL 
DEN# 
Data 
WE# 


DT/R# 


Read Cycle, Pipelined 


DRAM Page Hit 


Read Cycle, Pipelined 


DRAM Page Miss 


Tip | 


DRAM Cycle (Page Miss) 


Write Cycle, Pipelined 


DRAM Page Miss 


240725-76 


ove-dV 


c6c-1 


Read Cycle, Pipelined Read Cycle, Pipelined Write Cycle, Non=Pipelined Read Cycle, Pipelined 
DRAM Page Hit DRAM Page Hit DRAM Page Miss DRAM Page Hit 


386 Tip | Top Tip | 19; Ty | T2 | T2 | Top | Top Tip | Top 


ae Fst VST At ATS ae er NO eS ee a Oa Oa ea a Bs Fe 


Ne. ees Fe ee eC et kee tit) Ne oe ee (oe ee 
NA¥ AINA , AUR AP hy Soon See ANNE Ae) Merete aR Ae rT 

Be Ge ee a oe ee Ne Ri ee ee ea nes eer ee 
oe le ERG cP ean gia MORE Near PPS Dea NRE Gilat eee «7a ee Tel ae TT ae OS oe TU, La ee 
IES rr ce OO a cara tee gO came, SAR! ORE A i id PUTT ce LARS NI easy TD 
bo te ek ne Ee Ra Pl i ae eR oe ar ot ee ne ee ee | ay 
SHES eee sca ee re ee a ee ae ee ae nee na ee 
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DRAM Cycle 


Cvb-dV 


€6e-1 


386 
CLK2 
CLK 
ADS# 
Addr. 
W/R# 
HIT# 
T2X# 
T1P# 
RAS# 
CAS# 
DRAMRDY# 
NA# 
CAL 
DEN# 
Data 
WE# 
DT/R# 
MUXOE# 


REF# 


Read Cycle, Pipelined Read Cycle, Pipelined 


DRAM Page Hit DRAM Refresh 
Tip =| Ss Tap ye >] T2 | T2 | T2 


DRAM Refresh Cycle 
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CvP-dV 


AP-442 in 


Read, Cache Miss Read, Cache Miss 


386 | Tj Ty T2 \ ete ~{ Top. [+ Top 2] ee he > Pee. Ole 
DRAM Read DRAM Read, Page Hit 
Cache Write Cache Write 

385 | BT, | BT, BT, | BT, | BTop | BTop | BTop BT, P | BT», | BTop 


ck2 SVL S\S VS" 
OF Fs Ls 
CS ieapen eee See eee 
ik EN Ct 
Wr ne 225 f 
eee 


CALEN 


CS¥ 


CWE# 

COE# 

Data 
een he Pe Lee ee Read Data Cache Write Data Cache Write Data 

nT  -. 

BADS# 


a) ee er ce eee 
BACP De ay > a Ce eae as Ce Dee Menke SE Ee pita ee,” 


BAOE# 


BAddr. EPS EERILY EMERY Ger PONE AEE ee EE ee 
Mae So st FS a SY re EE EN Se ns ERY AE A ie ere oe 
wae? ees 
RAS# PERRCG EEC ; é 
ci. an 
BNA¥ 
BREADY# 
RDY387# 


DEN# 


——— NET SS a 
DRAM Read Data DRAM Read Data 
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Cache Cycle 
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Read, Cache Miss Read, Cache Hit Read, Cache Hit 


DRAM Read, Page Miss 
Cache Write 


Blip | BT 


CS# 
CWE 


Data 
Cache Write Dota Cache Read Data Cache Read Data 
CT/R# 


BADS¥ 
BACP 
BAOE#¥ 
BAddr. 
BW/R# 
HIT# 
RAS# 
CAS# 
BNA¥ 
BREADY# 
RDY3874# 
DEN¢ 


Data 
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Cache Cycle (Continued) 


1-295 


AP-442 | ; - | | in 


Write, Cache Hit Write, Cache Hit Write, Cache Miss Read, Cache Hit 
386 Ty Ty Ty | T2 | 12 T2 Ty | T2 12 
DRAM Write DRAM Write, Page Hit DRAM Write, Page Miss 
Cache Write Cache Write 
385 BT, BT, | BT, | BTop | BTop BT, P | BT, | BTop BT, P | BT, | 


CWE# \ / \ / No Cache Write 
COE# / \ / \ / 


Cache Write Data Cache Write Data Write Data 
CT/R# 


BADS# 
BACP 
BAOE# 
BAddr. aoa 
BW/R# 


HIT# 1 
CAS# .Y 
Pe: a ey 

"Ee SY =, a een ie caieee) 


DEN# 
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Cache Cycle (Continued) 
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L6c-1 


(panunudy) ajoAg ayoeg 


385 
CLK2 
CLK 
ADS# 
Addr. 
W/R# 
NA# 
CALEN 
CS# 
CWE# 
COE# 
Data 
CT/R# 
BADS# 
BACP 
BAOE# 
BAddr. 
BW/R# 
HIT# 
RAS# 
CAS# 
BNA# 
BREADY# 
RDY387# 


DEN# 


Read, Cache Hit 


T2 


DRAM Write, Page Miss 


Blip | 


Write Data 


Ty 


BT, 


Read, Cache Miss 


Cache Read Data 


DRAM Write Data 


BT, 


DRAM Read 
Cache Write 


BT, 


Write, Cache Miss 


DRAM Write, Page Hit 


Cache Write Data 


ETT 
DRAM Read Data 


Tip | 


Blip | 


Write Data 
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386 


385 
CLK2 
CLK 
ADS# 
Addr. 
W/R# 
NA# 
CALEN 
CS# 
CWE# 
COE# 
Data 
CT/R# 
BADS# 
BACP 
BAOE# 
BAddr. 
BW/R# 
HIT# 
RAS# 
CAS# 
BNA¥ 
BREADY# 
RDY387# 
DEN# 
Data 
WE# 
DT/R# 
LDSTB 


Pn a 


Write, Cache Miss 


| T2j Tj Tj 


DRAM Write, Page Hit 


} BT | Bay 


eee nek” Mae ee 


DRAM Write Data 


pory / \ 
BT/R¥ / 
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Cache Cycle (Continued) 
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LAddr. 
EPROM# 
MRDC# 
DEN# 
DT/R# 
lORDY# 
NA# 
BS16# 


Data 


ALE 


LAddr. 


EPROM# 


MRDC# 
DEN# 
DT/R# 
lORDY# 
NA# 
BS16# 


Data 
240725-85 


EPROM and I/O Cycles 
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cuk2 PLE LE LIL 
oS aie ae ale, Se 
Mee 
Ce - Mee Fe 
Kadir. eB 
RES 
0 REND RAGS 
ENS, Eanes 


lIORCH 


lOWC# 


INTAY 


DEN# 
DT/R# 
lORDY# 


pean atic: Ee ee ae ee ne eee Re a ee bk eee oe a 
CR ON a aaa ST aan 
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CLK2 

CLK 
ADS# 
CLK# 
Addr 


ALE 


LAddr x 


59CS# 


lORC# 
lowC# 
INTA# 

DEN# 
DT/R# 


lIORDY# 
240725-87 


EPROM and I/O Cycles (Continued) 
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240725-88 


ALE 
LAddr. 
510CS# 
lORC# 
loOWC# 


DEN# 


DT/R# 


lORDY# 
240725-89 


EPROM and I/O Cycles (Continued) 
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ALE 
LAddr. 
510CS# 


lIORC# 


lOWC# 


DEN 
DT/R# 


lORDY# 
240725-90 


CLK2 
CLK 
ADS# 
CLK¥ 
Addr. 
ALE 
LAddr. 
510CS¥ 
lORC# 
lowc¥ 
DEN# 
DT/R# 


lORDY# 
240725-91 


EPROM and I/O Cycles (Continued) 
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APPENDIX D 
TIMING EQUATIONS 


EQUATIONS FOR DRAM TIMINGS (NO CACHE 
CONFIGURATION): 


Read and Write Cycles (Common Parameters): 


tRC: Random Read or Write Cycle Time 
CLK2 x 10 


tRP: RAS# Precharge Time 
CLK2 x 4 


tRAS: RAS# Pulse Width 
CLK2 x 4 


A random DRAM cycle may have a RAS# pulse 
which is only four CLK2 periods wide. This is the case 
if the cycle is followed by Idle cycles (DRAMs not 
selected or Ti’s) or a DRAM page miss. 


tCAS (Read): CAS# Pulse Width 
CLK2 x 3 


CAS# pulses can be as narrow as three CLK2 
cycles during Page Mode read cycles. 


tCAS (Write): CAS# Pulse Width 
CLK2 x 2 


CAS # pulses can be as narrow as two CLK2 cy- 
cles during Page Mode write cycles. 


tASC: Column Address Setup Time 


min (CLK2 x 2 + AS32.tphi.min — Delay.max — 
ACT258.StoZ.tpl.max — ACT258.Cap.Derating, CLK2 x 
3 + AS32.tphi.min — t6.max — 386.Cap.Derating — 
AS373.DtoO.tpd.max — ACT258.ItoZ.tpi.max — 
ACT258.Cap.Derating) 


The Column Address becomes valid as RAS# 
switches from High to Low or as the 386 address be- 
comes valid while RAS# is already Low (i.e., Page 
Mode, Pipelined cycles) 


tCAH: Column Address Hold Time 


CLK2 + AS373.GtoO.tpd.min + ACT258.itoZ.tpl.min — 
AS32.tphi.max 


The CAL (Column Address Latch) signal is acti- 
vated one CLK2 period after the active-going edge of 
CAS #. 


tAR: Column Address Hold Time to RAS # 
CLK2 x 3 + AS373.GtoO.tpd.min + 
ACT258.ItoZ.tpl.min — RAS.Delay.max 
tRCD: RAS# to CAS# Delay Time 
CLK2 X 2 + AS32.tphi.min — RAS.Delay.max 


tRAD: RAS# to Column Address Delay Time 


(min) ACT258.StoZ.tphi.min + Delay.min — 
RAS.Delay.max 


(max) ACT258.StoZ.tphil.max + Delay.max + 
ACT258.Cap.Derating — RAS.Delay.min 
tRSH: RAS# Hold Time 

CLK2 x 2 — AS32.tphI.max + RAS.Delay.min 


The worst case occurs when a DRAM Page miss 
or Idle is detected at the end of the current DRAM 
Page miss cycle. 


tCSH: CAS # Hold Time 
CLK2 x 6 + AS32.tplh.min — RAS.Delay.max 


tCRP: CAS# to RAS# Precharge Time 
CLK2 x 2 + RAS.Delay.min — AS32.tplh.max 


This is guaranteed by the DRAM control state 
machine. 


tASR: Row Address Setup Time 


CLK2 X 2 — t6.max — 386.Cap.Derating — 
ACT258.ItoZ.max — ACT258.Cap.Derating + 
H124.tpd.min + H125.tpd.min + PAL.tco.min + 
RAS.Delay.min 


tRAH: Row Address Hold Time 
ACT258.StoZ.tphi.min + Delay.min — RAS.Delay.max 


tT: Transition Time (Rise and Fall) 
tREF: Refresh Period 


tREF2: Refresh Period 
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Read Cycles: 


tRAC: Access Time 
CLK2 X 6 — H124.tpd.max — H125.tpd.max — 


PAL.tco.max — t21.min — F245.max — RAS.Delay.max 


tCAC: Access Time from CAS # 
CLK2 <x 3 — H124.tpd.max — H125.tpd.max — 


PAL.tco.max — AS32.tphl.max — t21.min — F245.max 


tAA: Access Time from Address 


CLK2 x 6 — t6.max — 386.Cap.Derating — 
AS373.DtoO.max — ACT258.ItoZ.tp.max — 
ACT258.Cap.Derating — t21.min — F245.max 


tRCS: Read Command Setup Time 
CLK2 + AS32.tphli.min 


tRCH: Read Command Hold Time to CAS # 
CLK2 — AS32.tplh.max 


tRRH: Read Command Hold Time to RAS# 
CLK2 — RAS.Delay.max 


tOFF: Output Buffer Turn-off Time 
CLK2 x 2 + F245.tzh.min 


Write Cycles: 


tWCS: Write Command Setup Time 
CLK2 X 3 + AS32.tphl.mini 


tWCH: Write Command Hold Time 
CLK2 x 2 — AS32.tplh.max 


tWCR: Write Command Hold Time to RAS # 
CLK2 x 6 — RAS.Delay.max 
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tWP: Write Command Pulse Width , 


CLK2 x 5 


tRWL: Write Command to RAS# Lead Time 
CLK2 x 5 + RAS.Delay.min 


tCWL: Write Command to CAS# Lead Time 
CLK2 x 5 | 


tDS: Data-in Setup Time 


CLK2 x 3 + H124.tp.min + H125.tp.min + 
AS32.tphl.min — T12.max — F245.tp.max 


tDH: Data-in Hold Time 
CLK2 x 2 + F245.tpz.min — AS32.tphl.max 


tDHR: Data-in Hold Time to RAS# 
CLK2 x 6 + F245.tpz.max + RAS.Delay.min 


Page Mode Cycles: 


tPC: Page Mode Cycle Time 
CLK2 x 4 


tRAPC: Page Mode RAS# Pulse Width 
CLK2 x 4 


tRSW: RAS# to Second WE# Delay Time 
CLK2 x 7 — RAS.Delay.max 


tCP: CAS# Precharge Time 
CLK2 


tWI: Write Invalid Time 
CLK2 


tCAP: Access Time from Column Precharge Time 


CLK2 x 4 — H124.tp.max — H125.tp.max — 
PAL.tco.max — t21.min — F245.max 
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80386 A.C. SPECIFICATIONS 
80386-33 
Parameter Minimum Maximum 


Operating Frequency 

CLK2 Period 

CLK2 High Time 

CLK2 High Time 

CLK2 Low Time 

CLK2 Low Time 

CLK2 Fall Time 

CLK2 Rise Time 

A2-A31 Valid Delay 

A2-A31 Float Delay 

BEO#-BE3#, LOCK# Valid Delay 
BEO#-BE3#, LOCK# Float Delay 
W/R#, M/IO#, D/C#, ADS# Valid Delay 
W/R#, M/IO#, D/C#, ADS# Float Delay 
DO-D31 Write Data Valid Delay 
DO-D31 Float Delay 

HLDA Valid Delay 

NA# Setup Time 

NA# Hold Time 

BS16# Setup Time 

BS16# Hold Time 

Ready# Setup Time 

Ready# Hold Time 

DO-D31 Read Setup Time 

DO-D31 Read Hold Time 

HOLD Setup Time 

HOLD Hold Time 

RESET Setup Time 

RESET Hold Time 

NMI, INTR Setup Time 

NMI, INTR Hold Time 

PEREQ, ERROR#, BUSY# Setup Time 
PEREQ, ERROR#, BUSY# Hold Time 


SUUUMWOWUFHWUAIWUW UA SUD SLD DS 


Input or Feedback Setup Time 
Clock to Output 


ROW ADDRESS LATCH SPECIFICATIONS 
74FCT843B (IDT) 


Dn to On Propagation Delay 
G to On Propagation Delay 


Setup Time 
Hold Time 


ssa SS SS SS SS SSS IIA LL SS SS SS SS SS SS SS SS SS SS SS SS SS SSS SS STS TSS SS SS ESS 
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Timings for No Cache Configuration 
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ROW ADDRESS COMPARATOR SPECIFICATIONS 
7T4PCT521B (Performance) 


Symbol Parameter Minimum Maximum 

tplh An or Bn to Q Propagation Delay 1.50 5.90 
tphl 1.50 5.50 
tplh I to Q Propagation Delay | 1.50 4.60 
tphl 1.50 4.60 
Ss SSS SS SSS SSS SS SS SSS SSS SSS SVS SSS SSS SS SSS SSS SSS SSI ASSESSES LAIASS25S 5-2" 


DRAM ADDRESS MULTIPLEXER SPECIFICATIONS 


74ACT258 

Symbol Parameter Minimum Maximum 
tplh S to Zn Propagation Delay 1.00 11.50 
tphl 1.00 11.00 
tplh E# to Zn Propagation Delay 1.00 9.50 
tphl 1.00 9.50 
tplh In to Zn Propagation Delay 1.00 9.50 
tphl 1.00 8.00 
==ss= == SSS Se SESS SSS SSS SSS SSS ESSE SSSSVSISSssSes 
DATA TRANSCEIVER SPECIFICATIONS 

T4F245 

Symbol Parameter Minimum Maxiouma 
tplh An to Bn or Bn to An Propagation Delay 2.50 7.00 
tphl 2.50 7.00 
tzh Output Enable Time 3.00 8.00 
tzl 3.50 9.00 
tphz Output Disable Time 3.00 7.50 


COLUMN ADDRESS LATCH SPECIFICATIONS 
’ 


74AS573 

Symbol Parameter Minimum Maxicum 
tplh Dn to On Propagation Delay 3.00 6.00 
tphl 3.00 6.00 
tplh G to On Propagation Delay 6.00 11.50 
tphl 4.00 7.50 
ts Setup Time 2.00 

th Hold Time 3.00 

xSSaS Saat SS SS SS SS SS SES SSA SSSA 
RAS# DELAY 

Symbol Parameter Minimum Maximum 
tp Propagation Delay 0.00 0.00 
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Timings for No Cache Configuration (Continued) 
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OR SPECTFICATIONS 
714AS32 


Symbol Parameter Minimum Maximum 
tplh Propagation Delay 
tphl 


Ro SSPeRr SSS ewe eee LSS SSH He See SS SS SS SSS SS SS SSS SSS SS SSS SS SSS AVS SSS SSS SSS SSeS ST 


DRAM TIMING REQUIREMENTS 


For 803866-33 Timing Margin ({NMB 2801-06) 
Parameter Minimum Maximum Minimm Maximum 


Read and Write Cycles (Common Parameters) : 
tRC Random Read or Write Cycle Time 
tRP RAS# Precharge Time 

RAS# Pulse Width 

CAS# Pulse Width (Read) 

CAS# Pulse Width (Write) 

Column Address Setup Time 

Column Address Hold Time 

Column Address Hold Time to RAS# 

RAS# to CAS# Delay Time 

RAS# to Column Address Delay Time 

RAS# Hold Time 

CAS# Hold Time 

CAS# to RAS# Precharge Time 

Row Address Setup Time 

Row Address Hold Time 

Transition Time (Rise and Fall) 

Refresh Period 

Refresh Period 


Read Cycles: 
Access Time 
Access Time from CAS# 
Access Time from Address 
Read Command Setup Time 
Read Command Hold Time to CAS# 
Read Command Hold Time to RAS# 
Output Buffer Turn-off Time 


Write Cycles: 

twes Write Command Setup Time 

tWCH Write Command Hold Time 

tWCR Write Command Hold Time to RAS# 
tWP Write Command Pulse Width 

tRWL Write Command to RAS# Lead Time 
tCWL Write Command to CAS# Lead Time 
tDS Data-in Setup Time 

tDH Data-in Hold Time 

tDHR Data-in Hold Time to RAS# 


Page Mode Cycles: 
Page Mode Cycle Time 
Page Mode RAS# Pulse Width 
RAS# to Second WE# Delay Time 
CAS# Precharge Time 
Write Invalid Time 
Access Time from Column Precharge Time 38.25 4.25 


SS eS Ree eS 22S SS EE SS SH HS SSE SES SE THESES e ce eel SSS SS = 


240725-C9 


Timings for No Cache Configuration (Continued) 
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ADDRESS DECODER REQUIREMENTS 


For 80386-33 
Minimum Maximum 


Available Propagation Delay 
i 
ROW ADDRESS COMPARATOR RE()UIREMENTS 


For 80386-33 
Minimum Maximum 


Available Propagation Delay 


I 


NA# SETUP TIME 


Available NA# Setup Time 


QUAD TTL TO 10KH-ECL TRANSLATOR 
MC10H124 


Propagation Delay 


QUAD 10KH-ECL to TTL TRANSLATOR 
MC10H125 


Propagation Delay 


DELAY ELEMENT 


Propagation Delay 


240725-D0 


Timings for No Cache Configuration (Continued) 
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DRAM SPECTFICATIONS 


NMB 2801-06 VITELIC V53C256 (70 ns) 
Symbol Minimum Maximum Minimum Maximum 


100000 


~~ » 
IOUCUWUOUS Goo 


4 
3 
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CAPACITIVE LOAD TIMING DERATING FOR. 74ACT258 

Load Capacitance (pF) Additional Propagation Delay (ns) 
= 0.02625q - 1.3125) 
= 0.022q - 1.3125) 


0.01666q + 0.1666) 


Capacitive Load (pF) Additional Propagation Delay (ns) 
DRAM Address Inputs 
F258 Output 
Microstrip/Strip Lines 
TOTAL 


240725-D2 


Timings for No Cache Configuration. (Continued) 


1-309 


AP-442 


EQUATIONS FOR DRAM TIMINGS (82385 Ac- 
tive): 


Read and Write Cycles (Common Parameters): 


tRC: Random Read or Write Cycle Time 
CLK2 x 10 


tRP: RAS# Precharge Time 
CLK2 x 4 


tRAS: RAS# Pulse Width 
CLK2 x 4 


A random DRAM cycle may have a RAS# pulse 
which is only four CLK2 periods wide. This is the case 
if the cycle is followed by Idle cycles (DRAMs not 
selected or Ti’s) or a DRAM page miss. 


tCAS (Read): CAS# Pulse Width 
CLK2 x 5 


CAS # pulses can be as narrow as five CLK2 cy- 
cles during Page Mode reacl cycles. 


tCAS (Write): CAS# Pulse Width 
CLK2 x 2 


CAS# pulses can be as narrow as two CLK2 cy- 
cles during Page Mode write cycles. | 


tASC: Column Address Setup Time 


min (CLK2 xX 2 + AS32.tphi.min — Delay.max — 
ACT258.StoZ.tpl.max — ACT258.Cap.Derating, CLK2 x 
3 + AS32.tphI.min — t6.max — 386.Cap.Derating — 
AS373.DtoO.tpd.max — ACT258.ItoZ.tpl.max — 
ACT258.Cap.Derating) 


The Column Address becomes valid as RAS# 
switches from High to Low or as the 386 address be- 
comes valid while RAS# is already Low (i.e., Page 
Mode, Pipelined cycles) 


tCAH: Column Address Hold Time 


CLK2 + AS373.GtoO.tpd.min + ACT258.ItoZ.tpl.min — 
AS32.tphl.max 


The CAL (Column Address Latch) signal is acti- 


vated one CLK2 period after the active-going edge of 
CAS#. 
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tAR: Column Address Hold Time to RAS# 


CLK2 X 3 + AS373.GtoO.tpd.min + 
ACT258.ItoZ.tpl.min — RAS.Delay.max 


tRCD: RAS# to CAS# Delay Time 
CLK2 X 2 + AS32.tphI.min — RAS.Delay.max 


tRAD: RAS# to Column Address Delay Time 


(min) ACT258.StoZ.tphi.min + Delay.min — 
RAS.Delay.max 


(max) ACT258.StoZ.tphil.max + Delay.max + 
ACT258.Cap.Derating — RAS.Delay.min 
tRSH: RAS# Hold Time 

CLK2 x 2 — AS32.tphl.max + RAS.Delay.min 


The worst case occurs when a DRAM Page miss 
or Idle is detected at the end of the current DRAM 
Page miss cycle. 


tCSH: CAS# Hold Time 
CLK2 x 6 + AS32.tphi.min — RAS.Delay.max 


tCRP: CAS# to RAS# Precharge Time 
CLK2 x 2 + RAS.Delay.min — AS32.tplh.max 


This is guaranteed by the DRAM control state 
machine. 


tASR: Row Address Setup Time 


CLK2 X 2 — t6.max — 386.Cap.Derating — 
ACT258.ltoZ.max — ACT258.Cap.Derating + 
H124.tpd.min + H125.tpd.min + PAL.tco.min + 
RAS.Delay.min 


tRAH: Row Address Hold Time 
ACT258.StoZ.tphi.min + Delay.min — RAS.Delay.max 


tT: Transition Time (Rise and Fall) 
tREF: Refresh Period 


tREF2: Refresh Period 
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Read Cycles: tWP: Write Command Pulse Width 
CLK2 x 5 
tRAC: Access Time 
CLK2 X 8 — H124.tpd.max — H125.tpd.max — tRWL: Write Command to RAS# Lead Time 
PAL.tco.max — — F245.max — AS646.tpd.max — ' ; 
F245.max — RAS.Delay.max — SRAM.tDW — CLK2 + eae tliat Ll 
385.t22a.min ; 
tCWL: Write Command to CAS# Lead Time 
tCAC: Access Time from CAS # CLK2 x 5 
CLK2 X 5 — H124.tpd.max — H125.tpd.max — ; : 
PAL.tco.max — AS32.tphl.max — F245.max — tDS: Data-in Setup Time 
AS646.tpd.max — F245.max — SRAM.tDW — CLK2 + CLK2 x 3 + H124.tp.min + H125.tp.min + 
385.t22a.min AS32.tphi.min — — 385.t43c.max — 


AS646.GotO.tp.max — F245.tp.max 


tAA: Access Time from Address 


CLK2 x 8 — t6.max — 386.Cap.Derating — tDH: Data-in Hold Time 


AS373.Dto0.max — ACT258.ItoZ.tp.max — CLK2 x 2 + F245.tpz.min — AS32.tphl.max 
ACT258.Cap.Derating — F245.max — AS646.tpd.max — 


F245.max — SRAM.tDW — CLK2 + 385.t22a.min tDHR: Data-in Hold Time to RAS# 
tRCS: Read Command Setup Time CLK2 x 6 + F245.tpz.max + RAS.Delay.min 


CLK2 + AS32.tphi.min Page Mode Cycles: 


tRCH: Read Command Hold Time to CAS # 
CLK2 — AS32.tplh.max — 


tPC: Page Mode Cycle Time 
CLK2 x 6 


tRRH: Read Command Hold Time to RAS # 
CLK2 — RAS.Delay.max 


tRAPC: Page Mode RAS# Pulse Width 
CLK2 x 4 

tOFF: Output Buffer Turn-off Time 
CLK2 X 2 + F245.tzh.min 


tRSW: RAS# to Second WE# Delay Time 
CLK2 x 7 — RAS.Delay.max 


Write Cycles: tCP: CAS# Precharge Time 


tWCS: Write Command Setup Time CLK2 


CLK2 x 3 + AS32.tphi.min Swi: Weite Invalid Time 


tWCH: Write Command Hold Time _ CLK2 


CLK2 x 2 — AS92.tplh.max tCAP: Access Time from Column Precharge Time 


tWCR: Write Command Hold Time to RAS# CLK2 x 6 — H124.tp.max — H125.tp.max — 
PAL.tco.max — — F245.max — AS646.tpd.max — 
CLK2 x 6 — RAS.Delay.max F245.max — SRAM.t~DW — CLK2 + 385.t22a.min 
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DRAM TIMING REQUIREMENTS 


For 80386-33 Timing Margin (NMB 2801-06) 
Minimum Maximum Minimum Maximum 


Read and Write Cycles (Common Parameters) : 
tRC Random Read or Write Cycle Time 
tRP RAS# Precharge Time 
RAS# Pulse Width 
tCAS CAS# Pulse Width (Read) 
CAS# Pulse Width (Write) 
Column Address Setup Time 
Column Address Hold Time 
Column Address Hold Time to RAS# 
RAS# to CAS# Delay Time 
RAS# to Column Acidresas Delay Time 
RAS# Hold Time 
CAS# Hold Time 
CAS# to RAS# Precharge Time 
Row Address Setuy Time 
Row Address Hold Time 
Transition Time (Rise and Fall) 
Refresh Period 
Refresh Period 


Read Cycles: 
Access Time 
Access Time from CAS# 
Access Time from Address 
Read Command Setup Time 
Read Command Holi Time to CAS# 
Read Command Hold Time to RAS# 
Output Buffer Turn-off Time 


Write Cycles: 
Write Command Setup Time 
Write Command Hold Time 
Write Command Hold Time to RAS# 
Write Command Pulse Width 
Write Command to RAS# Lead Time 
Write Command to CAS# Lead Time 
Data-in Setup Time 
Data-in Hold Time 
Data-in Hold Time to RAS# 


Page Mode Cycles: 

tPc Page Mode Cycle Time 

tRAPC Page Mode RAS# Pulse Width 

tRSW RAS# to Second WE# Delay Time 

tCP CAS# Precharge Time 

twI Write Invalid Time 

tCAP Access Time from Column Precharge Time 


240725-D3 


Timings with Cache Active 
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Intel386™ SX MICROPROCESSOR 


@ Full 32-Bit Internal Architecture @ Large Uniform Address Space 
— 8-, 16-, 32-Bit Data Types — 16 Megabyte Physical 
— 8 General Purpose 32-Bit Registers — 64 Terabyte Virtual 

= Runs Intel386™ Software in a Cost — 4 Gigabyte Maximum Segment Size 
Effective 16-Bit Hardware Environment m= Numerics Support with the Intel387™ 
— Runs Same Applications and O.S.’s SX Math CoProcessor 


as the Intel386™ DX Processor 
— Object Code Compatible with 8086, 
80186, 80286, and Intel386™ 


= On-Chip Debugging Support Including 
Breakpoint Registers 


Prannanérs - @ Complete System Development 
@ High Performance 16-Bit Data Bus as Seohene C, PL/M, Assembler 
— 16, 20, 25 and 33 MHz Clock — Debuggers: PMON-386 DX, 
— Two-Clock Bus Cycles ICETM-386 SX 


— Address Pipelining Allows Use of 


Slower/Cheaper Memories m High Speed CHMOS IV Technology 
m Integrated Memory Management Unit m Operating Frequency: 
— Virtual Memory Support — Standard 
— Optional On-Chip Paging (Intel386 SX -33, -25, -20, -16) 
— 4 Levels of Hardware Enforced Min/Max Frequency 
Protection (4/33, 4/25, 4/20, 4/16) MHz 
— MMU Fully Compatible with Those of — Low Power 
the 80286 and Intel386 DX CPUs lnfeloee a -33, -25, -20, -16, -12) 
; in/Max Frequency 
@ Virtual 8086 Mode Allows Execution of 
8086 Software in a Protected and aritape, Seale salen hs ie Sc ed se as 
Paged System m 100-Pin Plastic Quad Flatpack Package 


(See Packaging Outlines and Dimensions #231369) 


The Intel886™ SX Microprocessor is an entry-level 32-bit CPU with a 16-bit external data bus and a 24-bit 
external address bus. The Intel886 SX CPU brings the vast software library of the Intel386™ Architecture to 
entry-level systems. It provides the performance benefits of a 32-bit programming architecture with the cost 
savings associated with 16-bit hardware systems. 
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SEGMENTATION UNIT PAGING UNIT BUS CONTROL 


REQUEST 
EFFECTIVE ADDRESS BUS PRIORITIZER 
32 
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1.0 PIN DESCRIPTION 
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Figure 1.1. Intel386™ SX Microprocessor Pin out Top View 


Table 1.1. Alphabetical Pin Assignments 
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1.0 PIN DESCRIPTION (Continued) 


The following are the Intel386™ SX Microprocessor pin descriptions. The following definitions are used in the 
pin descriptions: 


# The named signal is active LOW. 
| Input signal. 

O Output signal. 

I/O ‘Input and Output signal. 

- No electrical connection. 


CLK2 provides the fundamental timing for the Intel386 SX 
Microprocessor. For additional information see Clock. 


RESET suspends any operation in progress and places the 
Intel386 SX Microprocessor in a known reset state. See 
Interrupt Signals for additional information. 


81-83,86-90, Data Bus inputs data during memory, |/O and interrupt 
92-96,99-100,1 | acknowledge read cycles and outputs data during memory and 
1/O write cycles. See Data Bus for additional information. 


80-79,76-72,70, | Address Bus outputs physical memory or port |/O addresses. 
66-64,62-58, See Address Bus for additional information. 


56-51,18 


Write/Read is a bus cycle definition pin that distinguishes write 
cycles from read cycles. See Bus Cycle Definition Signals for 
additional information. 


Data/Control is a bus cycle definition pin that distinguishes data 
cycles, either memory or I/O, from control cycles which are: 
interrupt acknowledge, halt, and code fetch. See Bus Cycle 
Definition Signals for additional information. 


Memory/IO is a bus cycle definition pin that distinguishes 
memory cycles from input/output cycles. See Bus Cycle 
Definition Signals for additional information. 


Bus Lock is a bus cycle definition pin that indicates that other 
system bus masters are not to gain control of the system bus 
while it is active. See Bus Cycle Definition Signals for 
additional information. 


Address Status indicates that a valid bus cycle definition and 
address (W/R#, D/C#, M/IO#, BHE#, BLE# and Ao3-A; are 
being driven at the Intel386 SX Microprocessor pins. See Bus 
Control Signals for additional information. 


Next Address is used to request address pipelining. See Bus 
Control Signals for additional information. 

7 Bus Ready terminates the bus cycle. See Bus Control Signals 
for additional information. 

19,17 Byte Enables indicate which data bytes of the data bus take part 

in a bus cycle. See Address Bus for additional information. 


READY # 


BHE#, BLE# 
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Be 
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A 
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1.0 PIN DESCRIPTION (Continued) 


Pin Name and Function 


Bus Hold Request input allows another bus master to request 


_Symbol_| Type | 


= al 
S “ 
4 a 


BUSY # pac 
ERROR# cal 


- 
20, 27, 29-31, 43-47 | No Connects should always be left unconnected. Connection of 
a N/C pin may cause the processor to malfunction or be 


incompatible with future steppings of the Intel386 SX 
Microprocessor. 

8-10,21,32,39 System Power provides the + 5V nominal DC supply input. 

42,48 ,57,69, 


71,84,91,97 


2,5,11-14,22 System Ground provides the OV connection from which all 
35,41,49-50, inputs and outputs are measured. 

63,67-68, 
77-78,85,98 


control of the local bus. See Bus Arbitration Signals for 
additional information. 


Bus Hold Acknowledge output indicates that the Intel386 SX 
Microprocessor has surrendered control of its local bus to 

another bus master. See Bus Arbitration Signals for additional 
information. 


interrupt Request is a maskable input that signals the Intel386 
SX Microprocessor to suspend execution of the current program 
and execute an interrupt acknowledge function. See Interrupt 

Signals for additional information. 


Non-Maskable Interrupt Request is a non-maskable input that 
signals the Intel886 SX Microprocessor to suspend execution of 
the current program and execute an interrupt acknowledge 
function. See Interrupt Signals for additional information. 


Busy signals a busy condition from a processor extension. See 
Coprocessor Interface Signals for additional information. 


Error signals an error condition from a processor extension. See 
Coprocessor Interface Signals for additional information. 


Processor Extension Request indicates that the processor has 
data to be transferred by the Intel386 SX Microprocessor. See 
Coprocessor Interface Signals for additional information. 


Float is an input which forces all bidirectional and output signals, 
including HLDA, to the tri-state condition. This allows the 
electrically isolated Intel886SX PQFP to use ONCE (On-Circuit 
Emulation) method without removing it from the PCB. See Float 
for additional information. : 
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INTRODUCTION 


The Intel886 SX Microprocessor is 100% object 
code compatible with the Intel386 DX, 286 and 8086 
microprocessors. Systems based on the Intel386 SX 
CPU can access the world’s largest existing micro- 
computer software base, including the growing 32- 
bit software base. 


Instruction pipelining and a high performance ALU 
ensure short average instruction execution times 
and high system throughput. 


The integrated memory management unit (MMU) in- 
cludes an address translation cache, multi-tasking 
hardware, and a four-level hardware-enforced pro- 
tection mechanism to support operating systems. 
The virtual machine capability of the Intel886 SX 
CPU allows simultaneous execution of applications 
from multiple operating systems. 


The Intel886 SX CPU offers on-chip testability and 
debugging features. Four breakpoint registers allow 
conditional or unconditional breakpoint traps on 
code execution or data accesses for powerful de- 
bugging of even ROM-based systems. Other testa- 
bility features include self-test, tri-state of output 
buffers, and direct access to the page translation 
cache. 


The Low Power Intel386 SX CPU brings the benefits 
of the Intel386 Microprocessor 32-bit architecture to 
Laptop and Notebook personal computer applica- 
tions. With its power saving 2 MHz sleep-mode and 
extended functional temperature range of O°C to 
100°C Tcase, the Lower Power Intel886 SX CPU 
specifically satisfies the power consumption and 
heat dissipation requirements of today’s small form 
factor computers. 


2.0 BASE ARCHITECTURE 


The Intel386 SX Microprocessor consists of a cen- 
tral processing unit, a memory management unit and 
a bus interface. 


The central processing unit consists of the execu- 
tion unit and the instruction unit. The execution unit 
contains the eight 32-bit general purpose registers 
which are used for both address calculation and 
data operations and a 64-bit barrel shifter used to 
speed shift, rotate, multiply, and divide operations. 
The instruction unit decodes the instruction opcodes 
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and stores them in the decoded instruction’ queue 
for immediate use by the execution unit. 


The memory management unit (MMU) consists of a 
segmentation unit and a paging unit. Segmentation 
allows the managing of the logical address space by 
providing an extra addressing component, one that 
allows easy code and data relocatability, and effi- 
cient sharing. The paging mechanism operates be- 
neath and is transparent to the segmentation pro- 
cess, to allow management of the physical address 
space. 


The segmentation unit provides four levels of pro- 
tection for isolating and protecting applications and 
the operating system from each other. The hardware 
enforced protection allows the design of systems 
with a high degree of integrity. 


The Intel886 SX Microprocessor has two modes of 
operation: Real Address Mode (Real Mode), and 
Protected Virtual Address Mode (Protected Mode). 
In Real Mode the Intel386 SX Microprocessor oper- 
ates as a very fast 8086, but with 32-bit extensions if 
desired. Real Mode is required primarily to set up the 
processor for Protected Mode operation. 


Within Protected Mode, software can perform a task 
switch to enter into tasks designated as Virtual 8086 
Mode tasks. Each such task behaves with 8086 se- — 
mantics, thus allowing 8086 software (an application 
program or an entire operating system) to execute. 
The Virtual 8086 tasks can be isolated and protect- 
ed from one another and the host Intel386 SX Micro- 
processor operating system by use of paging. 


Finally, to facilitate system hardware designs, the 
Intel386 SX Microprocessor bus interface offers ad- 
dress pipelining and direct Byte Enable signals for 
each byte of the data bus. 


2.1 Register Set 


The Intel3886 SX Microprocessor has thirty-four reg- 
isters as shown in Figure 2-1. These registers are 
grouped into the following seven categories: 


General Purpose Registers: The eight 32-bit gen- 
eral purpose registers are used to contain arithmetic 
and logical operands. Four of these (EAX, EBX, 
ECX, and EDX) can be used either in their entirety as 
32-bit registers, as 16-bit registers, or split into pairs 
of separate 8-bit registers. 
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Figure 2.1. Intel386™ SX Microprocessor Registers 
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Segment Registers: Six 16-bit special purpose reg- 
isters select, at any given time, the segments of 
memory that are immediately addressable for code, 
stack, and data. 


Flags and Instruction Pointer Registers: The two 
32-bit special purpose registers in figure 2.1 record 
or control certain aspects of the Intel886 SX Micro- 
processor state. The EFLAGS register includes 
status and control bits that are used to reflect the 
outcome of many instructions and modify the se- 
mantics of some instructions. The Instruction Point- 
er, called EIP, is 32 bits wide. The Instruction Pointer 
controls instruction fetching and the processor auto- 
matically increments it after executing an instruction. 


Control Registers: The four 32-bit control register 
are used to control the global nature of the Intel386 
SX Microprocessor. The CRO register contains bits 
that set the different processor modes (Protected, 
Real, Paging and Coprocessor Emulation). CR2 and 
CR3 registers are used in the paging operation. 


SPECIAL FIELDS: 


1/O PRIVILEGE LEVEL 


NESTED TASK 
17 16 15 


14 13}12 
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System Address Registers: These four special 
registers reference the tables or segments support- 
ed by the 80286/Intel386 SX/Intel3886 DX CPU’s 
protection model. These tables or segments are: 


GDTR (Global Descriptor Table Register), 
IDTR (Interrupt Descriptor Table Register), 
LDTR (Local Descriptor Table Register), 
TR (Task State Segment Register). 


Debug Registers: The six programmer accessible 
debug registers provide on-chip support for debug- 
ging. The use of the debug registers is described in 
Section 2.10 Debugging Support. 


Test Registers: Two registers are used to control 
the testing of the RAM/CAM (Content Addressable 
Memories) in the Translation Lookaside Buffer por- 
tion of the Intel886 SX Microprocessor. Their use is 
discussed in Testability. 


STATUS FLAGS: 
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Figure 2.2. Status and Control Register Bit Functions 
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EFLAGS REGISTER 


The flag register is a 32-bit register named EFLAGS. 
The defined bits and bit fields within EFLAGS, 
shown in Figure 2.2, control certain operations and 
indicate the status of the Intel886 SX Microproces- 
sor. The lower 16 bits (bits 0-15) of EFLAGS con- 


intel. 


The Intel386 SX Microprocessor has three control 
registers of 32 bits, CRO, CR2 and CR3, to hold the 
machine state of a global nature. These registers 
are shown in Figures 2.1 and 2.2. The defined CRO 
bits are described in Table 2.2. 


CONTROL REGISTERS 


tain the 16-bit flag register named FLAGS. This is 
the default flag register used when executing 8086, 
80286, or real mode code. The functions of the flag 
bits are given in Table 2.1. 


Bit Position 


Table 2.1. Flag Definitions 


Name 


CF Carry Flag—Set on high-order bit carry or borrow; cleared 
otherwise. 


PF Parity Flag—Set if low-order 8 bits of result contain an even 
number of 1-bits; cleared otherwise. 


AF Auxiliary Carry Flag—Set on carry from or borrow to the low 
order four bits of AL; cleared otherwise. 
ZI- Zero Flag—Set if result is zero; cleared otherwise. 


SF Sign Flag—Set equal to high-order bit of result (0 if positive, 1 if 
negative). 


Single Step Flag—Once set, a single step interrupt occurs after 
the next instruction executes. TF is cleared by the single step 
interrupt. 


TF 


Interrupt-Enable Flag—When set, maskable interrupts will cause 
the CPU to transfer control to an interrupt vector specified 
location. 


DF Direction Flag—Causes string instructions to auto-increment 
(default) the appropriate index registers when cleared. Setting 
DF causes auto-decrement. 


OF Overflow Flag—Set if the operation resulted in a carry/borrow 


into the sign bit (high-order bit) of the result but did not result ina 
carry/borrow out of the high-order bit or vice-versa. 


lIOPL 1/O Privilege Level—indicates the maximum Current Privilege 
Level (CPL) permitted to execute I/O instructions without 
generating an exception 13 fault or consulting the |/O permission 
bit map while executing in protected mode. For virtual 86 mode it 
indicates the maximum CPL allowing alteration of the IF bit. See 
Section 4.2 for a further discussion and definitions on various 
privilege levels. 


NT Nested Task—Set if the execution of the current task is nested 
within another task. Cleared otherwise. 


RI- Resume Flag—Used in conjunction with debug register 
breakpoints. It is checked at instruction boundaries before 
breakpoint processing. If set, any debug fault is ignored on the 
next instruction. 


VM Virtual 8086 Mode—lIf set while in protected mode, the Intel386 
SX Microprocessor will switch to virtual 8086 operation, handling 
segment loads as the 8086 does, but generating exception 13 
faults on privileged opcodes. 
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Table 2.2. CRO Definitions 


Protection mode enable—places the Intel386 SX Microprocessor 
into protected mode. If PE is reset, the processor operates again 
in Real Mode. PE may be set by loading MSW or CRO. PE can be 
reset only by loading CRO, it cannot be reset by the LMSW 


instruction. 


Emulate processor extension—causes a processor extension 
not present exception (number 7) on ESC instructions to allow 
emulating a processor extension. 


Task switched—indicates the next instruction using a processor 
extension will cause exception 7, allowing software to test 
whether the current processor extension context belongs to the 
current task. 


Paging enable bit—is set to enable the on-chip paging unit. It is 
reset to disable the on-chip paging unit. 


2.2 Instruction Set 


The instruction set is divided into nine categories of 
operations: 


Data Transfer 

Arithmetic 

Shift/Rotate 

String Manipulation 

Bit Manipulation 

Control Transfer 

High Level Language Support 
Operating System Support 
Processor Control 


These instructions are listed in Table 9.1 Instruc- 
tion Set Clock Count Summary. 


All Intel886 SX Microprocessor instructions operate 
on either 0, 1, 2 or 3 operands; an operand resides 
in a register, in the instruction itself, or in memory. 
Most zero operand instructions (e.g CLI, STI) take 
only one byte. One operand instructions generally 


are two bytes long. The average instruction is 3.2 
bytes long. Since the Intel386 SX Microprocessor 
has a 16 byte prefetch instruction queue, an average 
of 5 instructions will be prefetched. The use of two 
operands permits the following types of common in- 
structions: 


Register to Register 
Memory to Register 
Immediate to Register 
Memory to Memory 
Register to Memory 
Immediate to Memory. 


The operands can be either 8, 16, or 32 bits long. As 
a general rule, when executing code written for the 
Intel386 SX Microprocessor (32-bit code), operands 
are 8 or 32 bits; when executing existing 8086 or 
80286 code (16-bit code), operands are 8 or 16 bits. 
Prefixes can be added to all instructions which over- 
ride the default length of the operands (i.e. use 
32-bit operands for 16-bit code, or 16-bit operands 
for 32-bit code). 
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2.3 Memory Organization 


Memory on the Intel886 SX Microprocessor is divid- 
ed into 8-bit quantities (bytes), 16-bit quantities 
(words), and 32-bit quantities (dwords). Words are 
stored in two consecutive bytes in memory with the 
low-order byte at the lowest address. Dwords are 
stored in four consecutive bytes in memory with the 
low-order byte at the lowest address. The address of 
a word or dword is the byte address of the low-order 
byte. 


In addition to these basic dzaita types, the Intel386 SX 
Microprocessor supports two larger units of memory: 
pages and segments. Mernory can be divided up 
into one or more variable length segments, which 
can be swapped to disk or shared between pro- 
grams. Memory can also be organized into one or 
more 4K byte pages. Finally, both segmentation and 
paging can be combined, gaining the advantages of 
both systems. The Intel386 SX Microprocessor sup- 
ports both pages and segmientation in order to pro- 
vide maximum flexibility to the system designer. 
Segmentation and paging are complementary. Seg- 
mentation is useful for organizing memory in logical 
modules, and as such is a tool for the application 
‘programmer, while pages are useful to the system 
programmer for managing the physical memory of a 
system. 


ADDRESS SPACES 


The Intel886 SX Microprocessor has three types of 
address spaces: logical, linear, and physical. A 
logical address (also known as a virtual address) 
consists of a selector and an offset. A selector is the 
contents of a segment register. An offset is formed 
by summing all of the addressing components 
(BASE, INDEX, DISPLACEMENT), discussed in sec- 
tion 2.4 Addressing Modes, into an effective ad- 
dress. This effective address along with the selector 
is known as the logical address. Since each task on 
the Intel386 SX Microprocessor has a maximum of 
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16K (214 —1) selectors, and offsets can be 4 giga- 
bytes (with paging enabled) this gives a total of 246 
bits, or 64 terabytes, of logical address space per 


task. The programmer sees the logical address 
space. 


The segmentation unit translates the logical ad- 
dress space into a 32-bit linear address space. If the 
paging unit is not enabled then the 32-bit linear ad- 
dress is truncated into a 24-bit physical address. 
The physical address is what appears on the ad- 
dress pins. 


The primary differences between Real Mode and 
Protected Mode are how the segmentation unit per- 
forms the translation of the logical address into the 
linear address, size of the address space, and pag- 
ing capability. In Real Mode, the segmentation unit 
shifts the selector left four bits and adds the result to 
the effective address to form the linear address. 
This linear address is limited to 1 megabyte. In addi- 
tion, real mode has no paging capability. 


Protected Mode will see one of two different ad- 
dress spaces, depending on whether or not paging 
is enabled. Every selector has a logical base ad- 
dress associated with it that can be up to 32 bits in 
length. This 32-bit logical base address is added to 
the effective address to form a final 32-bit linear 
address. If paging is disabled this final linear ad- 
dress reflects physical memory and is truncated so 
that only the lower 24 bits of this address are used 
to address the 16 megabyte memory address space. 
If paging is enabled this final linear address reflects 
a 32-bit address that is translated through the pag- 
ing unit to form a 16-megabyte physical address. 
The logical base address is stored in one of two 
operating system tables (i.e. the Local Descriptor 
Table or Global Descriptor Table). 


Figure 2.3 shows the relationship between the vari- 
ous address spaces. 
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Figure 2.3. Address Translation 


SEGMENT REGISTER USAGE 


The main data structure used to organize memory is 
the segment. On the Intel386 SX Microprocessor, 
segments are variable sized blocks of linear ad- 
dresses which have certain attributes associated 
with them. There are two main types of segments, 
code and data. The segments are of variable size 
and can be as small as 1 byte or as large as 4 giga- 
bytes (232 bits). 


In order to provide compact instruction encoding 
and increase processor performance, instructions 
do not need to explicitly specify which segment reg- 
ister is used. The segment register is automatically 
chosen according to the rules of Table 2.3 (Segment 
Register Selection Rules). In general, data refer- 
ences use the selector contained in the DS register, 
stack references use the SS register and instruction 
fetches use the CS register. The contents of the In- 
struction Pointer provide the offset. Special segment 
override prefixes allow the explicit use of a given 
segment register, and override the implicit rules list- 
ed in Table 2.3. The override prefixes also allow the 
use of the ES, FS and GS segment registers. 


There are no restrictions regarding the overlapping 
of the base addresses of any segments. Thus, all 6 
segments could have the base address set to zero 
and create a system with a four gigabyte linear ad- 


dress space. This creates a system where the virtual 
address space is the same as the linear address 
space. Further details of segmentation are dis- 
cussed in chapter 4 PROTECTED MODE ARCHI- 
TECTURE. 


2.4 Addressing Modes 


The Intel386 SX Microprocessor provides a total of 8 
addressing modes for instructions to specify oper- 
ands. The addressing modes are optimized to allow 
the efficient execution of high level languages such 
as C and FORTRAN, and they cover the vast majori- 
ty of data references needed by high-level lan- 
guages. 


REGISTER AND IMMEDIATE MODES 
Two of the addressing modes provide for instruc- 


tions that operate on register or immediate oper- 
ands: 


Register Operand Mode: The operand is located in 
one of the 8, 16 or 32-bit general registers. 


immediate Operand Mode: The operand is includ- 
ed in the instruction as part of the opcode. 
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Table 2.3. Segment Register Selection Rules 


Type of 
Memory Reference 


Code Fetch 


Destination of PUSH, |PUSHF, INT, 
CALL, PUSHA Instructons 


Source of POP, POPA, POPF, IRET, 
RET Instructions 


Destination of STOS, MOVE, REP STOS, 
and REP MOVS instructions 


Other data references, with effective 
address using base register of: 
[EA] 
[EBX] 
[ECX] 
[ED] 
[ESI] 
[EDI] 
[EBP] 
[ESP] 


32-BIT MEMORY ADDRESSING MODES 


The remaining 6 modes provide a mechanism for 
specifying the effective adciress of an operand. The 
linear address consists of two components: the seg- 
ment base address and an effective address. The 
effective address is calculated by summing any 
combination of the following three address elements 
(see Figure 2.3): 


DISPLACEMENT: an 8, 16 or 32-bit immediate val- 
ue, following the instruction. 


BASE: The contents of any general purpose regis- 
ter. The base registers are generally used by compil- 
ers to point to the start of the local variable area. 


INDEX: The contents of any general purpose regis- 
ter except for ESP. The inclex registers are used to 
access the elements of an array, or a string of char- 
acters. The index register’s value can be multiplied 
by a scale factor, either 1, 2, 4 or 8. The scaled index 
is especially useful for accessing arrays or struc- 
tures. 


Combinations of these 3 components make up the 6 
additional addressing modes. There is no perform- 
ance penalty for using any cf these addressing com- 
binations, since the effective address calculation is 
pipelined with the execution of other instructions. 
The one exception is the simultaneous use of Base 
and Index components which requires one addition- 
al clock. 
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implied (Default) Segment Override 
Segment Use Prefixes Possible 


CS,SS,ES,FS,GS 
CS,SS,ES,FS,GS 
CS,SS,ES,FS,GS 


CS,SS,ES,FS,GS 
CS,SS,ES,FS,GS 
CS,SS,ES,FS,GS 
CS,DS,ES,FS,GS 
CS,DS,ES,FS,GS 


As shown in Figure 2.4, the effective address (EA) of 
an operand is calculated according to the following 
formula: 


EA = Basépegister + (INdexRegister* Scaling) 
+ Displacement 


1. Direct Mode: The operand’s offset is contained 
as part of the instruction as an 8, 16 or 32-bit 
displacement. 


2. Register Indirect Mode: A BASE register con- 
tains the address of the operand. 


3. Based Mode: A BASE register’s contents are 
added to a DISPLACEMENT to form the oper- 
and’s offset. 


4. Scaled Index Mode: An INDEX register’s con- 
tents are multiplied by a SCALING factor, and the 
result is added to a DISPLACEMENT to form the 
operand’s offset. 


5. Based Scaled Index Mode: The contents of an 
INDEX register are multiplied by a SCALING fac- 
tor, and the result is added to the contents of a 
BASE register to obtain the operand’s offset. 


6. Based Scaled Index Mode with Displacement: 
The contents of an INDEX register are multiplied 
by a SCALING factor, and the result is added to 
the contents of a BASE register and a DISPLACE- 
MENT to form the operand’s offset. 


EFFECTIVE 
ADDRESS 


LINEAR 
DESCRIPTOR REGISTERS 


ACCESS RIGHTS CS 


e ADDRESS 
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SEGMENT 
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Figure 2.4. Addressing Mode Calculations 


DIFFERENCES BETWEEN 16 AND 32 BIT 
ADDRESSES 


In order to provide software compatibility with the 
8086 and the 80286, the Intel3886 SX Microproces- 
sor can execute 16-bit instructions in Real and Pro- 
tected Modes. The processor determines the size of 
the instructions it is executing by examining the D bit 
in a Segment Descriptor. If the D bit is 0 then all 
operand lengths and effective addresses are as- 
sumed to be 16 bits long. If the D bit is 1 then the 
default length for operands and addresses is 32 bits. 
In Real Mode the default size for operands and ad- 
dresses is 16 bits. 


Regardless of the default precision of the operands 
or addresses, the Intel386 SX Microprocessor is 
able to execute either 16 or 32-bit instructions. This 
is specified through the use of override prefixes. 
Two prefixes, the Operand Length Prefix and the 
Address Length Prefix, override the value of the D 


bit on an individual instruction basis. These prefixes 
are automatically added by assemblers. 


The Operand Length and Address Length Prefixes 
can be applied separately or in combination to any 
instruction. The Address Length Prefix does not al- 
low addresses over 64K bytes to be accessed in 
Real Mode. A memory address which exceeds 
OFFFFH will result in a General Protection Fault. An 
Address Length Prefix only allows the use of the ad- 
ditional Intel3886 SX Microprocessor addressing 
modes. 


When executing 32-bit code, the Intel386 SX Micro- 
processor uses either 8 or 32-bit displacements, and 
any register can be used as base or index registers. 
When executing 16-bit code, the displacements are 
either 8 or 16-bits, and the base and index register 
conform to the 80286 model. Table 2.4 illustrates 
the differences. 
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Table 2.4. BASE and INDEX Registers for 16- and 32-Bit Addresses 


16-Bit Addressing 32-Bit Addressing 


BASE REGISTER BX,BP 
INDEX REGISTER SI,DI 


SCALE FACTOR 
DISPLACEMENT 


None 


0, 8, 16-bits 


Any 32-bit GP Register 
Any 32-bit GP Register 


Except ESP 
1,2,4,8 
0, 8, 32-bits 


2.5 Data Types 


The Intel386 SX Microprocessor supports all of the 
data types commonly used in high level languages: 


Bit: A single bit quantity. 


Bit Field: A group of up to 32 contiguous bits, which 
spans a maximum of four bytes. 


Bit String: A set of contiguous bits; on the Intel386 
SX Microprocessor, bit strings can be up to 4 giga- 
bits long. 

Byte: A signed 8-bit quantity. 

Unsigned Byte: An unsigned 8-bit quantity. 
Integer (Word): A signed 16-bit quantity. 

Long Integer (Double Word): A signed 32-bit quan- 
tity. All operations assume a 2’s complement repre- 


sentation. 


Unsigned Integer (Worcl): An unsigned 16-bit 
quantity. 


Unsigned Long Integer (Double Word): An un- 
signed 32-bit quantity. 


Signed Quad Word: A sigried 64-bit quantity. 
Unsigned Quad Word: An unsigned 64-bit quantity. 


Pointer: A 16 or 32-bit offset-only quantity which in- 
directly references another memory location. 


Long Pointer: A full pointer which consists of a 16- 
bit segment selector and either a 16 or 32-bit offset. 


- Char: A byte representation of an ASCII Alphanu- 
meric or control character. 


String: A contiguous sequence of bytes, words or 


dwords. A string may contain between 1 byte and 4 
gigabytes. 


1-328 


BCD: A byte (unpacked) representation of decimal 
digits 0-9. 


Packed BCD: A byte (packed) representation of two 
decimal digits 0-9 storing one digit in each nibble. 


When the Intel886 SX Microprocessor is coupled 
with its numerics coprocessor, the Intel387 SX, then 
the following common floating point types are sup- 
ported: 


Floating Point: A signed 32, 64, or 80-bit real num- 
ber representation. Floating point numbers are sup- 
ported by the Intel387 SX numerics coprocessor. 


Figure 2.5 illustrates the data types supported by the 
Intel386 SX Microprocessor and the Intel387 SX. 


2.6 1/O Space 


The Intel886 SX Microprocessor has two distinct 
physical address spaces: physical memory and |/O. 
Generally, peripherals are placed in I/O space al- 
though the Intel3886 SX Microprocessor also sup- 
ports memory-mapped peripherals. The |/O space 
consists of 64K bytes which can be divided into 64K 
8-bit ports or 32K 16-bit ports, or any combination of 
ports which add up to no more than 64K bytes. The 
64K |/O address space refers to physical addresses 
rather than linear addresses since I/O instructions 
do not go through the segmentation or paging hard- 
ware. The M/IO# pin acts as an additional address 
line, thus allowing the system designer to easily de- 
termine which address space the processor is ac- 
cessing. 


The I/O ports are accessed by the IN and OUT in- 
structions, with the port address supplied as an im- 
mediate 8-bit constant in the instruction or in the DX 
register. All 8-bit and 16-bit port addresses are zero 
extended on the upper address lines. The !/O in- 
structions cause the M/lIO# pin to be driven LOW. 
|/O port addresses OOF8H through OOFFH are re- 
served for use by Intel. 
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Yi 0 
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Figure 2.5. Intel386™ SX Microprocessor Supported Data Types 
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2.7 Interrupts and Exceptions 


Interrupts and exceptions alter the normal program 
flow in order to handle external events, report errors 
or exceptional conditions. The difference between 
interrupts and exceptions is that interrupts are used 
to handle asynchronous external events while ex- 
ceptions handle instruction faults. Although a pro- 
gram can generate a software interrupt via an INT N 
instruction, the processor treats software interrupts 
as exceptions. 


Hardware interrupts occur as the result of an exter- 


nal event and are classifiecl into two types: maskable 


or non-maskable. Interrupts are serviced after the 
execution of the current instruction. After the inter- 
rupt handler is finished servicing the interrupt, exe- 
cution proceeds with the instruction immediately 
after the interrupted instruction. 


intel. 


Exceptions are classified as faults, traps, or aborts, 
depending on the way they are reported and wheth- 
er or not restart of the instruction causing the excep- 
tion is supported. Faults are exceptions that are de- 
tected and serviced before the execution of the 
faulting instruction. Traps are exceptions that are 
reported immediately after the execution of the in- 
struction which caused the problem. Aborts are ex- 
ceptions which do not permit the precise location of 
the instruction causing the exception to be deter- 
mined. 


Thus, when an interrupt service routine has been 
completed, execution proceeds from the instruction 
immediately following the interrupted instruction. On 
the other hand, the return address from an excep- 
tion fault routine will always point to the instruction 
causing the exception and will include any leading 
instruction prefixes. Table 2.5 summarizes the possi- 
ble interrupts for the Intel886 SX Microprocessor 
and shows where the return address points to. 


Table 2.5. Interrupt Vector Assignments 


interrupt 


Function Number 


Divide Error 


Return Address 


Instruction Which Points to 


Can Cause Faulting 
Exception Instruction 


Type 


[o fowovSS~SCt sd 
[2 [intaornms SSN 
INT 


TRAP 
TRAP 

FAULT 
FAULT 
FAULT 


Debug Exception 
NMI Interrupt 

One Byte Interrupt 
INTO 

BOUND 

Any illegal instruction 
7 ESC, WAIT 


Any instruction that can 
generate an exception 


ESC 
JMP, CALL, IRET, INT 
Segment Register Instructions 


Interrupt on Overflow 
Array Bounds Check 
Invalid OP-Code 

Device Not Available 


Double Fault ABORT 


ABORT 
FAULT 
FAULT 
FAULT 
FAULT 
FAULT 
FAULT 


Coprocessor Segment Overrun 
Invalid TSS 10 
Segment Not Present 11 
Stack Fault 12 
General Protection Fault 13 
Page Fault 14 
Coprocessor Error 


Stack References 

Any Memory Reference 

Any Memory Access or Code Fetch 
ESC, WAIT 


Intel Reserved 17-32 


ee al 
ao | 
ae” 
PMA 
rete eee 


Two Byte Interrupt INT n 
*Some debug exceptions may report both traps on the previous instruction and faults on the next instruction. 


TRAP 
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The Intel386 SX Microprocessor has the ability to 
handle up to 256 different interrupts/exceptions. In 
order to service the interrupts, a table with up to 256 
interrupt vectors must be defined. The interrupt vec- 
tors are simply pointers to the appropriate interrupt 
service routine. In Real Mode, the vectors are 4-byte 
quantities, a Code Segment plus a 16-bit offset; in 
Protected Mode, the interrupt vectors are 8 byte 
quantities, which are put in an Interrupt Descriptor 
Table. Of the 256 possible interrupts, 32 are re- 
served for use by Intel and the remaining 224 are 
free to be used by the system designer. 


INTERRUPT PROCESSING 


When an interrupt occurs, the following actions hap- 
pen. First, the current program address and Flags 
are saved on the stack to allow resumption of the 
interrupted program. Next, an 8-bit vector is supplied 
to the Intel386 SX Microprocessor which identifies 
the appropriate entry in the interrupt table. The table 
contains the starting address of the interrupt service 
routine. Then, the user supplied interrupt service 
routine is executed. Finally, when an IRET instruc- 
tion is executed the old processor state is restored 
and program execution resumes at the appropriate 
instruction. 


The 8-bit interrupt vector is supplied to the Intel386 
SX Microprocessor in several different ways: excep- 
tions supply the interrupt vector internally; software 
INT instructions contain or imply the vector; maska- 
ble hardware interrupts supply the 8-bit vector via 
the interrupt acknowledge bus sequence. Non- 
Maskable hardware interrupts are assigned to inter- 
rupt vector 2. 


Maskable Interrupt 


Maskable interrupts are the most common way to 
respond to asynchronous external hardware events. 
A hardware interrupt occurs when the INTR is pulled 
HIGH and the Interrupt Flag bit (IF) is enabled. The 
processor only responds to interrupts between in- 
structions (string instructions have an ‘interrupt win- 
dow‘ between memory moves which allows inter- 
rupts during long string moves). When an interrupt 
occurs the processor reads an 8-bit vector supplied 
by the hardware which identifies the source of the 
interrupt (one of 224 user defined interrupts). 
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Interrupts through interrupt gates automatically reset 
IF, disabling INTR requests. Interrupts through Trap 
Gates leave the state of the IF bit unchanged. Inter- 
rupts through a Task Gate change the IF bit accord- 
ing to the image of the EFLAGs register in the task’s 
Task State Segment (TSS). When an IRET instruc- 
tion is executed, the original state of the IF bit is 
restored. 


Non-Maskable Interrupt 


Non-maskable interrupts provide a method of servic- 
ing very high priority interrupts. When the NMI input 
is pulled HIGH it causes an interrupt with an internal- 
ly supplied vector value of 2. Unlike a normal hard- 
ware interrupt, no interrupt acknowledgment se- 
quence is performed for an NMI. 


While executing the NMI servicing procedure, the In- 
tel386 SX Microprocessor will not service any further 
NMI request or INT requests until an interrupt return 
(IRET) instruction is executed or the processor is 
reset. If NMI occurs while currently servicing an NMI, 
its presence will be saved for servicing after execut- 
ing the first IRET instruction. The IF bit is cleared at 
the beginning of an NMI interrupt to inhibit further 


INTR interrupts. 


Software Interrupts 


A third type of interrupt/exception for the Intel386 
SX Microprocessor is the software interrupt. An INT 
n instruction causes the processor to execute the 
interrupt service routine pointed to by the nth vector 
in the interrupt table. 


A special case of the two byte software interrupt INT 
nis the one byte INT 3, or breakpoint interrupt. By 
inserting this one byte instruction in a program, the 
user can set breakpoints in his program as a debug- 
ging tool. 


A final type of software interrupt is the single step 
interrupt. It is discussed in Single Step Trap. 
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INTERRUPT AND EXCEPTION PRIORITIES 


Interrupts are externally generated events. Maska- 
ble Interrupts (on the INTR input) and Non-Maskable 
Interrupts (on the NMI input) are recognized at in- 
struction boundaries. When NMI and maskable 
INTR are both recognized at the same instruction 
boundary, the Intel386 SX Microprocessor invokes 
the NMI service routine first. If maskable interrupts 
are still enabled after the NMI service routine has 
been invoked, then the Intel386 SX Microprocessor 


& 

intel. 
peated as each instruction is executed, and occurs 
in parallel with instruction decoding and execution. 


INSTRUCTION RESTART 


The Intel386 SX Microprocessor fully supports re- 
starting all instructions after Faults. If an exception is 
detected in the instruction to be executed (exception 
categories 4 through 10 in Table 2.6), the Intel386 
SX Microprocessor invokes the appropriate excep- 
tion service routine. The Intel386 SX Microprocessor 


will invoke the appropriate interrupt service routine. is in a state that permits restart of the instruction, for 


all cases but those given in Table 2.7. Note that all 
such cases will be avoided by a properly designed 
operating system. 


As the Intel386 SX Microprocessor executes instruc- 
tions, it follows a consistent cycle in checking for 
exceptions, as shown in Table 2.6. This cycle is re- 


Table 2.6. Sequence of Exception Checking 
Consider the case of the Intel386 SX Microprocessor having just completed an instruction. It then performs 
the following checks before reaching the point where the next instruction is completed: 


. Check for Exception 1 Traps from the instruction just completed (single-step via Trap Flag, or Data 
Breakpoints set in the Debug Registers). 


. Check for external NMI and INTR. 


. Check for Exception 1 Faults in the next instruction (Instruction Execution Breakpoint set in the Debug 
Registers for the next instruction). 


. Check for Segmentation Faults that prevented fetching the entire next instruction (exceptions 11 or 13). 
. Check for Page Faults that prevented fetching the entire next instruction (exception 14). 


. Check for Faults decoding the next instruction (exception 6 if illegal opcode; exception 6 if in Real Mode 


or in Virtual 8086 Mode and attempting to execute an instruction for Protected Mode only; or exception 
13 if instruction is longer than 15 bytes, or privilege violation in Protected Mode (i.e. not at IOPL or at 
CPL=0). 


. If WAIT opcode, check if TS=1 and MP=1 (exception 7 if both are 1). 
. lf ESCape opcode for numeric coprocessor, check if EM=1 or TS=1 (exception 7 if either are 1). 


. lf WAIT opcode or ESCape opcode for numeric coprocessor, check ERROR # input signal (exception 16 
if ERROR # input is asserted). 


10. Check in the following order for each memory reference required by the instruction: 


a. Check for Segmentation Faults that prevent transferring the entire memory quantity (exceptions 11, 
12. 13). 


b. Check for Page Faults that prevent transferring the entire memory quantity (exception 14). 


NOTE: 
Segmentation exceptions are yenerated before paging exceptions. 


Table 2.7. Conditions Preventing Instruction Restart 


1. An instruction causes a task switch to a task whose Task State Segment is partially ‘not present‘ (An 
entirely ‘not present’ TSS is restartable). Partially present TSS’s can be avoided either by keeping the 
TSS’s of such tasks present in memory, or by aligning TSS segments to reside entirely within a single 4K 
page (for TSS segments of 4K bytes or less). 


. A coprocessor operand wraps around the top of a 64K-byte segment or a 4G-byte segment, and spans 
three pages, and the piage holding the middle portion of the operand is ‘not present‘. This condition can 
be avoided by starting at a page boundary any segments containing coprocessor operands if the 
segments are approxirnately 64K-200 bytes or larger (i.e. large enough for wraparound of the coproces- 
sor operand to possibly occur). 


~ Note that these conditions are: avoided by using the operating system designs mentioned in this table. 
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Table 2.8. Register Values after Reset 


Flag Word (EFLAGS) 
Machine Status Word (CRO) 
Instruction Pointer (EIP) 
Code Segment (CS) 

Data Segment (DS) 

Stack Segment (SS) 


Extra Segment (ES) 
Extra Segment (FS) 
Extra Segment (GS) 
EAX register 

EDX register 

All other registers 


NOTES: 


uuuu0002H 
uuuuuU 10H 
OOOOFFFOH 
FOOOH 
OO00H 
OOOOH 
OOOOH 
0O00H 
OO00H 
OO00H 


component and stepping ID 


undefined 


1. EFLAG Register. The upper 14 bits of the EFLAGS register are undefined, all defined flag bits are zero. 
2. The Code Segment Register (CS) will have its Base Address set to OFFFFOOOOH and Limit set to OFFFFH. 
3. The Data and Extra Segment Registers (DS, ES) will have their Base Address set to OOO000000H and Limit set to 


OFFFFH. 


4. If self-test is selected, the EAX register should contain a 0 value. If a value of 0 is not found then the self-test has 


detected a flaw in the part. 


5. EDX register always holds component and stepping identifier. 
6. All undefined bits are Intel Reserved and should not be used. 


DOUBLE FAULT 


A Double Fault (exception 8) results when the proc- 
essor attempts to invoke an exception service rou- 
tine for the segment exceptions (10, 11, 12 or 13), 
but in the process of doing so detects an exception 
other than a Page Fault (exception 14). 


One other cause of generating a Double Fault is the 
Intel386 SX Microprocessor detecting any other ex- 
ception when it is attempting to invoke the Page 
Fault (exception 14) service routine (for example, if a 
Page Fault is detected when the Intel386 SX Micro- 
processor attempts to invoke the Page Fault service 
routine). Of course, in any functional system, not 
only in Intel386 SX Microprocessor-based systems, 
the entire page fault service routine must remain 
‘present’ in memory. 


2.8 Reset and Initialization 


When the processor is initialized or Reset the regis- 
ters have the values shown in Table 2.8. The In- 
tel386 SX Microprocessor will then start executing 
instructions near the top of physical memory, at lo- 
cation OFFFFFOH. When the first Intersegment 
Jump or Call is executed, address lines Azg—Ag3 will 
drop LOW for CS-relative memory cycles, and the 
Intel386 SX Microprocessor will only execute in- 
structions in the lower one megabyte of physical 
memory. This allows the system designer to use a 
shadow ROM at the top of. physical memory to ini- 
tialize the system and take care of Resets. 


RESET forces the Intel886 SX Microprocessor to 
terminate all execution and local bus activity. No in- 
struction execution or bus activity will occur as long 
as Reset is active. Between 350 and 450 CLK2 peri- » 
ods after Reset becomes inactive, the Intel386 SX 
Microprocessor will start executing instructions at 
the top of physical memory. 


2.9 Testability 


The Intel386 SX Microprocessor, like the Intel386 
Microprocessor, offers testability features which in- 
clude a self-test and direct access to the page trans- 
lation cache. 


SELF-TEST 


The Intel886 SX Microprocessor has the capability 
to perform a self-test. The self-test checks the func- 
tion of all of the Control ROM and most of the non- 
random logic of the part. Approximately one-half of 
the Intel886 SX Microprocessor can be tested during 
self-test. 


Self-Test is initiated on the Intel386 SX Microproces- 
sor when the RESET pin transitions from HIGH to 
LOW, and the BUSY# pin is LOW. The self-test 
takes about 220 clocks, or approximately 33 millisec- 
onds with a 16 MHz Intel3886 SX CPU. At the com- 
pletion of self-test the processor performs reset and 
begins normal operation. The part has successfully 
passed self-test if the contents of the EAX are zero. 
If the results of the EAX are not zero then the self- 
test has detected a flaw in the part. 
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TLB TESTING 


The Intel386 SX Microprocessor also provides a 
mechanism for testing the Translation Lookaside 
Buffer (TLB) if desired. This particular mechanism 
may not be continued in the same way in future 
processors. 


There are two TLB testing operations: 1) writing en- 
tries into the TLB, and, 2) performing TLB lookups. 
Two Test Registers, shown in Figure 2.6, are provid- 
ed for the purpose of testing. TR6 is the “‘test com- 
mand register’, and TR7 is the ‘test data register”. 
For a more detailed explanation of testing the TLB, 
see the Intel886™ SX Microprocessor Program- 
mer’s Reference Manual. 


2.10 Debugging Support 


The Intel386 SX Microprocessor provides several 
features which simplify the debugging process. The 
three categories of on-chij) debugging aids are: 


1. The code execution breakpoint opcode (OCCH). 


2. The single-step capability provided by the TF bit 
in the flag register. 


3. The code and data breakpoint capability provided 
by the Debug Registers DRO-3, DR6, and DR7. 


BREAKPOINT INSTRUCTION 


A single-byte software interrupt (Int 3) breakpoint in- 
struction is available for use by software debuggers. 


COMMAND 
WRITABLE 
USER 
DIRTY 
VALID 


| LINEAR ADDRESS _ 


31 


— INTEL RESERVED DO NOT USE: 


intel. 
The breakpoint opcode is OCCh, and generates an 
exception 3 trap when executed. 


SINGLE-STEP TRAP 


If the single-step flag (TF, bit 8) in the EFLAG regis- 
ter is found to be set at the end of an instruction, a 
single-step exception occurs. The single-step ex- 
ception is auto vectored to exception number 1. 


DEBUG REGISTERS 


The Debug Registers are an advanced debugging 
feature of the Intel386 SX Microprocessor. They al- 
low data access breakpoints as well as code execu- 
tion breakpoints. Since the breakpoints are indicated 
by on-chip registers, an instruction execution break- 
point can be placed in ROM code or in code shared 
by several tasks, neither of which can be supported 
by the INT 3 breakpoint opcode. 


The Intel386 SX Microprocessor contains six Debug 
Registers, consisting of four breakpoint address reg- 
isters and two breakpoint control registers. Initially 
after reset, breakpoints are in the disabled state; 
therefore, no breakpoints will occur unless the de- 
bug registers are programmed. Breakpoints set up in 
the Debug Registers are auto-vectored to exception 
1. Figure 2.7 shows the breakpoint status and con- 
trol registers. 


TEST 
CONTROL 


PEELE} 


2 VAIO “2s 


TEST 
STATUS 
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Figure 2.6. Test Registers 
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Figure 2.7. Debug Registers 


3.0 REAL MODE ARCHITECTURE 


When the processor is reset or powered up it is ini- 
tialized in Real Mode. Real Mode has the same base 
architecture as the 8086, but allows access to the 
32-bit register set of the Intel386 SX Microproces- 
sor. The addressing mechanism, memory size, and 
interrupt handling are all identical to the Real Mode 
on the 80286. 


The default operand size in Real Mode is 16 bits, as 
in the 8086. In order to use the 32-bit registers and 
addressing modes, override prefixes must be used. 
In addition, the segment size on the Intel386 SX Mi- 
croprocessor in Real Mode is 64K bytes so 32-bit 
addresses must have a value less then OOOOFFFFH. 
The primary purpose of Real Mode is to set up the 
processor for Protected Mode operation. 


3.1 Memory Addressing 


In Real Mode the linear addresses are the same as 
physical addresses (paging is not allowed). Physical 
addresses are formed in Real Mode by adding the 
contents of the appropriate segment register which 
is shifted left by four bits to an effective address. 
This addition results in a 20-bit physical address or a 
1 megabyte address space. Since segment registers 
are shifted left by 4 bits, Real Mode segments al- 
ways start on 16-byte boundaries. 


All segments in Real Mode are exactly 64K bytes 
long, and may be read, written, or executed. The 
Intel386 SX Microprocessor will generate an excep- 
tion 13 if a data operand or instruction fetch occurs 
past the end of a segment. 
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Table 3.1. Exceptions in Real Mode 


Function 


Interrupt table limit 
too small 
CS, DS, ES, FS, GS 
Segment overrun exception 


SS Segment overrun 
exception 


eats 


There are two fixed areas in memory which are re- 
served in Real address mode: the system initializa- 
tion area and the interrupt table area. Locations 
OOO00H through OO3FFH are reserved for interrupt 
vectors. Each one of the 256 possible interrupts has 
a 4-byte jump vector reserved for it. Locations 
OFFFFFOH through OFFFF-FFH are reserved for sys- 
tem initialization. 


3.2 Reserved Locations 


3.3 Interrupts 


Many of the exceptions discussed in section 2.7 are 
not applicable to Real Mode operation; in particular, 
exceptions 10, 11 and 14 do not occur in Real 
Mode. Other exceptions have slightly different 
meanings in Real Mode; Table 3.1 identifies these 
exceptions. 


3.4 Shutdown and Halt 


The HLT instruction stops program execution and 
prevents the processor from using the local bus until 
restarted. Either NMI, FlT#, INTR with interrupts 
enabled (IF = 1), or RESET will force the Intel386 SX 
Microprocessor out of halt. If interrupted, the saved 
CS:IP will point to the next instruction after the HLT. 


Shutdown will occur when a severe error is detected 
that prevents further processing. In Real Mode, 
shutdown can occur under two conditions: 


1. An interrupt or an exception occurs (Exceptions 8 
or 13) and the interrupt vector is larger than the 
Interrupt Descriptor Table. 


2.A CALL, INT or PUSH instruction attempts to 
wrap around the stack segment when SP is not 
even. 


An NMI input can bring the processor out of shut- 


down if the Interrupt Descriptor Table limit is large 
enough to contain the NMI interrupt vector (at least 
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Interrupt Related Return 
Number Instructions Address Location 
INT vector is not Before 
within table limit Instruction 


Word memory reference 
with offset = OFFFFH. 

an attempt to execute 

past the end of CS segment. 


Stack Reference 
beyond offset = OFFFFH 


Before 
Instruction 


Before 
Instruction 
OOOFH) and the stack has enough room to contain 
the vector and flag information (i.e. SP is greater that 


0005H). Otherwise, shutdown can only be exited by 
a processor reset. 


3.5 LOCK Operation 
The LOCK prefix on the Intel386 SX Microprocessor, 


~ even in Real Mode, is more restrictive than on the 


80286. This is due to the addition of paging on the 
Intel386 SX Microprocessor in Protected Mode and 
Virtual 8086 Mode. The LOCK prefix is not support- 
ed during repeat string instructions. 


The only instruction forms where the LOCK prefix is 
legal on the Intel386 SX Microprocessor are shown 
in Table 3.2. 


Table 3.2. Legal Instructions for the LOCK Prefix 


Operands. 


BIT Test and 
SET/RESET 
/COMPLEMENT 


ADD, OR, ADC, SBB, | 
Mem, Reg/Immediate 


AND, SUB, XOR 


An exception 6 will be generated if a LOCK prefix is 
placed before any instruction form or opcode not 
listed above. The LOCK prefix allows indivisible 
read/modify/write operations on memory operands 
using the instructions above. 


Mem, Reg/Immediate 


The LOCK prefix is not IOPL-sensitive on the 
Intel386 SX Microprocessor. The LOCK prefix can 
be used at any privilege level, but only on the in- 
struction forms listed in Table 3.2. 


intel. 
4.0 PROTECTED MODE 
ARCHITECTURE 


The complete capabilities of the Intel386 SX Micro- 
processor are unlocked when the processor oper- 
ates in Protected Virtual Address Mode (Protected 
Mode). Protected Mode vastly increases the linear 
address space to four gigabytes (232 bytes) and al- 
lows the running of virtual memory programs of al- 
most unlimited size (64 terabytes (246 bytes)). In ad- 
dition, Protected Mode allows the Intel386 SX Micro- 
processor to run all of the existing Intel386 DX CPU 
(using only 16 megabytes of physical memory), 
80286 and 8086 CPU’s software, while providing a 
sophisticated memory management and a hard- 
ware-assisted protection mechanism. Protected 
Mode allows the use of additional instructions spe- 
cially optimized for supporting multitasking operating 
systems. The base architecture of the Intel386 SX 
Microprocessor remains the same; the registers, in- 
structions, and addressing modes described in the 
previous sections are retained. The main difference 
between Protected Mode and Real Mode from a 
programmer’s viewpoint is the increased address 
space and a different addressing mechanism. 


4.1 Addressing Mechanism 


‘Like Real Mode, Protected Mode uses two compo- 
nents to form the logical address; a 16-bit selector is 
used to determine the linear base address of a seg- 
ment, the base address is added to a 32-bit effective 
address to form a 32-bit linear address. The linear 
address is then either used as a 24-bit physical ad- 
dress, or if paging is enabled the paging mechanism 
maps the 32-bit linear address into a 24-bit physical 
address. 


The difference between the two modes lies in calcu- 
lating the base address. In Protected Mode, the se- 
lector is used to specify an index into an operating 
system defined table (see Figure 4.1). The table 
contains the 32-bit base address of a given seg- 
ment. The physical address is formed by adding the 
base address obtained from the table to the offset. 


Paging provides an additional memory management 
mechanism which operates only in Protected Mode. 
Paging provides a means of managing the very large 
segments of the Intel386 SX Microprocessor, as 
paging operates beneath segmentation. The page 
mechanism translates the protected linear address 
which comes from the segmentation unit into a 
physical address. Figure 4.2 shows the complete In- 
tel386 SX Microprocessor addressing mechanism 
with paging enabled. 
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4.2 Segmentation 


Segmentation is one method of memory manage- 
ment. Segmentation provides the basis for protec- 
tion. Segments are used to encapsulate regions of 
memory which have common attributes. For exam- 
ple, all of the code of a given program could be con- 
tained in a segment, or an operating system table 
may reside in a segment. All information about each 
segment is stored in an 8 byte data structure called 
a descriptor. All of the descriptors in a system are 
contained in descriptor tables which are recognized 
by hardware. 


TERMINOLOGY 


The following terms are used throughout the discus- 
sion of descriptors, privilege levels and protection: 


PL: Privilege Level—One of the four hierarchical 
privilege levels. Level 0 is the most privileged 
level and level 3 is the least privileged. 


RPL: Requestor Privilege Level—The privilege level! 
of the original supplier of the selector. RPL is 
determined by the least two significant bits of 
a selector. 


DPL: Descriptor Privilege Level—This is the least 
privileged level at which a task may access 
that descriptor (and the segment associated 
with that descriptor). Descriptor Privilege Lev- 
el is determined by bits 6:5 in the Access 
Right Byte of a descriptor. 


CPL: Current Privilege Level—The privilege level at 
which a task is currently executing, which 
equals the privilege level of the code segment 
being executed. CPL can also be determined 
by examining the lowest 2 bits of the CS regis- 
ter, except for conforming code segments. 


EPL: Effective Privilege Level—The effective privi- 
lege level is the least privileged of the RPL 
and the DPL. EPL is the numerical maximum 
of RPL and DPL. 


Task: One instance of the execution of a program. 
Tasks are also referred to as processes. 


DESCRIPTOR TABLES 


The descriptor tables define all of the segments 
which are used in a Intel386 SX Microprocessor sys- 
tem. There are three types of tables which hold de- 
scriptors: the Global Descriptor Table, Local De- 
scriptor Table, and the Interrupt Descriptor Table. All 
of the tables are variable length memory arrays and 
can vary in size from 8 bytes to 64K bytes. Each 
table can hold up to 8192 8-byte descriptors. The 
upper 13 bits of a selector are used as an index into 
the descriptor table. The tables have registers asso- 
ciated with them which hold the 32-bit linear base 
address and the 16-bit limit of each table. 
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Figure 4.1. Protected Mode Addressing 
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Figure 4.2. Paging and Segmentation 
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Figure 4.3. Descriptor Table Registers 
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Each of the tables has a register associated with it: 
GDTR, LDTR, and IDTR; see Figure 2.1. The LGDT, 
LLDT, and LIDT instructions load the base and limit 
of the Global, Local, and Interrupt Descriptor Tables 
into the appropriate register. The SGDT, SLDT, and 


SIDT store the base and limit values. These are priv- 
ileged instructions. 


Global Descriptor Table 


The Global Descriptor Table (GDT) contains de- 
scriptors which are available to all of the tasks in a 
system. The GDT can contain any type of segment 
descriptor except for interrupt and trap descriptors. 
Every Intel386 SX CPU system contains a GDT. 


The first slot of the Global Descriptor Table corre- 
sponds to the null selector and is not used. The null 
selector defines a null pointer value. 


Local Descriptor Table 


LDTs contain descriptors which are associated with 
a given task. Generally, operating systems are de- 
signed so that each task has a separate LDT. The 
LDT may contain only code, data, stack, task gate, 
and call gate descriptors. LDTs provide a mecha- 
nism for isolating a given task’s code and data seg- 
ments from the rest of the operating system, while 
the GDT contains descriptors for segments which 
are common to all tasks. A segment cannot be ac- 
cessed by a task if its segment descriptor does not 
exist in either the current LDT or the GDT. This pro- 
vides both isolation and protection for a task’s seg- 
ments while still allowing global data to be shared 
among tasks. 


SEGMENT BASE 15. 


Base Address of the segment 

The length of the segment 

Present Bit 1=Present O=Not Present 
Descriptor Privilege Level 0-3 


Intel386™ SX MICROPROCESSOR 


Unlike the 6-byte GDT or IDT registers which contain 
a base address and limit, the visible portion of the 
LDT register contains only a 16-bit selector. This se- 
lector refers to a Local Descriptor Table descriptor in 
the GDT (see figure 2.1). 


Interrupt Descriptor Table 


The third table needed for Intel386 SX Microproces- 
sor systems is the Interrupt Descriptor Table. The 
IDT contains the descriptors which point to the loca- 
tion of the up to 256 interrupt service routines. The 
IDT may contain only task gates, interrupt gates, and 
trap gates. The IDT should be at least 256 bytes in 
size in order to hold the descriptors for the 32 Intel 
Reserved Interrupts. Every interrupt used by a sys- 
tem must have an entry in the IDT. The IDT entries 
are referenced by INT instructions, external interrupt 
vectors, and exceptions. 


DESCRIPTORS 


The object to which the segment selector points to 
is called a descriptor. Descriptors are eight byte 
quantities which contain attributes about a given re- 
gion of linear address space. These attributes in- 
clude the 32-bit base linear address of the segment, 
the 20-bit length and granularity of the segment, the 
protection level, read, write or execute privileges, 
the default size of the operands (16-bit or 32-bit), 
and the type of segment. All of the attribute informa- 
tion about a segment is contained in 12 bits in the 
segment descriptor. Figure 4.4 shows the general 
format of a descriptor. All segments on the Intel386 
SX Microprocessor have three attribute fields in 
common: the P bit, the DPL bit, and the S bit. The P 


BYTE 
ADDRESS 


0 


SEGMENT LIMIT 15. 


Segment Descriptor O=System Descriptor 1=Code or Data Segment Descriptor 


Type of Segment 
Accessed Bit 
Granularity Bit 1=Segment length is page granular 


0= Segment length is byte granular 


Default Operation Size (recognized in code segment descriptors only) 1=32-bit segment O= 16-bit segment 


Bit must be zero (0) for iy aaa with future processors 


Available field for user or OS 


Figure 4.4. Segment Descriptors 
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(Present) Bit is 1 if the segment is loaded in physical 
memory. If P=0 then any attempt to access this 
segment causes a not present exception (exception 
11). The Descriptor Privilege Level, DPL, is a two bit 
field which specifies the protection level, 0-3, asso- 
ciated with a segment. 


The Intel386 SX Microprocessor has two main cate- 
gories of segments: system segments and non-sys- 
tem segments (for code and data). The segment bit, 
S, determines if a given segment is a system seg- 


SEGMENT BASE 15...0 


BASE 31... 24 D 


D/B 1=Default Instructions Attributes are 32-Bits 
0 = Default Instruction Attributes are 16-Bits 
AVL Available field for user or OS 


intel. 


ment or a code or data segment. If the S bit is 1 then 
the segment is either a code or data segment; if it is 
0 then the segment is a system segment. 


Code and Data Descriptors (S= 1) 


Figure 4.5 shows the general format of a code and 
data descriptor and Table 4.1 illustrates how the bits 
in the Access Right Byte are interpreted. 


SEGMENT LIMIT 15...0 
ACCESS 


RIGHTS 
BYTE 


G Granularity Bit 1=Segment length is page granular 
0= Segment length is byte granular 


0 Bit must be zero (0) for compatibility with future processors 


Figure 4.5. Code and Data Descriptors 


Table 4.1. Access Rights Byte Definition for Code and Data Descriptors 


Bit 
Position 
Present (P) P= 1 


Descriptor Privilege 
Level (DPL) 
Segment Descrip- 
tor (S) 


Executable (E) 
Expansion Direc- 
tion (ED) 
Writeable (W) 


mmmMmnawn 


D 
D 


Executable (E) 
Conforming (C) 


om|ss 


Readable (IR) 


Accessed (A) 
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= 0 Data segment may not be written into. 
= 1 Data segment may be written into. 


Segment is mapped into physical memory. 

P =0Q Nomapping to physical memory exists, base and limt are 
not used. 

Segment privilege attribute used in privilege tests. 


1 Code or Data (includes stacks) segment descriptor 
O System Segment Descriptor or Gate Descriptor 
0 


Descriptor type is data segment: if 
0 Expand up segment, offsets must be < limit. Data 
= 1 Expand down segment, offsets must be > limit. 


Segment 
(S =. 1, 
E = 0) 


Descriptor type is code segment: If 
Code segment may only be executed 
when CPL = DPL and CPL 

remains unchanged. 

Code segment may not be read. 
Code segment may be read. 


Code 
Segment 
(S = 1, 
E = 1) 


Segment has not been accessed. 
Segment selector has been loaded into segment register 
or used by selector test instructions. 
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SEGMENT BASE 15. SEGMENT LIMIT 15. 


=a COC Reto ESC NC ome 


Defines 


Invalid 
Available 80286 TSS 


LDT 

Busy 80286 TSS 

80286 Call Gate 

Task Gate (for 80286 or Intel386™ SX 
Microprocessor Task) 

80286 Interrupt Gate 

80286 Trap Gate 


Defines 


Invalid 

Available Intel386™ SX Microprocessor TSS 
Undefined (Intel Reserved) 

Busy Intel386™ SX Microprocessor TSS 
Intel386™ SX Microprocessor Call Gate 
Undefined (Intel Reserved) 

Intel386™ SX Microprocessor Interrupt Gate 
Intel386™ SX Microprocessor Trap Gate 


Figure 4.6. System Descriptors 


Code and data segments have several descriptor 
fields in common. The accessed bit, A, is set when- 
ever the processor accesses a descriptor. The gran- 
ularity bit, G, specifies if a segment length is byte- 
granular or page-granular. 


System Descriptor Formats (S=0) 


System segments describe information about oper- 
ating system tables, tasks, and gates. Figure 4.6 
shows the general format of system segment de- 
scriptors, and the various types of system segments. 
Intel386 SX system descriptors (which are the same 
as Intel386 DX CPU system descriptors) contain a 
32-bit base linear address and a 20-bit segment lim- 
it. 80286 system descriptors have a 24-bit base ad- 
dress and a 16-bit segment limit. 80286 system de- 
scriptors are identified by the upper 16 bits being all 
zero. 


Differences Between Intel386™ SX 
Microprocessor and 80286 Descriptors 


In order to provide operating system compatibility 
with the 80286 the Intel386 SX CPU supports all of 
the 80286 segment descriptors. The 80286 system 
segment descriptors contain a 24-bit base address 
and 16-bit limit, while the Intel886 SX CPU system 
segment descriptors have a 32-bit base address, a 
20-bit limit field, and a granularity bit. The word count 
field specifies the number of 16-bit quantities to copy 
for 80286 call gates and 32-bit quantities for 
Intel386 SX CPU call gates. 


Selector Fields 


A selector in Protected Mode has three fields: Local 
or Global Descriptor Table indicator (T1), Descriptor 
Entry Index (Index), and Requestor (the selector’s) 
Privilege Level (RPL) as shown in Figure 4.7. The TI 
bit selects either the Global Descriptor Table or the 
Local Descriptor Table. The Index selects one of 8k 
descriptors in the appropriate descriptor table. The 
RPL bits allow high speed testing of the selector’s 
privilege attributes. 


Segment Descriptor Cache 


In addition to the selector value, every segment reg- 
ister has a segment descriptor cache register asso- 
ciated with it. Whenever a segment register’s con- 
tents are changed, the 8-byte descriptor associated 
with that selector is automatically loaded (cached) 
on the chip. Once loaded, all references to that seg- 
ment use the cached descriptor information instead 
of reaccessing the descriptor. The contents of the 
descriptor cache are not visible to the programmer. 
Since descriptor caches only change when a seg- 
ment register is changed, programs which modify 
the descriptor tables must reload the appropriate 
segment registers after changing a descriptor’s val- 
ue. 
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DESCRIPTOR 
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Figure 4.7. Example Descriptor Selection 


4.3 Protection 


The Intel386 SX Microprocessor has four levels of 
protection which are optimized to support a multi- 
tasking operating system and to isolate and protect 
user programs from each other and the operating 
system. The privilege levels control the use of privi- 
leged instructions, |/O instructions, and access to 
segments and segment descriptors. The Intel386 SX 
Microprocessor also offers an additional type of pro- 
tection on a page basis when paging is enabled. 


The four-level hierarchical privilege system is an ex- 
tension of the user/supervisor privilege mode com- 
monly used by minicomputers. The user/supervisor 
mode is fully supported by the Intel386 SX Micro- 
processor paging mechanism. The privilege levels 
(PL) are numbered 0 through 3. Level 0 is the most 
privileged level. 


RULES OF PRIVILEGE 


The Intel386 SX Microprocessor controls access to 
both data and procedures between levels of a task, 
according to the following rules. 


— Data stored in a segment with privilege level p 
can be accessed only by code executing at a 
privilege level at least as privileged as p. 


— Acode segment/procedure with privilege level p 
can only be called by a task executing at the 
same or a lesser privilege level than p. 


1-342 


PRIVILEGE LEVELS 


At any point in time, a task on the Intel386 SX Micro- 
processor always executes at one of the four privi- 
lege levels. The Current Privilege Level (CPL) speci- 
fies what the task’s privilege level is. A task’s CPL 
may only be changed by control transfers through 
gate descriptors to a code segment with a different 
privilege level. Thus, an application program running 
at PL=3 may call an operating system routine at 
PL=1 (via a gate) which would cause the task’s CPL 
to be set to 1 until the operating system routine was 
finished. 


Selector Privilege (RPL) 


The privilege level of a selector is specified by the 
RPL field. The selector’s RPL is only used to estab- 
lish a less trusted privilege level than the current 
privilege level of the task for the use of a segment. 
This level is called the task’s effective privilege level 
(EPL). The EPL is defined as being the least privi- 
leged (numerically larger) level of a task’s CPL anda 
selector’s RPL. The RPL is most commonly used to 
verify that pointers passed to an operating system 
procedure do not access data that is of higher privi- 
lege than the procedure that originated the pointer. 
Since the originator of a selector can specify any 
RPL value, the Adjust RPL (ARPL) instruction is pro- 
vided to force the RPL bits to the originator’s CPL. 
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Table 4.2. Descriptor Types Used for Control Transfer 


Operation Types 


Descriptor 
Referenced 


Descriptor 
Table 


JMP, CALL RET, IRET* | Code Segment | GDT/LDT 


Intersegment to the same or higher privilege level 
Interrupt within task may change CPL 


CALL Call Gate GDT/LDT 


Interrupt instruction 
Exception External 
Interrupt 


Trap or 
Interrupt 
Gate. 


RET, |RET* Code Segment | GDT/LDT 


Task Switch 


*NT (Nested Task bit of flag register) 
**NT (Nested Task bit of flag register) 


0 
1 


1/O Privilege 


The I/O privilege level (IOPL) lets the operating sys- 
tem code executing at CPL=0 define the least privi- 
leged level at which I/O instructions can be used. An 
exception 13 (General Protection Violation) is gener- 
ated if an I/O instruction is attempted when the CPL 
of the task is less privileged then the IOPL. The 
lIOPL is stored in bits 13 and 14 of the EFLAGS reg- 
ister. The following instructions cause an exception 
13 if the CPL is greater than IOPL: IN, INS, OUT, 
OUTS, STI, CLI, LOCK prefix. 


Descriptor Access 


There are basically two types of segment accesses: 
those involving code segments such as control 
transfers, and those involving data accesses. Deter- 
mining the ability of a task to access a segment in- 
volves the type of segment to be accessed, the in- 
struction used, the type of descriptor used and CPL, 
RPL, and DPL as described above. 


Any time an instruction loads a data segment regis- 
ter (DS, ES, FS, GS) the Intel386 SX Microprocessor 
makes protection validation checks. Selectors load- 
ed in the DS, ES, FS, GS registers must refer only to 
data segment or readable code segments. 


DT 
CALL, JMP Task State GDT 
Segment 
DT 


CALL, JMP GDT/LDT 


[RET * 

Interrupt instruction, 
Exception, External 
Interrupt 


Finally the privilege validation checks are performed. 
The CPL is compared to the EPL and if the EPL is 
more privileged than the CPL, an exception 13 (gen- 
eral protection fault) is generated. 


The rules regarding the stack segment are slightly 
different than those involving data segments. In- 
structions that load selectors into SS must refer to 
data segment descriptors for writeable data seg- 
ments. The DPL and RPL must equal the CPL of all 
other descriptor types or a privilege level violation 
will cause an exception 13. A stack not present fault 
Causes an exception 12. 


PRIVILEGE LEVEL TRANSFERS 


Inter-segment control transfers occur when a selec- 
tor is loaded in the CS register. For a typical system 
most of these transfers are simply the result of a call 
or a jump to another routine. There are five types of 
control transfers which are summarized in Table 4.2. 
Many of these transfers result in a privilege level 
transfer. Changing privilege levels is done only by 
control transfers, using gates, task switches, and in- 
terrupt or trap gates. 


Control transfers can only occur if the operation 
which loaded the selector references the correct de- 
scriptor type. Any violation of these descriptor usage 
rules will cause an exception 13. 
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Figure 4.8. Intel386™ SX Microprocessor TSS and TSS Registers 
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|/O Ports Accessible: 2 — 9, 12, 13, 15, 20 — 24, 27, 33, 34, 40,.41, 48, 50, 52, 53, 58 —> 60, 62, 63, 96 — 127 


Figure 4.9. Sample !/O Permission Bit Map 


CALL GATES 


Gates provide protected indirect CALLs. One of the 
major uses of gates is to provide a secure method of 
privilege transfers within a task. Since the operating 
system defines all of the gates in a system, it can 
ensure that all gates only allow entry into a few trust- 
ed procedures. 


TASK SWITCHING 


A very important attribute of any multi-tasking/multi- 
user operating system is its ability to rapidly switch 
between tasks or processes. The Intel386 SX Micro- 
processor directly supports this operation by provid- 
ing a task switch instruction in hardware. The task 
switch operation saves the entire state of the ma- 
chine (all of the registers, address space, and a link 
to the previous task), loads a new execution state, 
performs protection checks, and commences execu- 
tion in the new task. Like transfer of control by 
gates, the task switch operation is invoked by exe- 
cuting an inter-segment JMP or CALL instruction 
which refers to a Task State Segment (TSS), or a 
task gate descriptor in the GDT or LDT. An INT n 
instruction, exception, trap, or external interrupt may 
also invoke the task switch operation if there is a 
task gate descriptor in the associated IDT descriptor 
slot. 


The TSS descriptor points to a segment (see Figure 
4.8) containing the entire execution state. A task 
gate descriptor contains a TSS selector. The 
Intel886 SX Microprocessor supports both the 
80286 and Intel386 SX CPU TSSs. The limit of a 
Intel386 SX Microprocessor TSS must be greater 
than 64H (2BH for an 80286 TSS), and can be as 
large as 16 megabytes. In the additional TSS space, 
the operating system is free to store additional infor- 
mation such as the reason the task is inactive, time 
the task has spent running, or open files belonging 
to the task. 


Each task must have a TSS associated with it. The 
current TSS is identified by a special register in the 
Intel386 SX Microprocessor called the Task State 
Segment Register (TR). This register contains a se- 
lector referring to the task state segment descriptor 
that defines the current TSS. A hidden'base and limit 
register associated with TSS descriptor are loaded 
whenever TR is loaded with a new selector. Return- 
ing from a task is accomplished by the IRET instruc- 
tion. When IRET is executed, control is returned to 


the task which was interrupted. The currently exe- 
cuting task’s state is saved in the TSS and the old 
task state is restored from its TSS. 


Several bits in the flag register and machine status 
word (CRO) give information about the state of a 
task which is useful to.the operating system. The 
Nested Task bit, NT, controls the function of the 
IRET instruction. lf NT=0 the IRET instruction per- 
forms the regular return. If NT=1 IRET performs a 
task switch operation back to the previous task. The 
NT bit is set or reset in the following fashion: 


When a CALL or INT instruction initiates a task 
switch, the new TSS will be marked busy and 
the back link field of the new TSS set to the old 
TSS selector. The NT bit of the new task is set 
by CALL or INT initiated task switches. An in- 
terrupt that does not cause a task switch will 
clear NT (The NT bit will be restored after exe- 
cution of the interrupt handler). NT may also be 
set or cleared by POPF or IRET instructions. 


The Intel386 SX Microprocessor task state segment 
is marked busy by changing the descriptor type field 
from TYPE 9 to TYPE OBH. An 80286 TSS is 
marked busy by changing the descriptor type field 


from TYPE 1 to TYPE 3. Use of a selector that refer- . 


ences a busy task state segment causes an excep- 
tion 13. 


The VM (Virtual Mode) bit is used to indicate if a task 
is a Virtual 8086 task. If VM=1 then the tasks will 
use the Real Mode addressing mechanism. The vir- 
tual 8086 environment is only entered and exited by 
a task switch. 


The coprocessor’s state is not automatically saved 
when a task switch occurs. The Task Switched Bit, 
TS, in the CRO register helps deal with the coproces- 
sor’s state in a multi-tasking environment. Whenever 
the Intel886 SX Microprocessor switches task, it 
sets the TS bit. The Intel886 SX Microprocessor de- 
tects the first use of a processor extension instruc- 
tion after a task switch and causes the processor 
extension not available exception 7. The exception 
handler for exception 7 may then decide whether to 
save the state of the coprocessor. 


The T bit in the Intel886 SX Microprocessor TSS 
indicates that the processor should generate a de- 
bug exception when switching to a task. If T=1 then 
upon entry to a new task a debug exception 1 will be 
generated. 
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INITIALIZATION AND TRANSITION TO 
PROTECTED MODE 


Since the Intel886 SX Microprocessor begins exe- 
cuting in Real Mode immediately after RESET it is 
necessary to initialize the system tables and regis- 
ters with the appropriate values. The GDT and IDT 
registers must refer to a valid GDT and IDT. The IDT 
should be at least 256 bytes long, and the GDT must 
contain descriptors for the initial code and data seg- 
ments. 


Protected Mode is enabled by loading CRO with PE 
bit set. This can be accomplished by using the MOV 
CRO, R/M instruction. After enabling Protected 
Mode, the next instruction should execute an inter- 
segment JMP to load the CS register and flush the 
instruction decode queue. The final step is to load all 
of the data segment registers with the initial selector 
values. 


An alternate approach to eritering Protected Mode is 
to use the built in task-switch to load all of the regis- 
ters. In this case the GDT would contain two TSS 
descriptors in addition to the code and data descrip- 
tors needed for the first task. The first JMP instruc- 
tion in Protected Mode would jump to the TSS caus- 
ing a task switch and loading all of the registers with 
the values stored in the TSS. The Task State Seg- 
ment Register should be initialized to point to a valid 
TSS descriptor. 


intel. 


Paging is another type of memory management use- 
ful for virtual memory multi-tasking operating sys- 
tems. Unlike segmentation, which modularizes pro- 
grams and data into variable length segments, pag- 
ing divides programs into multiple uniform size 
pages. Pages bear no direct relation to the logical 
structure of a program. While segment selectors can 
be considered the logical ‘name‘ of a program mod- 
ule or data structure, a page most likely corresponds 
to only a portion of a module or data structure. 


4.4 Paging 


PAGE ORGANIZATION 


The Intel386 SX Microprocessor uses two levels of 
tables to translate the linear address (from the seg- 
mentation unit) into a physical address. There are 
three components to the paging mechanism of the 
Intel386 SX Microprocessor: the page directory, the 
page tables, and the page itself (page frame). All 
memory-resident elements of the Intel886 SX Micro- 
processor paging mechanism are the same size, 
namely 4K bytes. A uniform size for all of the ele- 
ments simplifies memory allocation and reallocation 
schemes, since there is no problem with memory 
fragmentation. Figure 4.10 shows how the paging 
mechanism works. 


TWO LEVEL PAGING SCHEME 
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Figure 4.11. Page Directory Entry (Points to Page Table) 
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Figure 4.12. Page Table Entry (Points to Page) 


Page Fault Register 


CR2 is the Page Fault Linear Address register. It 
holds the 32-bit linear address which caused the last 
Page Fault detected. 


Page Descriptor Base Register 


CR3 is the Page Directory Physical Base Address 
Register. It contains the physical starting address of 
the Page Directory (this value is truncated to a 24-bit 
value associated with the Intel886 SX CPU’s 16 
megabyte physical memory limitation). The lower 12 
bits of CR3 are always zero to ensure that the Page 
Directory is always page aligned. Loading it with a 
MOV CR3, reg instruction causes the page table en- 
try cache to be flushed, as will a task switch through 
a TSS which changes the value of CRO. 


Page Directory 


The Page Directory is 4k bytes long and allows up to 
1024 page directory entries. Each page directory en- 
try contains information about the page table and 
the address of the next level of tables, the Page 
Tables. The contents of a Page Directory Entry are 
shown in figure 4.11. The upper 10 bits of the linear 
address (A3;—Ao2) are used as an index to select 
the correct Page Directory Entry. 


The page table address contains the upper 20 bits 
of a 32-bit physical address that is used as the base 
address for the next set of tables, the page tables. 
The lower 12 bits of the page table address are zero 
so that the page table addresses appear on 4 kbyte 
boundaries. For a Intel386 DX CPU system the up- 
per 20 bits will select one of 229 page tables, but for 
a Intel386 SX Microprocessor system the upper 20 
bits only select one of 212 page tables. Again, this is 
because the Intel386 SX Microprocessor is limited to 
a 24-bit physical address and the upper 8 bits (Ao4- 
A31) are truncated when the address is output on its 
24 address pins. 


Page Tables 


Each Page Table is 4K bytes long and allows up to 
1024 Page table Entries. Each page table entry con- 
tains information about the Page Frame and its ad- 


dress. The contents of a Page Table Entry are 
shown in figure 4.12. The middle 10 bits of the linear 
address (Ao;—Aj;2) are used as an index to select 
the correct Page Table Entry. 


The Page Frame Address contains the upper 20 bits 
of a 32-bit physical address that is used as the base 
address for the Page Frame. The lower 12 bits of the 
Page Frame Address are zero so that the Page 
Frame addresses appear on 4 kbyte boundaries. For 
an Intel3886 DX CPU system the upper 20 bits will 
select one of 220 Page Frames, but for an 
Intel886 SX Microprocessor system the upper 20 
bits only select one of 212 Page Frames. Again, this 
is because the Intel386 SX Microprocessor is limited 
to a 24-bit physical address space and the upper 8 
bits (Ao4-A31) are truncated when the address is 
output on its 24 address pins. 


Page Directory/Table Entries 


The lower 12 bits of the Page Table Entries and 
Page Directory Entries contain statistical information 
about pages and page tables respectively. The P 
(Present) bit indicates if a Page Directory or Page 
Table entry can be used in address translation. If 
P= 1, the entry can be used for address translation. 
lf P=O0, the entry cannot be used for translation. All 
of the other bits are available for use by the soft- 
ware. For example, the remaining 31 bits could be 
used to indicate where on disk the page is stored. 


The A (Accessed) bit is set by the Intel886 SX CPU 
for both types of entries before a read or write ac- 
cess occurs to an address covered by the entry. The 
D (Dirty) bit is set to 1 before a write to an address 
covered by that page table entry occurs. The D bit is 
undefined for Page Directory Entries. When the P, A 
and D bits are updated by the Intel886 SX CPU, the 
processor generates a Read- Modify-Write cycle 
which locks the bus and prevents conflicts with oth- 
er processors or peripherals. Software which modi- 
fies these bits should use the LOCK prefix to ensure 
the integrity of the page tables in multi-master sys- 
tems. 


The 3 bits marked system software definable in Fig- 
ures 4.11 and Figure 4.12 are software definable. 
System software writers are free to use these bits 
for whatever purpose they wish. 
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PAGE LEVEL PROTECTION (R/W, U/S BITS) 


The Intel386 SX Microprocessor provides a set of 
protection attributes for paging systems. The paging 
mechanism distinguishes between two levels of pro- 
tection: User, which corresponds to level 3 of the 
segmentation based protection, and supervisor 
which encompasses all of the other protection levels 
(0, 1, 2). Programs executing at Level 0, 1 or 2 by- 
pass the page protection, although segmentation- 
based protection is still enforced by the hardware. 


The U/S and R/W bits are used to provide User/Su- 
pervisor and Read/Write protection for individual 
pages or for all pages covered by a Page Table Di- 
rectory Entry. The U/S and R/W bits in the second 
level Page Table Entry apply only to the page de- 
scribed by that entry. While the U/S and R/W bits in 
the first level Page Directory Table apply to all pages 
described by the page table pointed to by that direc- 
tory entry. The U/S and R/W bits for a given page 
are obtained by taking the most restrictive of the 
U/S and R/W from the Page Directory Table Entries 
and using these bits to address the page. 


TRANSLATION LOOKASIDE BUFFER 


The Intel386 SX Microprocessor paging hardware is 
designed to support demand paged virtual memory 
systems. However, performance would degrade 
substantially if the processor was required to access 
two levels of tables for every memory reference. To 
solve this problem, the Intel886 SX Microprocessor 
keeps a cache of the most recently accessed pages, 
this cache is called the Translation Lookaside Buffer 
(TLB). The TLB is a four-way set associative 32-en- 
try page table cache. It automatically keeps the most 
commonly used page table entries in the processor. 
The 32-entry TLB coupled with a 4K page size re- 
sults in coverage of 128K bytes of memory address- 
es. For many common multi-tasking systems, the 
TLB will have a hit rate of greater than 98%. This 
means that the processor will only have to access 
the two-level page structure for less than 2% of all 
memory references. 


PAGING OPERATION 


The paging hardware operates in the following fash- 
ion. The paging unit hardware receives a 32-bit lin- 
ear address from the segmentation unit. The upper 
20 linear address bits are compared with all 32 en- 
tries in the TLB to determine if there is a match. If 
there is a match (i.e. a TLB hit), then the 24-bit phys- 
ical address is calculated and is placed on the ad- 
dress bus. 


If the page table entry is not in the TLB, the Intel386 
SX Microprocessor will read the appropriate Page 
Directory Entry. lf P= 1 on the Page Directory Entry, 
indicating that the page table is in memory, then the 
Intel386 SX Microprocessor will read the appropriate 
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Page Table Entry and set the Access bit. If P=1 on 
the Page Table Entry, indicating that the page is in 
memory, the Intel386 SX Microprocessor will update 
the Access and Dirty bits as needed and fetch the 
operand. The upper 20 bits of the linear address, 
read from the page table, will be stored in the TLB 
for future accesses. If P=0 for either the Page Di- 


rectory Entry or the Page Table Entry, then the proc- 
essor will generate a page fault Exception 14. 


The processor will also generate a Page Fault (Ex- 
ception 14) if the memory reference violated the 
page protection attributes. CR2 will hold the linear 


_ address which caused the page fault. Since Excep- 


tion 14 is classified as a fault, CS:EIP will point to the 
instruction causing the page-fault. The 16-bit error 
code pushed as part of the page fault handler will 
contain status bits which indicate the cause of the 
page fault. 


The 16-bit error code is used by the operating sys- 
tem to determine how to handle the Page Fault. Fig- 
ure 4.13 shows the format of the Page Fault error 
code and the interpretation of the bits. Even though 
the bits in the error code (U/S, W/R, and P) have 
similar names as the bits in the Page Directory/Ta- 
ble Entries, the interpretation of the error code bits is 
different. Figure 4.14 indicates what type of access 
caused the page fault. 

32 1.0 


15 
UIW 
U}U}U;}U;}U;U}U}U;U;U;U;U;U;Uj—j— 
S/R 


Figure 4.13. Page Fault Error Code Format 


U/S: The U/S bit indicates whether the access 
causing the fault occurred when the processor was 
executing in User Mode (U/S = 1) or in Supervisor 
mode (U/S = 0) 


W/R: The W/R_ bit indicates whether the access 
causing the fault was a Read (W/R = 0) or a Write 
(W/R = 1) 


P: The P bit indicates whether a page fault was 
caused by a not-present page (P = 0), or by a page 
level protection violation (P = 1) 


User Read 
the program is executing at level 3. 


0 0 Supervisor* Read 
0 1 
1 0 
1 1 User Write 
Figure 4.14. Type of Access Causing Page Fault 


U = Undefined 
Supervisor Write 
*Descriptor table access will fault with U/S = 0, even if 
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OPERATING SYSTEM RESPONSIBILITIES 


When the operating system enters or exits paging 
mode (by setting or resetting bit 31 in the CRO regis- 
ter) a short JMP must be executed to flush the In- 
tel386 SX Microprocessor’s prefetch queue. This 
ensures that all instructions executed after the ad- 
dress mode change will generate correct addresses. 


The Intel886 SX Microprocessor takes care of the 
page address translation process, relieving the bur- 
den from an operating system in a demand-paged 
system. The operating system is responsible for set- 
ting up the initial page tables and handling any page 
faults. The operating system also is required to inval- 
idate (i.e. flush) the TLB when any changes are 
made to any of the page table entries. The operating 
system must reload CR3 to cause the TLB to be 
flushed. 


Setting up the tables is simply a matter of loading 
CR3 with the address of the Page Directory, and 
allocating space for the Page Directory and the 
Page Tables. The primary responsibility of the oper- 
ating system is to implement a swapping policy and 
handle all of the page faults. 


A final concern of the operating system is to ensure 
that the TLB cache matches the information in the 
paging tables. In particular, any time the operating 
systems sets the P (Present) bit of page table entry 
to zero. The TLB must be flushed by reloading CR3. 
Operating systems may want to take advantage of 
the fact that CR3 is stored as part of a TSS, to give 
every task or group of tasks its own set of page 
tables. 


4.5 Virtual 8086 Environment 


The Intel886 SX Microprocessor allows the execu- 
tion of 8086 application programs in both Real Mode 
and in the Virtual 8086 Mode. The Virtual 8086 
Mode allows the execution of 8086 applications, 
while still allowing the system designer to take full 
advantage of the Intel886 SX CPU’s protection 
mechanism. 


VIRTUAL 8086 ADDRESSING MECHANISM 


One of the major differences between Intel386 SX 
CPU Real and Protected modes is how the segment 
selectors are interpreted. When the processor is ex- 
ecuting in Virtual 8086 Mode, the segment registers 
are used in a fashion identical to Real Mode. The 
contents of the segment register are shifted left 4 
bits and added to the offset to form the segment 
base linear address. 


The Intel886 SX Microprocessor allows the operat- 
ing system to specify which programs use the 8086 
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address mechanism and which programs use Pro- 
tected Mode addressing on a per task basis. 
Through the use of paging, the one megabyte ad- 
dress space of the Virtual Mode task can be mapped 
to anywhere in the 4 gigabyte linear address space 
of the Intel386 SX Microprocessor. Like Real Mode, 
Virtual Mode addresses that exceed one megabyte 
will cause an exception 13. However, these restric- 
tions should not prove to be important, because 
most tasks running in Virtual 8086 Mode will simply 
be existing 8086 application programs. 


PAGING IN VIRTUAL MODE 


The paging hardware allows the concurrent running 
of multiple Virtual Mode tasks, and provides protec- 
tion and operating system isolation. Although it is 
not strictly necessary to have the paging hardware 
enabled to run Virtual Mode tasks, it is needed in 
order to run multiple Virtual Mode tasks or to relo- 
cate the address space of a Virtual Mode task to 
physical address space greater than one megabyte. 


The paging hardware allows the 20-bit linear ad- 
dress produced by a Virtual Mode program to be 
divided into as many as 256 pages. Each one of the 
pages can be located anywhere within the maximum 
16 megabyte physical address space of the Intel386 
SX Microprocessor. In addition, since CR3 (the Page 
Directory Base Register) is loaded by a task switch, 
each Virtual Mode task can use a different mapping 
scheme to map pages to different physical locations. 
Finally, the paging hardware allows the sharing of 
the 8086 operating system code between multiple 
8086 applications. . 


PROTECTION AND I/O PERMISSION BIT MAP 


All Virtual Mode programs execute at privilege level 
3. As such, Virtual Mode programs are subject to all 
of the protection checks defined in Protected Mode. 
This is different than Real Mode, which implicitly is 
executing at privilege level 0. Thus, an attempt to 
execute a privileged instruction in Virtual Mode will 
Cause an exception 13 fault. 


The following are privileged instructions, which may 
be executed only at Privilege Level 0. Attempting to 
execute these instructions in Virtual 8086 Mode (or 
anytime CPL=0) causes an exception 13 fault: 


LIDT; MOVDRn,REG; MOV reg,DRn; 


LGDT; MOV TRn,reg; MOV reg, TRn; 
LMSW; MOV CRn,reg; MOV reg,CRn; 
CLAS: 
ALi: 
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Several instructions, particularly those applying to 
the multitasking and the protection model, are avail- 
able only in Protected Mode. Therefore, attempting 
to execute the following instructions in Real Mode or 
in Virtual 8086 Mode generates an exception 6 fault: 


LTR; STR; 
LLOT:. SLDT: 
LAR; VERR; 
isl: VERW; 
ARPL; 


The instructions which are IOPL sensitive in Protect- 
ed Mode are: - 


IN; STI; 
OUT; CLI 
INS; 

OUTS; 

REP INS; 
REP OUTS; 


In Virtual 8086 Mode the following instructions are 
lOPL-sensitive: 


INTn; STI; 
PUSHF; CLI; 
POPF; IRET; 


The PUSHF, POPF, and IRET instructions are |OPL- 
sensitive in Virtual 8086 Mode only. This provision 
allows the IF flag to be virtualized to the virtual 8086 
Mode program. The INT n software interrupt instruc- 
tion is also |OPL-sensitive in Virtual 8086 mode. 
Note that the INT 3, INTO, and BOUND instructions 
are not IOPL-sensitive in Virtual 8086 Mode. 


The I/O instructions that directly refer to addresses 
in the processor’s I/O space are IN, INS, OUT, and 
OUTS. The Intel386 SX Microprocessor has the abil- 
ity to selectively trap references to specific |/O ad- 
dresses. The structure that enables selective trap- 
ping is the //O Permission Bit Map in the TSS seg- 
ment (see Figures 4.8 and 4.9). The I/O permission 
map is a bit vector. The size of the map and its loca- 
tion in the TSS segment are variable. The processor 
locates the |/O permission map by means of the I/O 
map base field in the fixed portion of the TSS. The 
1/O map base field is 16 bits wide and contains the 
offset of the beginning of the |/O permission map. 


In protected mode when an I/O instruction (IN, INS, 
OUT or OUTS) is encountered, the processor first 
checks whether CPL<IOPL. If this condition is true, 
the |/O operation may proceed. If not true, the proc- 
essor checks the I/O permission map (in Virtual 
8086 Mode, the processor consults the map without 
regard for the IOPL). 
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Each bit in the map corresponds to an |/O port byte 
address; for example, the bit for port 41 is found at 
1/O map base +5, bit offset 1. The processor tests 
all the bits that correspond to the I/O addresses 
spanned by an |/O operation; for example, a double 
word operation tests four bits corresponding to four 
adjacent byte addresses. If any tested bit is set, the 
processor signals a general protection exception. If 
all the tested bits are zero, the I/O operations may 
proceed. 


It is not necessary for the I/O permission map to 
represent all the |/O addresses. I|/O addresses not 
spanned by the map are treated as if they had one- 
bits in the map. The 1/O map base should be at 
least one byte less than the TSS limit, the last byte 
beyond the I/O mapping information must contain 
all 1’s. 


Because the I/O permission map is in the TSS seg- 
ment, different tasks can have different maps. Thus, 
the operating system can allocate ports to a task by 
changing the I/O permission map in the task’s TSS, 


IMPORTANT IMPLEMENTATION NOTE: Beyond 
the last byte of |/O mapping information in the I/O 
permission bit map must be a byte containing all 1’s. 
The byte of all 1’s must be within the limit of the 
Intel386 SX CPU TSS segment (see Figure 4.8). 


interrupt Handling 


In order to fully support the emulation of an 8086 
machine, interrupts in Virtual 8086 Mode are han- 
dled in a unique fashion. When running in Virtual 
Mode all interrupts and exceptions involve a privi- 
lege change back to the host Intel386 SX Microproc- 
essor operating system. The Intel386 SX Microproc- 
essor operating system determines if the interrupt 
comes from a Protected Mode application or from a 
Virtual Mode program by examining the VM bit in the 
EFLAGS image stored on the stack. 


When a Virtual Mode program is interrupted and ex- 
ecution passes to the interrupt routine at level 0, the 
VM bit is cleared. However, the VM bit is still set in 
the EFLAG image on the stack. 


The Intel386 SX Microprocessor operating system in - 
turn handles the exception or interrupt and then re- 
turns control to the 8086 program. The Intel386 SX 
Microprocessor operating system may choose to let 
the 8086 operating system handle the interrupt or it 
may emulate the function of the interrupt handler. 
For example, many 8086 operating system calls are 
accessed by PUSHing parameters on the stack, and 
then executing an INT n instruction. If the IOPL is set 
to 0 then all INT n instructions will be intercepted by 
the Intel386 SX Microprocessor operating system. 
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An Intel386 SX Microprocessor operating system 
can provide a Virtual 8086 Environment which is to- 
tally transparent to the application software by inter- 


cepting and then emulating 8086 operating system’s 
calls, and intercepting IN and OUT instructions. 


Entering and Leaving Virtual 8086 Mode 


Virtual 8086 mode is entered by executing a 32-bit 
IRET instruction at CPL=0 where the stack has a 1 
in the VM bit of its EFLAGS image, or a Task Switch 
(at any CPL) to a Intel386 SX Microprocessor task 
whose Intel386 SX CPU TSS has a EFLAGS image 
containing a 1 in the VM bit position while the proc- 
essor is executing in the Protected Mode. POPF 
does not affect the VM bit but a PUSHF always 
pushes a 0 in the VM bit. 


The transition out of Virtual 8086 mode to protected 
mode occurs only on receipt of an interrupt or ex- 
ception. In Virtual 8086 mode, all interrupts and ex- 
ceptions vector through the protected mode IDT, 
and enter an interrupt handler in protected mode. As 
part of the interrupt processing the VM bit is cleared. 


Because the matching IRET must occur from level 0, 
Interrupt or Trap Gates used to field an interrupt or 
exception out of Virtual 8086 mode must perform an 
inter-level interrupt only to level 0. Interrupt or Trap 
Gates through conforming segments, or through 
segments with DPL>0, will raise a GP fault with the 
CS selector as the error code. 


Task Switches To/From Virtual 8086 Mode 


Tasks which can execute in Virtual 8086 mode must 
be described by a TSS with the Intel386 SX CPU 
format (type 9 or 11 descriptor). A task switch out of 
virtual 8086 mode will operate exactly the same as 
any other task switch out of a task with a Intel386 SX 
CPU TSS. All of the programmer visible state, includ- 
ing the EFLAGS register with the VM bit set to 1, is 
stored in the TSS. The segment registers in the TSS 
will contain 8086 segment base values rather than 
selectors. : 


A task switch into a task described by a Intel386 SX . 


CPU TSS will have an additional check to determine 
if the incoming task should be resumed in Virtual 
8086 mode. Tasks described by 286 format TSSs 
cannot be resumed in Virtual 8086 mode, so no 
check is required there (the FLAGS image in 286 
format TSS has only the low order 16 FLAGS bits). 
Before loading the segment register images from a 
Intel386 SX CPU TSS, the FLAGS image is loaded, 
so that the segment registers are loaded from the 
TSS image as 8086 segment base values. The task 
is now ready to resume in Virtual 8086 mode. 


Intel386™ SX MICROPROCESSOR 


Transitions Through Trap and Interrupt Gates, 
and IRET 


A task switch is one way to enter or exit Virtual 8086 
mode. The other method is to exit through a Trap or 
Interrupt gate, as part of handling an interrupt, and 
to enter as part of executing an IRET instruction. 
The transition out must use a Intel886 SX CPU Trap 
Gate (Type 14), or Intel3886 SX CPU Interrupt Gate 
(Type 15), which must point to a non-conforming lev- 
el O segment (DPL=0) in order to permit the trap 
handler to IRET back to the Virtual 8086 program. 
The Gate must point to a non-conforming level 0 
segment to perform a level switch to level 0 so that 
the matching IRET can change the VM bit. Intel386 
SX CPU gates must be used since 286 gates save 
only the low 16 bits of the EFLAGS register (the VM 
bit will not be saved). Also, the 16-bit IRET used to 
terminate the 286 interrupt handler will pop only the 
lower 16 bits from FLAGS, and will not affect the VM 
bit. The action taken for a Intel886 SX CPU Trap or 
Interrupt gate if an interrupt occurs while the task is 
executing in virtual 8086 mode is given by the follow- 
ing sequence: 

1. Save the FLAGS register in a temp to push later. 

Turn off the VM, TF, and IF bits. 


2. Interrupt and Trap gates must perform a level 
switch from 3 (where the Virtual 8086 Mode pro- 
gram executes) to level 0 (so IRET can return). 


3. Push the 8086 segment register values onto the 
new stack, in this order: GS, FS, DS, ES. These 
are pushed as 32-bit quantities. Then load these 4 
registers with null selectors (0). 


4. Push the old 8086 stack pointer onto the new 
stack by pushing the SS register (as 32-bits), then 
pushing the 32-bit ESP register saved above. 


5. Push the 32-bit EFLAGS register saved in step 1. 

6. Push the old 8086 instruction onto the new stack 
by pushing the CS register (as 32-bits), then push- 
ing the 32-bit EIP register. } 

7. Load up the new CS:EIP value from the interrupt 


gate, and begin execution of the interrupt routine 
in protected mode. — 


The transition out of V86 mode performs a level 
change and stack switch, in addition to changing 


_ back to protected mode. Also all of the 8086 seg- 


ment register images are stored on the stack (be- 
hind the SS:ESP image), and then loaded with null 
(0) selectors before entering the interrupt handler. 
This will permit the handler to safely save and re- 
store the DS, ES, FS, and GS registers as 286 selec- 
tors. This is needed so that interrupt handlers which 
don’t care about the mode of the interrupted pro- 
gram can use the same prologue and epilogue code 
for state saving regardless of whether or not a ‘na- 
tive‘ mode or Virtual 8086 Mode program was inter- 


1-351 


+ 5 27 3 2-4 
pat : es! 
ie : 


Intel386™ SX MICROPROCESSOR 


rupted. Restoring null selectors to these registers 
before executing the IRET will cause a trap in the 
interrupt handler. Interrupt routines which expect or 
return values in the segment registers will have to 
obtain/return values from the 8086 register images 
pushed onto the new stack. They will need to know 
the mode of the interrupted program in order to 
know where to find/return segment registers, and 
also to know how to interpret segment register val- 
ues. 


The IRET instruction will perform the inverse of the 
above sequence. Only the extended IRET instruc- 
tion (operand size=32) can be used and must be 
executed at level 0 to change the VM bit to 1. 


1. If the NT bit in the FLAGS register is on, an inter- 
task return is performed. The current state is 
stored in the current TSS, and the link field in the 
current TSS is used to locate the TSS for the in- 
terrupted task which is to be resumed. Otherwise, 

_ continue with the following sequence: 


2. Read the FLAGS image from SS:8[ESP] into the 
FLAGS register. This will set VM to the value ac- 
tive in the interrupted routine. 


3. Pop off the instruction pointer CS:EIP. EIP is 
popped first, then a 32-bit word is popped which 
contains the CS value in the lower 16 bits. If 
VM=0, this CS load is done as a protected mode 
segment load. If VM=1, this will be done as an 
8086 segment load. 


4. Increment the ESP register by 4 to bypass the 
FLAGS image which was ‘popped’ in step 1. 


5. If VM=1, load segment registers ES, DS, FS, and 
GS from memory locations SS:[ESP+8], 
SS:[ESP + 12], SS:[ESP + 16], and 
SS:[ESP = 20], respectively, where the new value 
of ESP stored in step 4 is used. Since VM=1, 
these are done as 8086 segment register loads. 


Else if VM=0, check that the selectors in ES, DS, 
FS, and GS are valid in the interrupted routine. 
Null out invalid selectors to trap if an attempt is 
made to access through them. 


6. If RPL(CS)>CPL, pop the stack pointer SS:ESP 
from the stack. The ESP register is popped first, 
followed by 32-bits containing SS in the lower 16 
bits. If VM=0, SS is loaded as a protected mode 
segment register load. If VM=1, an 8086 seg- 
ment register load is used. 


7. Resume execution of the interrupted routine. The 
VM bit in the FLAGS register (restored from the 
interrupt routine’s stack image in step 1) deter- 
mines whether the processor resumes the inter- 
rupted routine in Protected mode or Virtual 8086 
Mode. 
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5.0 FUNCTIONAL DATA 


The Intel386 SX Microprocessor features a straight- 
forward functional interface to the external hard- 
ware. The Intel3886 SX Microprocessor has separate 
parallel buses for data and address. The data bus is 
16-bits in width, and bi-directional. The address bus 
outputs 24-bit address values using 23 address lines 
and two byte enable signals. 


The Intel386 SX Microprocessor has two selectable 
address bus cycles: address pipelined and non-ad- 
dress pipelined. The address pipelining option al- 
lows as much time as possible for data access by 
starting the pending bus cycle before the present 
bus cycle is finished. A non-pipelined bus cycle 
gives the highest bus performance by executing ev- 
ery bus cycle in two processor CLK cycles. For maxi- 
mum design flexibility, the address pipelining option 
is selectable on a cycle-by-cycle basis. 


The processor’s bus cycle is the basic mechanism 
for information transfer, either from system to proc- 
essor, or from processor to system. Intel386 SX Mi- 
croprocessor bus cycles perform data transfer in a 
minimum of only two clock periods. The maximum 
transfer bandwidth at 16 MHz is therefore 16 
Mbytes/sec. However, any bus cycle will be extend- 
ed for more than two clock periods if external hard- 
ware withholds acknowledgement of the cycle. 


The Intel386 SX Microprocessor can relinquish con- 
trol of its local buses to allow mastership by other 
devices, such as direct memory access (DMA) chan- 
nels. When relinquished, HLDA is the only output pin 
driven by the Intel886 SX Microprocessor, providing 
near-complete isolation of the processor from its 
system (all other output pins are in a float condition). 


5.1 Signal Description Overview 


Ahead is a brief description of the Intel386 SX Micro- 
processor input and output signals arranged by func- 
tional groups. Note the # symbol at the end of a 
signal name indicates the active, or asserted, state 
occurs when the signal is at a LOW voltage. When 
no # is present after the signal name, the signal is 
asserted when at the HIGH voltage level. 


Example signal: M/IO# — HIGH voltage indicates 
Memory selected 


— LOW voltage indicates 
I/O selected 


The signal descriptions sometimes refer to AC tim- 
ing parameters, such as ‘tos Reset Setup Time‘ and 
‘tog Reset Hold Time.‘ The values of these parame- 
ters can be found in Table 7.4. 
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CLOCK (CLK2) DATA BUS (D15-Dp) 


CLK2 provides the fundamental timing for the These three-state bidirectional signals provide the 
Intel386 SX Microprocessor. It is divided by two in- general purpose data path between the Intel386 SX 
ternally to generate the internal processor clock Microprocessor and other devices. The data bus 
used for instruction execution. The internal clock is outputs are active HIGH and will float during bus: 
comprised of two phases, ‘phase one‘ and ‘phase hold acknowledge. Data bus reads require that read- 
two‘. Each CLK2 period is a phase of the internal data setup and hold times to; and too be met relative 


Clock. Figure 5.2 illustrates the relationship. If de- to CLK2 for correct operation. 
sired, the phase of the internal processor clock can 

be synchronized to a known phase by ensuring the 

falling edge of the RESET signal meets the applica- 

ble setup and hold times tos and tog. 


ADDRESS BUS A1-A23 
BHE# 


BLE# 


2X CLOCK | 


24-BIT 


pyte _| ADDRESS 
ENABLES 


'6-BIT/po-D15 < DATA BUS» 
so D15 DATA BUS 


ADS# 
i386 ™ sx 
BUS NA# , MICRO- 
CONTROL READY# || PROCESSOR BUS CYCLE DEFINITION 
Sennen 


BUS 
ARBITRATION | COPROCESSOR SIGNALLING 


INTERRUPTS 
POWER CONNECTIONS 


Figure 5.1. Functional Signal Groups 
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INTERNAL 
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62.5 ns MIN. 
(16 MHz MAX) 


Figure 5.2. CLK2 Signal and Internal Processor Clock 
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ADDRESS BUS (A23-A;, BHE#, BLE #) 


These three-state outputs provide physical memory 
addresses or I/O port addresses. Ao3—Aj6 are LOW 
during |/O transfers except for I/O transfers auto- 
matically generated by coprocessor instructions. 
During coprocessor I/O transfers, Azo—Aj6 are driv- 
en LOW, and Ao3 is driven HIGH so that this ad- 
dress line can be used by external logic to generate 
the coprocessor select signal. Thus, the |1/O address 
driven by the Intel386 SX Microprocessor for co- 
processor commands is 8000F8H, the I/O address- 
es driven by the Intel886 SX Microprocessor for co- 
processor data are 8000FCH or 8000FEH for cycles 
to the Intel887™ SX. 


The address bus is capable of addressing 16 mega- 
bytes of physical memory space (OOO000H through 
FFFFFFH), and 64 kilobytes of I/O address space 
(OOO000H through OOFFFFH) for programmed 1|/O. 
The address bus is active HIGH and will float during 
bus hold acknowledge. 


The Byte Enable outputs, BHE # and BLE#, directly 
indicate which bytes of the 16-bit data bus are in- 
volved with the current transfer. BHE# applies to 
D15-Dg and BLE# applies to D7-Dp. If both BHE# 
and BLE# are asserted, then 16 bits of data are 
being transferred. See Table 5.1 for a complete de- 
coding of these signals. The byte enables are active 
LOW and will float during bus hold acknowledge. 


BUS CYCLE DEFINITION SIGNALS 
(W/R#, D/C#, M/IO#, LOCK #) 


These three-state outputs define the type of bus cy- 
cle being performed: W/R# distinguishes between 
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write and read cycles, D/C# distinguishes between 
data and control cycles, M/IO# distinguishes be- 
tween memory and I/O cycles, and LOCK# distin- 
guishes between locked and unlocked bus cycles. 
All of these signals are active LOW and will float 
during bus acknowledge. 


The primary bus cycle definition signals are W/R#, 
D/C# and M/IO#, since these are the signals driv- 
en valid as ADS# (Address Status output) becomes 
active. The LOCK # is driven valid at the same time 


the bus cycle begins, which due to address pipelin- 


ing, could be after ADS # becomes active. Exact bus 
cycle definitions, as a function of W/R#, D/C#, and 
M/lIO# are given in Table 5.2. 


LOCK # indicates that other system bus masters are 
not to gain control of the system bus while it is ac- 
tive. LOCK # is activated on the CLK2 edge that be- 
gins the first locked bus cycle (i.e., it is not active at 
the same time as the other bus cycle definition pins) 
and is deactivated when ready is returned at the end 
of the last bus cycle which is to be locked. The be- 
ginning of a bus cycle is determined when READY # 
is returned in a previous bus cycle and another is 
pending (ADS# is active) or by the clock edge in 
which ADS # is driven active if the bus was idle. This 
means that it follows more closely with the write 
data rules when it is valid, but may cause the bus to 
be locked longer than desired. The LOCK# signal 
may be explicitly activated by the LOCK prefix on 
certain instructions. LOCK# is always asserted 
when executing the XCHG instruction, during de- 
scriptor updates, and during the interrupt acknowl- 
edge sequence. 


Table 5.1. Byte Enable Definitions 


Word Transfer 

Byte transfer on upper byte of the data bus, D;5-Dg 
Byte transfer on lower byte of the data bus, D7-Do 
Never occurs 


0 Interrupt Acknowledge 


does not occur 
|/O Data Read 
1/O Data Write 
Memory Code Read 


Halt: 


Shutdown: 


Address = 2. Address = 0 


BHE# = 1 
BLE# =0 
Memory Data Read 
Memory Data Write 
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BUS CONTROL SIGNALS 
(ADS #, READY #, NA#) 


The following signals allow the processor to indicate 
when a bus cycle has begun, and allow other system 
hardware to control address pipelining and bus cycle 
termination. 


Address Status (ADS#) 


This three-state output indicates that a valid bus cy- 
cle definition and address (W/R#, D/C#, M/IO#, 
BHE#, BLE# and Ao3-A;j) are being driven at the 
Intel386 SX Microprocessor pins. ADS # is an active 
LOW output. Once ADS # is driven active, valid ad- 
dress, byte enables, and definition signals will not 
change. In addition, ADS # will remain active until its 
associated bus cycle begins (when READY # is re- 
turned for the previous bus cycle when running pipe- 
lined bus cycles). When address pipelining is uti- 
lized, maximum throughput is achieved by initiating 
bus cycles when ADS# and READY #¥ are active in 
the same clock cycle. ADS# will float during bus 
hold acknowledge. See sections Non-Pipelined Ad- 
dress and Pipelined Address for additional infor- 
mation on how ADS # is asserted for different bus 
states. 


Transfer Acknowledge (READY #) 


This input indicates the current bus cycle is com- 
plete, and the active bytes indicated by BHE# and 
BLE# are accepted or provided. When READY # is 
sampled active during a read cycle or interrupt ac- 


knowledge cycle, the Intel886 SX Microprocessor 


latches the input data and terminates the cycle. 
When READY # is sampled active during a write cy- 
cle, the processor terminates the bus cycle. 


READY # is ignored on the first bus state of all bus 
cycles, and sampled each bus state thereafter until 
asserted. READY # must eventually be asserted to 
acknowledge every bus cycle, including Halt Indica- 
tion and Shutdown Indication bus cycles. When be- 
ing sampled, READY # must always meet setup and 
hold times tyg9 and tao for correct operation. 


Next Address Request (NA#) 


This is used to request address pipelining. This input 
indicates the system is prepared to accept new val- 
ues of BHE#, BLE#, Ao3-A;, W/R#, D/C# and 
M/lO# from the Intel386 SX Microprocessor even if 
the end of the current cycle is not being acknowl- 
edged on READY #. If this input is active when sam- 
pled, the next address is driven onto the bus, provid- 
ed the next bus request is already pending internally. 
NA# is ignored in CLK cycles in which ADS# or 
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READY # is activated. This signal is active LOW and 
must satisfy setup and hold times ty5 and ty, for 
correct operation. See Pipelined Address and 
Read and Write Cycles for additional information. 


BUS ARBITRATION SIGNALS (HOLD, HLDA) 


This section describes the mechanism by which the 
processor relinquishes control of its local buses 
when requested by another bus master device. See 
Entering and Exiting Hold Acknowledge for addi- 
tional information. 


Bus Hold Request (HOLD) 


This input indicates some device other than the 
Intel886 SX Microprocessor requires bus master- 
ship. When control is granted, the Intel386 SX Mi- 
croprocessor floats Ao3-A;, BHE#, BLE#, Dy5- 
Do, LOCK #, M/IO#, D/C#, W/R# and ADS#, and 
then activates HLDA, thus entering the bus hold ac- 
knowledge state. The local bus will remain granted 
to the requesting master until HOLD becomes inac- 
tive. When HOLD becomes inactive, the Intel386 SX 
Microprocessor will deactivate HLDA and drive the 
local bus (at the same time), thus terminating the 
hold acknowledge condition. — 


HOLD must remain asserted as long as any other 
device is a local bus master. External pull-up resis- 
tors may be required when in the hold acknowledge 
state since none of the Intel386 SX Microprocessor 
floated outputs have internal pull-up resistors. See 
Resistor Recommendations for additional informa- 
tion. HOLD is not recognized while RESET is active. 
lf RESET is asserted while HOLD is asserted, RE- 
SET has priority and places the bus into an idle 
state, rather than the hold acknowledge (high-im- 
pedance) state. 


HOLD is a level-sensitive, active HIGH, synchronous 
input. HOLD signals must always meet setup and 
hold times tog and to4 for correct operation. 


Bus Hold Acknowledge (HLDA) 


When active (HIGH), this output indicates the 
Intel386 SX Microprocessor has relinquished control 
of its local bus in response to an asserted HOLD 
signal, and is in the bus Hold Acknowledge state. 


The Bus Hold Acknowledge state offers near-com- 
plete signal isolation. In the Hold Acknowledge 
state, HLDA is the only signal being driven by the 
Intel886 SX Microprocessor. The other output sig- 
nals or bidirectional signals (Dj5-Dp, BHE#, BLE#, 
Ao3-Ai, W/R#, D/C#, M/IO#, LOCK# and 
ADS#) are in a high-impedance state so the re- 
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questing bus master may control them. These pins 
remain OFF throughout the time that HLDA remains 
active (see Table 5.3)). Pull-up resistors may be de- 
sired on several signals to avoid spurious activity 
when no bus master is driving them. See Resistor 
Recommendations for additional information. 


When the HOLD signal is made inactive, the 
Intel386 SX Microprocessor will deactivate HLDA 
and drive the bus. One rising edge on the NMI input 
is remembered for processing after the HOLD input 
is negated. 


Table 5.3. Output pin State During HOLD 


LOCK #, M/IO#, D/C#, W/R#, 
ADS #, Ao3-A1, BHE#, BLE#, Dy5-Do 


In addition to the normal usage of Hold Acknowl- 
edge with DMA controllers or master peripherals, 
the near-complete isolation has particular attractive- 
ness during system test when test equipment drives 
the system, and in hardware fault-tolerant applica- 
tions. 


HOLD Latencies 


The maximum possible HOLD latency depends on 
the software being executed. The actual HOLD la- 
tency at any time depends on the current bus activi- 
ty, the state of the LOCK# signal (internal to the 
CPU) activated by the LOCK # prefix, and interrupts. 
The Intel886 SX Microprocessor will not honor a 
HOLD request until the current bus operation is 
complete. 


The Intel386 SX Microprocessor breaks 32-bit data 
or |/O accesses into 2 internally locked 16-bit bus 
cycles; the LOCK# signal is not asserted. The 
Intel386 SX Microprocessor breaks unaligned 16-bit 
or 32-bit data or |/O accesses into 2-or 3 internally 
locked 16-bit bus cycles. Again, the LOCK # signal is 
not asserted but a HOLD request will not be recog- 
nized until the end of the entire transfer. 


Wait states affect HOLD latency. The Intel386 SX 
Microprocessor will not honor a HOLD request until 
the end of the current bus operation, no matter how 
many wait states are required. Systems with DMA 
where data transfer is critical must insure that 
READY # returns sufficiently soon. 
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COPROCESSOR INTERFACE SIGNALS 
(PEREQ, BUSY #, ERROR#) 


In the following sections are descriptions of signals 
dedicated to the numeric coprocessor interface. In 
addition to the data bus, address bus, and bus cycle 
definition signals, these following signals control 
communication between the Intel886 SX Microproc- 
essor and its Intel887™ SX processor extension. 


Coprocessor Request (PEREQ) 


When asserted (HIGH), this input signal indicates a 
coprocessor request for a data operand to be trans- 
ferred to/from memory by the Intel386 SX Micro- 
processor. In response, the Intel886 SX Microproc- 
essor transfers information between the coproces- 
sor and memory. Because the Intel386 SX Micro- 
processor has internally stored the coprocessor op- 
code being executed, it performs the requested data 
transfer with the correct direction and memory ad- 
dress. 


PEREQ is a level-sensitive active HIGH asynchro- 
nous signal. Setup and hold times, tag and tgp, rela- 
tive to the CLK2 signal must be met to guarantee 
recognition at a particular clock edge. This signal is 
provided with a weak internal pull-down resistor of 
around 20 K-ohms to ground so that it will not float 
active when left unconnected. 


Coprocessor Busy (BUSY #) 


When asserted (LOW), this input indicates the co- 
processor is still executing an instruction, and is not 
yet able to accept another. When the Intel386 SX 
Microprocessor encounters any coprocessor in- 
struction which operates on the numerics stack (e.g. 
load, pop, or arithmetic operation), or the WAIT in- 
struction, this input is first automatically sampled un- 
til it is seen to be inactive. This sampling of the 
BUSY # input prevents overrunning the execution of 
a previous coprocessor instruction. 


The FNINIT, FNSTENV, FNSAVE, FNSTSW, 
FNSTCW and FNCLEX coprocessor instructions are 
allowed to execute even if BUSY # is active, since 
these instructions are used for coprocessor initializa- 
tion and exception-clearing. 


BUSY # is an active LOW, level-sensitive asynchro- 
nous signal. Setup and hold times, to9 and tgo, rela- 
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tive to the CLK2 signal must be met to guarantee 
recognition at a particular clock edge. This pin is pro- 
vided with a weak internal pull-up resistor of around 


20 K-ohms to Vcc so that it will not float active when 
left unconnected. 


BUSY # serves an additional function. If BUSY # is 
sampled LOW at the falling edge of RESET, the 
Intel886 SX Microprocessor performs an internal 
self-test (see Bus Activity During and Following 
Reset. If BUSY # is sampled HIGH, no self-test is 
performed. 


Coprocessor Error (ERROR #) 


When asserted (LOW), this input signal indicates 
that the previous coprocessor instruction generated 
a coprocessor error of a type not masked by the 
coprocessor’s control register. This input is automat- 
ically sampled by the Intel3886 SX Microprocessor 
when a coprocessor instruction is encountered, and 
if active, the Intel886 SX Microprocessor generates 
exception 16 to access the error-handling software. 


Several coprocessor instructions, generally those 
which clear the numeric error flags in the coproces- 
sor or save coprocessor state, do execute without 
the Intel886 SX Microprocessor generating excep- 
tion 16 even if ERROR# is active. These instruc- 
tions are FNINIT, FNCLEX, FNSTSW, FNSTSWAX, 
FNSTCW, FNSTENV and FNSAVE. 


ERROR# is an active LOW, level-sensitive asyn- 
chronous signal. Setup and hold times, tog and to, 
relative to the CLK2 signal must be met to guarantee 
recognition at a particular clock edge. This pin is pro- 
vided with a weak internal pull-up resistor of around 
20 K-ohms to Vcc so that it will not float active when 
left unconnected. 


INTERRUPT SIGNALS (INTR, NMI, RESET) 


The following descriptions cover inputs that can in- 
terrupt or suspend execution of the processor’s cur- 
rent instruction stream. 


Maskable Interrupt Request (INTR) 


When asserted, this input indicates a request for in- 
terrupt service, which can be masked by the Intel386 
SX CPU Flag Register IF bit. When the Intel386 SX 
Microprocessor responds to the INTR input, it per- 
forms two interrupt acknowledge bus cycles and, at 
the end of the second, latches an 8-bit interrupt vec- 
tor on'D7-Dp to identify the source of the interrupt. 


INTR is an active HIGH, level-sensitive asynchro- 
nous signal. Setup and hold times, to7 and tog, rela- 
tive to the CLK2 signal must be met to guarantee 


Intel386™ SX MICROPROCESSOR 


recognition at a particular clock edge. To assure rec- 
ognition of an INTR request, INTR should remain 
active until the first interrupt acknowledge bus cycle 
begins. INTR is sampled at the beginning of every 
instruction in the Intel886 SX Microprocessor’s Exe- 
cution Unit. In order to be recognized at a particular 
instruction boundary, INTR must be active at least 
eight CLK2 clock periods before the beginning of the 
instruction. If recognized, the Intel386 SX Microproc- 
essor will begin execution of the interrupt. 


Non-Maskable Interrupt Request (NMl)) 


This input indicates a request for interrupt service 
which cannot be masked by software. The non- 
maskable interrupt request is always processed ac- 
cording to the pointer or gate in slot 2 of the interrupt 
table. Because of the fixed NMI slot assignment, no 
interrupt acknowledge cycles are performed when 
processing NMI. 


NMI is an active HIGH, rising edge-sensitive asyn- 
chronous signal. Setup and hold times, to7 and tog, 
relative to the CLK2 signal must be met to guarantee 
recognition at a particular clock edge. To assure rec- 
ognition of NMI, it must be inactive for at least eight 
CLK2 periods, and then be active for at least eight 
CLK2 periods before the beginning of the instruction 
boundary in the Intel886 SX Microprocessor’s Exe- 
cution Unit. 


Once NMI processing has begun, no additional 
NMI’s are processed until after the next IRET in- 
struction, which is typically the end of the NMI serv- 
ice routine. If NMI is re-asserted prior to that time, 
however, one rising edge on NMI will be remem- 
bered for processing after executing the next IRET 
instruction. 


Interrupt Latency 


The time that elapses before an interrupt request is 
serviced (interrupt latency) varies according to sev- 
eral factors. This delay must be taken into account 
by the interrupt source. Any of the following factors 
can affect interrupt latency: 


1. If interrupts are masked, an INTR request will not 
be recognized until interrupts are reenabled. 


2. If an NMI is currently being serviced, an incoming 
NMI request will not be recognized until the 
Intel386 SX Microprocessor encounters the IRET 
instruction. 


3. An interrupt request is recognized only on an in- 
struction boundary of the Intel886 SX Microproc- 
essor’s Execution Unit except for the following 
cases: 


-— Repeat string instructions can be interrupted 
after each iteration. 
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— If the instruction loads the Stack Segment reg- 
ister, an interrupt is not processed until after 
the following instruction, which should be an 
ESP. This allows the entire stack pointer to be 
loaded without interruption. 


— If an instruction sets the interrupt flag (enabling 
interrupts), an interrupt is not processed until 
after the next instruction. 


The longest latency occurs when the interrupt re- 
quest arrives while the Intel886 SX Microproces- 
sor is executing a long instruction such as multipli- 
cation, division, or a task-switch in the protected 
mode. 


4. Saving the Flags register and CS:EIP registers. 


5. If interrupt service routine requires a task switch, 
time must be allowed for the task switch. 


6. If the interrupt service routine saves registers that 
are not automatically saved by the Intel3886 SX 
Microprocessor. 


RESET 


This input signal suspends any operation in progress 
and places the Intel886 SX Microprocessor in a 
known reset state. The Intel386 SX Microprocessor 
is reset by asserting RESET for 15 or more CLK2 
periods (80 or more CLK2 periods before requesting 
self-test). When RESET is active, all other input pins, 
except FLT #, are ignored, and all other bus pins are 
driven to an idle bus state as shown in Table 5.5. If 
RESET and HOLD are both active at a point in time, 
RESET takes priority even if the Intel386 SX Micro- 
processor was in a Hold Acknowledge state prior to 
RESET active. 


RESET is an active HIGH, level-sensitive synchro- 
nous signal. Setup and hold times, tos and tog, must 
be met in order to assure proper operation of the 
Intel386 SX Microprocessor. 


Table 5.5. Pin State (Bus Idle) During Reset 


| PinName Signal Level During Reset 


ADS # 
Dis-Dp ss * 
BHE#, BLE# 
A23-A4 


W/R# 
D/C# 
M/IO# 
LOCK # 
HLDA 


5.2 Bus Transfer Mechanism 


All data transfers occur as a result of one or more 
bus cycles. Logical data operands of byte and word 
lengths may be transferred without restrictions on 
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physical address alignment. Any byte boundary may 
be used, although two physical bus cycles are per- 
formed as required for unaligned operand transfers. 


The Intel386 SX Microprocessor address signals are 
designed to simplify external system hardware. 
Higher-order address bits are provided by Ao3-A\. 
BHE# and BLE# provide linear selects for the two 
bytes of the 16-bit data bus. 


Byte Enable outputs BHE# and BLE# are asserted 
when their associated data bus bytes are involved 
with the present bus cycle, as listed in Table 5.6. 


Table 5.6. Byte Enables and Associated Data 


and Operand Bytes 
Byte Enable 
Signal | 
BLE# D7-Do | (byte 0 — least significant) 
BHE # D45-—Dg | (byte 1 — most significant) 
Each bus cycle is composed of at least two bus 
states. Each bus state requires one processor clock 
period. Additional bus states added to a single bus 


cycle are called wait states. See section 5.4 Bus 
Functional Description. 


Associated Data Bus Signals 


5.3 Memory and I/O Spaces 


Bus cycles may access physical memory space or 
1/O space. Peripheral devices in the system may ei- 
ther be memory-mapped, or !/O-mapped, or both. 
As shown in Figure 5.3, physical memory addresses 
range from OOOO00H to OFFFFFFH (16 megabytes) 
and |/O addresses from OOO000H to OOFFFFH 
(64 kilobytes). Note the |/O addresses used by the 
automatic I/O cycles for coprocessor communica- 
tion are 8000F8H to 8000FFH, beyond the address 
range of programmed I/O, to allow easy generation 
of a coprocessor chip select signal using the Ao3 
and M/IlO# signals. 


5.4 Bus Functional Description 


The Intel386 SX Microprocessor has separate, par- 


~ allel buses for data and address. The data bus is 16- 


bits in width, and bidirectional. The address bus pro- 
vides a 24-bit value using 23 signals for the 23 up- 
per-order address bits and 2 Byte Enable signals to 
directly indicate the active bytes. These buses are 
interpreted and controlled by several definition sig- 
nals. , 


The definition of each bus cycle is given by three 
signals: M/IO#, W/R# and D/C#. At the same 
time, a valid address is present on the byte enable 
signals, BHE# and BLE#, and the other address 
signals Ao3-A 3. A status signal, ADS#, indicates 
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Since A23 is HIGH during automatic communication with coprocessor, A23 HIGH and M/IO# LOW can be used to 
easily generate a coprocessor select signal. 


0O00000H 


Figure 5.3. Physical Memory and I/O Spaces 
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Fastest non-pipelined bus cycles consist of T1 and T2 


Figure 5.4. Fastest Read Cycles with Non-pipelined Address Timing 
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when the Intel386 SX Microprocessor issues a new 
bus cycle definition and address. 


Collectively, the address bus, data bus and all asso- 
ciated control signals are referred to simply as ‘the 
bus’. When active, the bus performs one of the bus 
cycles below: 


. Read from memory space 

. Locked read from memory space 

. Write to memory space 

. Locked write to memory space 

. Read from |/O space (or coprocessor) 
. Write to 1/O space (or coprocessor) 

. Interrupt acknowledge (always locked) 
. Indicate halt, or indicate shutdown 


ON OOF Wh — 


Table 5.2 shows the encoding of the bus cycle defi- 
nition signals for each bus cycle. See Bus Cycle 
Definition Signals for additional information. 


ORE 
PIPELINED 
(READ) 


TP T2P 


Inte. 


When the Intel386 SX Microprocessor bus is not 
performing one of the activities listed above, it is ei- 
ther Idle or in the Hold Acknowledge state, which 
may be detected externally. The idle state can be 
identified by the Intel886 SX Microprocessor giving 
no further assertions on its address strobe output 
(ADS #) since the beginning of its most recent bus 
cycle, and the most recent bus cycle having been 
terminated. The hold acknowledge state is identified 
by the Intel386 SX Microprocessor asserting its hold 
acknowledge (HLDA) output. 


The shortest time unit of bus activity is a bus state. A 
bus state is one processor clock period (two CLK2 
periods) in duration. A complete data transfer occurs 
during a bus cycle, composed of two or more bus 
states. 


The fastest Intel386 SX Microprocessor bus cycle 
requires only two bus states. For example, three 
consecutive bus read cycles, each consisting of two 
bus states, are shown by Figure 5.4. The bus states 
in each cycle are named T1 and T2. Any memory or 
|/O address may be accessed by such a two-state 
bus cycle, if the external hardware is fast enough. 
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Fastest pipelined bus cycles consist of T1P and T2P 


Figure 5.5. Fastest Read Cycles with Pipelined Address Timing 
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Every bus cycle continues until it is acknowledged 
by the external system hardware, using the Intel386 
SX Microprocessor READY # input. Acknowledging 
the bus cycle at the end of the first T2 results in the 
shortest bus cycle, requiring only T1 and T2. If 
READY # is not immediately asserted however, T2 


states are repeated indefinitely until the READY # 
input is sampled active. 


The address pipelining option provides a choice of 
bus cycle timings. Pipelined or non-pipelined ad- 
dress timing is selectable on a cycle-by-cycle basis 
with the Next Address (NA#) input. 


When address pipelining is selected the address 
(BHE#, BLE# and Ao3-A4) and definition (W/R#, 
D/C#, M/IO# and LOCK#) of the next cycle are 
available before the end of the current cycle. To sig- 
nal their availability, the Intel886 SX Microprocessor 
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address status output (ADS#) is asserted. Figure 
5.5 illustrates the fastest read cycles with pipelined 
address timing. 


Note from Figure 5.5 the fastest bus cycles using 
pipelined address require only two bus states, 
named T1P and T2P. Therefore cycles with pipe- 
lined address timing allow the same data bandwidth 
as non-pipelined cycles, but address-to-data access 
time is increased by one T-state time compared to 
that of a non-pipelined cycle. 


READ AND WRITE CYCLES 


Data transfers occur as a result of bus cycles, classi- 
fied as read or write cycles. During read cycles, data 
is transferred from an external device to the proces- 
sor. During write cycles, data is transferred from the 
processor to an external device. 
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Idle states are shown here for diagram variety only. Write cycles are not always followed by an idle state. An active bus 


cycle can immediately follow the write cycle. 


Figure 5.6. Various Bus Cycles with Non-Pipelined Address (zero wait states) 
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Two choices of address timing are dynamically se- 
lectable: non-pipelined or pipelined. After an idle bus 
state, the processor always uses non-pipelined ad- 
dress timing. However the NA# (Next Address) in- 
put may be asserted to select pipelined address tim- 
ing for the next bus cycle. When pipelining is select- 
ed and the Intel386 SX Microprocessor has a bus 
request pending internally, the address and defini- 
tion of the next cycle is made available even before 
the current bus cycle is acknowledged by READY #. 


Terminating a read or write cycle, like any bus cycle, 
requires acknowledging the cycle by asserting the 
READY # input. Until acknowledged, the processor 
inserts wait states into the bus cycle, to allow adjust- 
ment for the speed of any external device. External 
hardware, which has decoded the address and bus 
cycle type, asserts the READY # input at the appro- 
priate time. 


CYCLE 1 
NON=PIPELINED 
(READ) 

11 12 


CLK2 [ 


PROCESSOR CLK [ 


CYCLE 2 
NON=PIPELINED 
(WRITE) (READ) 


=) 

intel. 
At the end of the second bus state within the bus 
cycle, READY # is sampled. At that time, if external 
hardware acknowledges the bus cycle by asserting 
READY #, the bus cycle terminates as shown in Fig- 
ure 5.6. If READY # is negated as in Figure 5.7, the 
Intel386 SX Microprocessor executes another bus 
state (a wait state) and READY # is sampled again 
at the end of that state. This continues indefinitely 
until the cycle is acknowledged by READY # assert- 
ed. 


When the current cycle is acknowledged, the 
Intel386 SX Microprocessor terminates it. When a 
read cycle is acknowledged, the Intel386 SX Micro- 
processor latches the information present at its data 
pins. When a write cycle is acknowledged, the 
Intel386 SX CPU’s write data remains valid through- 
out phase one of the next bus state, to provide write 
data hold time. 
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Idle states are shown here for diagram variety only. Write cycles are not always followed by an idle state. An active bus 
cycle can immediately follow the write cycle. 
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Figure 5.7. Various Bus Cycles with Non-Pipelined Address (various number of wait states) 
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Non-Pipelined Address 


Any bus cycle may be performed with non-pipelined 
address timing. For example, Figure 5.6 shows a 
mixture of read and write cycles with non-pipelined 
address timing. Figure 5.6 shows that the fastest 
possible cycles with non-pipelined address have two 
bus states per bus cycle. The states are named T1 
and T2. In phase one of T1, the address signals and 
bus cycle definition signals are driven valid and, to 
signal their availability, address strobe (ADS#) is 
simultaneously asserted. 


During read or write cycles, the data bus behaves as 
follows. If the cycle is a read, the Intel386 SX Micro- 
processor floats its data signals to allow driving by 
the external device being addressed. The Intel386 
SX Microprocessor requires that all data bus 
pins be at a valid logic state (HIGH or LOW) at 
the end of each read cycle, when READY# is 
asserted. The system MUST be designed to 
meet this requirement. If the cycle is a write, data 
signals are driven by the Intel386 SX Microproces- 
sor beginning in phase two of T1 until phase one of 
the bus state following cycle acknowledgment. 


RESET 
ASSERTED 
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REQUEST PENDING e 
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Bus States: 
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Figure 5.7 illustrates non-pipelined bus cycles with 
one wait state added to Cycles 2 and 3. READY # is 
sampled inactive at the end of the first T2 in Cycles 
2 and 3. Therefore Cycles 2 and 3 have T2 repeated 
again. At the end of the second T2, READY # is 
sampled active. 


When address pipelining is not used, the address 
and bus cycle definition remain valid during all wait 
states. When wait states are added and it is desir- 
able to maintain non-pipelined address timing, it is 
necessary to negate NA# during each T2 state ex- 
cept the last one, as shown in Figure 5.7 Cycles 2 
and 3. If NA# is sampled active during a T2 other 
than the last one, the next state would be T2I or T2P 
instead of another T2. 


When address pipelining is not used, the bus states 
and transitions are completely illustrated by Figure 
5.8. The bus transitions between four possible 
states, T1, T2, Tj, and T},. Bus cycles consist of T1 
and T2, with T2 being repeated for wait states. Oth- 
erwise the bus may be idle, Tj, or in the hold ac- 
knowledge state Tp. 


HOLD ASSERTED 


HOLD NEGATED 
REQUEST PENDING 


are ASSERTED ¢ 
HOLD NEGATED 
REQUEST PENDING 


READY# NEGATED « 
NA# NEGATED 
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Ti—first clock of a non-pipelined bus cycle (Intel386™ SX CPU drives new address and asserts ADS #). 
T2—subsequent clocks of a bus cycle when NA# has not been sampled asserted in the current bus cycle. 
Ti—idle state. 

Th—hold acknowledge state (Intel386 SX CPU asserts HLDA). 

The fastest bus cycle consists of two states T1 and T2. 

Four basic bus states describe bus operation when not using pipelined address. 


Figure 5.8. Bus States (not using pipelined address) 
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Bus cycles always begin with T1. T1 always leads to 
T2. If a bus cycle is not acknowledged during T2 and 
NA# is inactive, T2 is repeated. When a cycle is 
acknowledged during T2, the following state will be 
T1 of the next bus cycle if a bus request is pending 
internally, or T; if there is no bus request pending, or 
Th if the HOLD input is being asserted. 


Use of pipelined address allows the Intel386 SX Mi- 
croprocessor to enter three additional bus states not 
shown in Figure 5.8. Figure 5.12 is the complete bus 
state diagram, including pipelined address cycles. 
Pipelined Address 


Address pipelining is the option of requesting the 
address and the bus cycle definition of the next in- 
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| intel ® 
ternally pending bus cycle before the current bus 
cycle is acknowledged with READY# asserted. 
ADS # is asserted by the Intel386 SX Microproces- 
sor when the next address is issued. The address 
pipelining option is controlled on -a cycle-by-cycle 
basis with the NA# input signal. 


Once a bus cycle is in progress and the current ad- 
dress has been valid for at least one entire bus 
state, the NA# input is sampled at the end of every 
phase one until the bus cycle is acknowledged. Dur- 
ing non-pipelined bus cycles NA# is sampled at the 
end of phase one in every T2. An example is Cycle 2 
in Figure 5.9, during which NA# is sampled at the 
end of phase one of every T2 (it was asserted once 
during the first T2 and has no further effect during 
that bus cycle). 
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Following any idle bus state (Ti), addresses are non-pipelined. Within non-pipelined bus cycles, NA# is only sampled 
during wait states. Therefore, to begin address pipelining during a group of non-pipelined bus cycles requires a non-pipe- 


lined cycle with at least one wait state (Cycle 2 above). 


Figure 5.9. Transitioning to Pipelined Address During Burst of Bus Cycles 
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lf NA# is sampled active, the Intel386 SX Micro- ure 5.11 Cycle 3). Provided the current bus cycle 
processor is free to drive the address and bus cycle isn’t yet acknowledged by READY# asserted, 
definition of the next bus cycle, and assert ADS#, T2P will be entered as soon as the Intel886 SX 
as soon as it has a bus request internally pending. It Microprocessor does drive the next address. Ex- 
may drive the next address as early as the next bus ternal hardware should therefore observe the 
state, whether the current bus cycle is acknowl- ADS # output as confirmation the next address is 
edged at that time or not. actually being driven on the bus. 


2. Any address which is validated by a pulse on the 
ADS# output will remain stable on the address 
pins for at least two processor clock periods. The 


Regarding the details of address pipelining, the 
Intel386 SX Microprocessor has the following char- 


acteristics: Intel886 SX Microprocessor cannot produce a 
1. The next address may appear as early as the bus new address more frequently than every two 
state after NA# was sampled active (see Figures — processor clock periods (see Figures 5.9, 5.10, 
5.9 or 5.10). In that case, state T2P is entered and 5.11). 
immediately. However, when there is not an inter- — 3. Only the address.and bus cycle definition of the 


nal bus request already pending, the next address very next bus cycle is available. The pipelining ca- 


will not be available immediately after NA# is as- ability cannot look further than one bus cycle 
serted and T2l is entered instead of T2P (see Fig- es (see Figure 5.11 Cycle 1). y 
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Following any bus state (Ti) the address is always non-pipelined and NA# is only sampled during wait states. To start 
address pipelining after an idle state requires a non-pipelined cycle with at least one wait state (cycle 1 above) 
The pipelined cycles (2, 3, 4 above) are shown with various numbers of wait states. 


Figure 5.10. Fastest Transition to Pipelined Address Following Idle Bus State 


: 1-365 


Intel386™ SX MICROPROCESSOR 


The complete bus state transition diagram, including 
operation with pipelined address is given by Figure 
5.12. Note it is a superset of the diagram for non- 
pipelined address only, and the three additional bus 
states for pipelined address are drawn in bold. 
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intel. 
The fastest bus cycle with pipelined address con- 
sists of just two bus states, T1P and T2P (recall for 


non-pipelined address it is T1 and T2). T1P is the 
first bus state of a pipelined cycle. 
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Figure 5.11. Details of Address Pipelining During Cycles with Wait States 
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Bus States: . 

Ti—first clock of a non-pipelined bus cycle (Intel386™ SX CPU 2 
drives new address and asserts ADS #). NO REQUEST 
T2—subsequent clocks of a bus cycle when NA# has not been HOLD ASSERTED) 
sampled asserted in the current bus cycle. 


T2I—subsequent clocks of a bus cycle when NA# has been 
sampled asserted in the current bus cycle but there is not yet 
an internal bus request pending (Intel386 SX CPU will not drive 


READY# NEGATEDe 


REQUEST PENDING 
HOLD NEGATED 


new address or assert ADS #). 

T2P—subsequent clocks of a bus cycle when NA# has been 

sampled asserted in the current bus cycle and there is an inter- 

nal bus request pending (Intel386 SX CPU drives new address 

and asserts ADS #). 

T1P—first clock of a pipelined bus cycle. READY# NEGATED 
Ti—idle state. 240187-27 
Th—hold acknowledge state (Intel886 SX CPU asserts HLDA). 

Asserting NA# for pipelined address gives access to three 

more bus states: T2I, T2P and T1P. \ 

Using pipelined address, the fastest bus cycle consists of T1P 

and T2P. 


Figure 5.12. Complete Bus States (including pipelined address) 
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Initiating and Maintaining Pipelined Address 


Using the state diagram Figure 5.12, observe the 
transitions from an idle state, Tj, to the beginning of 
a pipelined bus cycle T1P. From an idle state, Tj, the 
first bus cycle must begin with T1, and is therefore a 
non-pipelined bus cycle. The next bus cycle will be 
pipelined, however, provided NA# is asserted and 
the first bus cycle ends in a T2P state (the address 
for the next bus cycle is driven during T2P). The fast- 
est path from an idle state to a bus cycle with pipe- 
lined address is shown in bold below: 


Tj, Tj, Tj, T1- T2 - T2P, T1P - T2P, 
idle non-pipelined pipelined 
states cycle cycle 


T1-T2-T2P are the states of the bus cycle that es- 
tablish address pipelining for the next bus cycle, 
which begins with T1P. The same is true after a bus 
hold state, shown below: 
Th» Ths Th, T1- T2 - T2P, T1P - T2P, 
hold acknowledge non-pipelined pipelined 
states cycle cycle 


The transition to pipelined address is shown func- 
tionally by Figure 5.10 Cycle 1. Note that Cycle 1 is 
used to transition into pipelined address timing for 
the subsequent Cycles 2, 3 and 4, which are pipe- 
lined. The NA# input is asserted at the appropriate 
time to select address pipelining for Cycles 2, 3 and 
4. 


Once a bus cycle is in progress and the current ad- 
dress has been valid for one entire bus state, the 
NA # input is sampled at the end of every phase one 
until the bus cycle is acknowledged. Sampling be- 
gins in T2 during Cycle 1 in Figure 5.10. Once NA# 
is sampled active during the current cycle, the 
Intel386 SX Microprocessor is free to drive a new 


address and bus cycle definition on the bus as early | 


as the next bus state. In Figure 5.10 Cycle 1 for 
example, the next address is driven during state 
T2P. Thus Cycle 1 makes the transition to pipelined 
address timing, since it begins with T1 but ends with 
T2P. Because the address for Cycle 2 is available 
before Cycle 2 begins, Cycle 2 is called a pipelined 
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bus cycle, and it begins with T1P. Cycle 2 begins as 
soon as READY # asserted terminates Cycle 1. 


Examples of transition bus cycles are Figure 5.10 
Cycle 1 and Figure 5.9 Cycle 2. Figure 5.10 shows 
transition during the very first cycle after an idle bus 
state, which is the fastest possible transition into ad- 
dress pipelining. Figure 5.9 Cycle 2 shows a tran- 
sition cycle occurring during a burst of bus cycles. In 
any case, a transition cycle is the same whenever it 
occurs: it consists at least of T1, T2 (NA# is assert- 
ed at that time), and T2P (provided the Intel386 SX 
Microprocessor has an internal bus request already 
pending, which it almost always has). T2P states are 
repeated if wait states are added to the cycle. 


Note that only three states (T1, T2 and T2P) are 
required in a bus cycle performing a transition from 
non-pipelined address into pipelined address timing, 
for example Figure 5.10 Cycle 1. Figure 5.10 Cycles 
2, 3 and 4 show that address pipelining can be main- 
tained with two-state bus cycles consisting only of 
T1P and T2P. 


Once a pipelined bus cycle is in progress, pipelined 
timing is maintained for the next cycle by asserting 
NA# and detecting that the Intel886 SX Microproc- 
essor enters T2P during the current bus cycle. The 
current bus cycle must end in state T2P for pipelin- 
ing to be maintained in the next cycle. T2P is identi- 
fied by the assertion of ADS#. Figures 5.9 and 5.10 
however, each show pipelining ending after Cycle 4 
because Cycle 4 ends in T2l. This indicates the 
Intel886 SX Microprocessor didn’t have an internal 
bus request prior to the acknowledgement of Cycle 
4. lf acycle ends with a T2 or T2l, the next cycle will 
not be pipelined. 


Realistically, address pipelining is almost always 
maintained as long as NA# is sampled asserted. 
This is so because in the absence of any other re- 
quest, a code prefetch request is always internally 
pending until the instruction decoder and code pre- 
fetch queue are completely full. Therefore, address 
pipelining is maintained for long bursts of bus cycles, 
if the bus is available (i.e., HOLD inactive) and NA# 
is sampled active in each of the bus cycles. 
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INTERRUPT ACKNOWLEDGE (INTA) CYCLES 


In response to an interrupt request on the INTR in- 
put when interrupts are enabled, the Intel886 SX Mi- 
croprocessor performs two interrupt acknowledge 
cycles. These bus cycles are similar to read cycles 
in that bus definition signals define the type of bus 
activity taking place, and each cycle continues until 
acknowledged by READY # sampled active. 


The state of Ao distinguishes the first and second 
interrupt acknowledge cycles. The byte address 
driven during the first interrupt acknowledge cycle is 
4 (Ao3-A3, Ai, BLE# LOW, Ao and BHE# HIGH). 
The byte address driven during the second interrupt 
acknowledge cycle is 0 (Ao3—-A;, BLE# LOW, and 
BHE# HIGH). 


PREVIOUS INTERRUPT 
CYCLE ACKNOWLEDGE 
CYCLE 1 


T2 11 T2 


CLK2 [ 


PROCESSOR CLK 4 
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The LOCK # output is asserted from the beginning 
of the first interrupt acknowledge cycle until the end 
of the second interrupt acknowledge cycle. Four idle 
bus states, Tj, are inserted by the Intel386 SX Micro- 
processor between the two interrupt acknowledge 
cycles for compatibility with spec TRHRL of the 
8259A Interrupt Controller. 


During both interrupt acknowledge cycles, Dy5-—Dpo 
float. No data is read at the end of the first interrupt 
acknowledge cycle. At the end of the second inter- 
rupt acknowledge cycle, the Intel386 SX Microproc- 
essor will read an external interrupt vector from D7- 
Do of the data bus. The vector indicates the specific 
interrupt number (from 0-255) requiring service. 
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Interrupt Vector (0-255) is read on DO-D7 at end of second interrupt Acknowledge bus cycle. 
Because each Interrupt Acknowledge bus cycle is followed by idle bus states. asserting NA# has no  regsom effect. 
Choose the approach which is simplest for your system hardware design. 


Figure 5.13. Interrupt Acknowledge Cycles 
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HALT INDICATION CYCLE 


The execution unit halts as a result of executing a 
HLT instruction. Signaling its entrance into the halt 
state, a halt indication cycle is performed. The halt 
indication cycle is identified by the state of the bus 


CYCLE 1 CYCLE 2 
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definition signals shown on page 40, Bus Cycle 
Definition Signals, and an address of 2. The halt 
indication cycle must be acknowledged by READY # 
asserted. A halted Intel886 SX Microprocessor re- 
sumes execution when .INTR (if interrupts are en- 
abled), NMI or RESET is asserted. 


NON-PIPELINED NON-PIPELINED 


(WRITE) ae 
T1 T2 T1 


CLK2 t 


PROCESSOR CLK f: eats REMAINS 


BHE#, Al, 
M/lO#, W/R# Bo nna ee HALTED UNTIL INTR, NMI OR 
RESET IS ASSERTED. 
A2-A23, | 
oe Woe h AXE ee | 


Intel386'™ sx CPU RESPONDS 


|__| To Hot INPUT WHILE IN 


NA# ‘tens XX XX) isan i 


WCC CONOCEE 


wt | kos | ake, | cokers 


VALID 1 VALID 2 


NOTE: HALT CYCLE MUST BE 
ACKNOWLEDGED BY READY# 


_ ASSERTED. WAIT STATES MAY 


BE ADDED TO THE CYCLE IF 
DESIRED. 


XXXEXXXARXXAKXKE 


out XC [oor worry) = rare} ----p---- 
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Figure 5.14. Example Halt Indication 
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Cycle from Non-Pipelined Cycle 
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SHUTDOWN INDICATION CYCLE 


The Intel386 SX Microprocessor shuts down as a 
result of a protection fault while attempting to pro- 
cess a double fault. Signaling its entrance into the 
shutdown state, a shutdown indication cycle is per- 
formed. The shutdown indication cycle is identified 
by the state of the bus definition signals shown in 
Bus Cycle Definition Signals and an address of 0. 
The shutdown indication cycle must be acknowl- 
edged by READY # asserted. A shutdown Intel386 
SX Microprocessor resumes execution when NMI or 
RESET is asserted. 
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ENTERING AND EXITING HOLD 
ACKNOWLEDGE 


The bus hold acknowledge state, Tp, is entered in 
response to the HOLD input being asserted. In the 
bus hold acknowledge state, the Intel386 SX Micro- 
processor floats all outputs or bidirectional signals, 
except for HLDA. HLDA is asserted as long as the 
Intel386 SX Microprocessor remains in the bus hold 
acknowledge state. In the bus hold acknowledge 
state, all inputs except HOLD, FLT # and RESET are 
ignored. 


intel386'™ sx CPU REMAINS 
SHUTDOWN UNTIL NMI 
OR RESET IS ASSERTED. 


intel386™ sx CPU RESPONDS 
TO.HOLD INPUT WHILE IN 
THE SHUTDOWN STATE. 
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Figure 5.15. Example Shutdown Indication Cycle from Non-Pipelined Cycle 
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Th may be entered from a bus idle state as in Figure 
5.16 or after the acknowledgement of the current 
physical bus cycle if the LOCK # signal is not assert- 
ed, as in Figures 5.17 and 5.18. 


Th is exited in response to the HOLD input being 
negated. The following state will be T; as in Figure 
5.16 if no bus request is pending. The following bus 
state will be T1 if abus request is internally pending, 
as in Figures 5.17 and 5.18. Tp is exited in response 
to RESET being asserted. 


If a rising edge occurs on the edge-triggered NMI 
input while in Tp, the event is remembered as a non- 
maskable interrupt 2 and is serviced when Ty is exit- 
ed unless the Intel886 SX Microprocessor is reset 
before Tp, is exited. 


7 S 
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RESET DURING HOLD ACKNOWLEDGE 


RESET being asserted takes priority over HOLD be- 
ing asserted. If RESET is asserted while HOLD re- 
mains asserted, the Intel3886 SX Microprocessor 
drives its pins to defined states during reset, as in 
Table 5.5 Pin State During Reset, and performs 
internal reset activity as usual. 


If HOLD remains asserted when RESET is inactive, 
the Intel386 SX Microprocessor enters the hold ac- 
knowledge state before performing its first bus cy- 
cle, provided HOLD is still asserted when the 
Intel386 SX Microprocessor would otherwise per- 
form its first bus cycle. 


IDLE IDLE 
ACKNOWLEDGE 


CLK2 Z 


PROCESSOR cuk[ 
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HLDA 
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For maximum design flexibility the Intel386™ SX CPU has no internal pullup resistors on its outputs. Your design may 
require an external pullup on ADS# and other outputs to keep them negated during float periods. 


Figure 5.16. Requesting Hold from Idle Bus 
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FLOAT 


Activating the FLT # input floats all Intel386 SX bidi- 
rectional and output signals, including HLDA. Assert- 
ing FLT# isolates the Intel886 SX from the sur- 
rounding circuitry. 


As the Intel386 SX is packaged in a surface mount 
PQFP, it cannot be removed from the motherboard 
when In-Circuit Emulation (ICE) is needed. The 
FLT # input allows the Intel386 SX to be electrically 
isolated from the surrounding circuitry. This allows 
connection of an emulator to the Intel3886 SX PQFP 
without removing it from the PCB. This method of 
emulation is referred to as ON- Circuit Emulation 
(ONCE). 


ENTERING AND EXITING FLOAT 


FLT # is an asynchronous, active-low input. It is rec- 
ognized on the rising edge of CLK2. When recog- 
nized, it aborts the current bus cycle and floats the 
outputs of the Intel386 SX (Figure 5.20). FLT # must 
be held low for a minimum of 16 CLK2 cycles: Reset 
should be asserted and held asserted until after 
FLT# is deasserted. This will ensure that the 
Intel386 SX will exit float in a valid state. 


CYCLE 1 
NON=PIPELINED 
(READ) 


CLK2 [ 


PROCESSOR cLK[ 


HOLD [ 


BHE#,BLE#,A1-A23, 
M/lO#, D/C#, W/R# 


ADS# [ 


NOTE: 


ios a 
su 
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Asserting the FLT # input unconditionally aborts the 
current bus cycle and forces the Intel386 SX into the 
FLOAT mode. Since activating FLT # unconditional- 
ly forces the Intel386 SX into FLOAT mode, the 
Intel386 SX is not guaranteed to enter FLOAT ina 
valid state. After deactivating FLT #, the Intel386 SX 
is not guaranteed to exit FLOAT mode in a valid 
state. This is not a problem as the FLT# pin is 
meant to be used only during ONCE. After exiting 
FLOAT, the Intel386 SX must be reset to return it to 
a valid state. Reset should be asserted before FLT # 
is deasserted. This will ensure that the Intel386 SX 
will exit float in a valid state. 


FLT # has an internal pull-up resistor, and if it is not 
used it should be unconnected. 


BUS ACTIVITY DURING AND FOLLOWING 
RESET 


RESET is the highest priority input signal, capable of 
interrupting any processor activity when it is assert- 
ed. A bus cycle in progress can be aborted at any 
stage, or idle states or bus hold acknowledge states 
discontinued so that the reset state is established. 


HOLD 
ACKNOWLEDGE 


CYCLE 2 
NON=PIPELINED 
(WRITE) 


XXXXXXXXXXXX se 
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HOLD is a synchronous input and can be asserted at any CLK2 edge, provided setup and hold (ta3 and to4) require- 
ments are met. This waveform is useful for determining Hold Acknowledge latency. 


Figure 5.17. Requesting Hold from Active Bus (NA# inactive) 
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RESET should remain asserted for at least 15 CLK2 
periods to ensure it is recognized throughout the 
Intel386 SX Microprocessor, and at least 80 CLK2 
periods if self-test is going to be requested at the 
falling edge. RESET asserted pulses less than 15 
CLK2 periods may not be recognized. RESET puls- 
es less than 80 CLK2 periods followed by a self-test 
_ may cause the self-test to report a failure when no 
true failure exists. 


Provided the RESET falling edge meets setup and 
hold times tos and tog, the internal processor clock 
phase is defined at that time as illustrated by Figure 
5.19 and Figure 7.7. 


CYCLE 1 
PIPELINED 
(WRITE) 


T2I 


CLK2 [ 
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A self-test may be requested at the time RESET 
goes inactive by having the BUSY # input at a LOW 
level as shown in Figure 5.19. The self-test requires 
approximately (229 + 60) CLK2 periods to com- 
plete. The self-test duration is not affected by the 
test results. Even if the self-test indicates a problem, 
the Intel386 SX Microprocessor attempts to proceed 
with the reset sequence afterwards. 


After the RESET falling edge (and after the self-test 
if it was requested) the Intel386 SX Microprocessor 
performs an internal initialization sequence for ap- 
proximately 350 to 450 CLK2 periods. 
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HOLD is a synchronous input and can be asserted at any CLK2 edge, provided setup and hold (t23 and t24) require- 
ments are met. This waveform is useful for determining Hold Acknowledge latency. 


Figure 5.18. Requesting Hold from Idle Bus (NA# active) 
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NOTES: 

1. BUSY# should be held stable for 8 CLK2 periods before and after the CLK2 period in which RESET falling edge 
occurs. . 

2. If self-test is requested the outputs remain in their reset state as shown here. 


Figure 5.19. Bus Activity from Reset Until First Code Fetch 
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Figure 5.20. Entering and Exiting, FLT # 
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5.5 Self-test Signature 


Upon completion of self-test (if self-test was re- 
quested by driving BUSY # LOW at the falling edge 
of RESET) the EAX register will contain a signature 
of OOOD000OH indicating the Intel386 SX Microproc- 
essor passed its self-test of microcode and major 
PLA contents with no problems detected. The pass- 
ing signature in EAX, OOOO0000H, applies to all revi- 
sion levels. Any non-zero signature indicates the unit 
is faulty. 


5.6 Component and Revision 
identifiers 


To assist users, the Intel386 SX Microprocessor af- 
ter reset holds a component identifier and revision 
identifier in its DX register. The upper 8 bits of DX 
hold 23H as identification of the Intel886 SX Micro- 
processor (the lower nibble, 03H, refers to the 
Intel386 DX Architecture. The upper nibble, 02H, re- 
fers to the second member of the Intel886 DX Fami- 
ly). The lower 8 bits of DX hold an 8-bit unsigned 
binary number related to the component revision 
level. The revision identifier will, in general, chrono- 
logically track those component steppings which are 
intended to have certain improvements or distinction 
from previous steppings. The Intel386 SX Microproc- 
essor revision identifier will track that of the Intel386 
DX CPU where possible. 


The revision identifier is intended to assist users to a 
practical extent. However, the revision identifier val- 
ue is not guaranteed to change with every stepping 
revision, or to follow a completely uniform numerical 
sequence, depending on the type or intention of re- 
vision, Or manufacturing materials required to be 
changed. Intel has sole discretion over these char- 
acteristics of the component. 

Table 5.7. Component and 

Revision Identifier History 


Stepping Revision Identifier 


5.7 Coprocessor Interfacing 


The Intel886 SX Microprocessor provides an auto- 
matic interface for the Intel Intel887 SX numeric 
floating-point coprocessor. The Intel387 SX coproc- 
essor uses an |/O mapped interface driven automat- 
ically by the Intel886 SX Microprocessor and assist- 
ed by three dedicated signals: BUSY#, ERROR# 
and PEREQ. 


As the Intel386 SX Microprocessor begins support- 
ing a coprocessor instruction, it tests the BUSY # 
and ERROR # signals to determine if the coproces- 
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sor can accept its next instruction. Thus, the 
BUSY # and ERROR # inputs eliminate the need for 
any ‘preamble’ bus cycles for communication be- 
tween processor and coprocessor. The Intel387 SX 
can be given its command opcode immediately. The 
dedicated signals provide instruction synchroniza- 
tion, and eliminate the need of using the WAIT op- 
code (9BH) for Intel387 SX instruction synchroniza- 
tion (the WAIT opcode was required when the 8086 
or 8088 was used with the 8087 coprocessor). 


Custom coprocessors can be included in Intel386 
SX Microprocessor based systems by memory- 
mapped or |/O-mapped interfaces. Such coproces- 
sor interfaces allow a completely custom protocol, 
and are not limited to a set of coprocessor protocol 
‘primitives’. Instead, memory-mapped or 1|/O- 
mapped interfaces may use all applicable instruc- 
tions for high-speed coprocessor communication. 
The BUSY# and ERROR# inputs of the Intel386 
SX Microprocessor may also be used for the custom 
coprocessor interface, if such hardware assist is de- 
sired. These signals can be tested by the WAIT op- 
code (9BH). The WAIT instruction will wait until the 
BUSY # input is inactive (interruptable by an NMI or 
enabled INTR input), but generates an exception 16 
fault if the ERROR # pin is active when the BUSY # 
goes (or is) inactive. If the custom coprocessor inter- 
face is memory-mapped, protection of the address- 
es used for the interface can be provided with the 
Intel386 SX CPU’s on-chip paging or segmentation 
mechanisms. If the custom interface is |/O-mapped, 
protection of the interface can be provided with the 
IOPL (I/O Privilege Level) mechanism. 


The Intel387 SX numeric coprocessor interface is 
|1/O mapped as shown in Table 5.8. Note that the 
Intel387 SX coprocessor interface addresses are 
beyond the OH-OFFFFH range for programmed I/O. 
When the Intel886 SX Microprocessor supports the 
Intel387 SX coprocessor, the Intel386 SX Micro- 
processor automatically generates bus cycles to the 
coprocessor interface addresses. 

Table 5.8. Numeric Coprocessor Port Addresses 


Address in Intel386 SX Intel387 SX 

CPU I/O Space Coprocessor Register 
8000F8H Opcode Register 
8000FCH/8000FEH* Operand Register 


*Generated as 2nd bus cycle during Dword transfer. 


To correctly map the Intel3887 SX registers to the 
appropriate |/O addresses, connect the CMDO and 
CMD1 lines of the Intel387 SX as listed in Table 5.9. 
Table 5.9. Connections for CMD0O 
and CMD1 Inputs for the Intel387 SX 


Connect directly 
to Intel386 SX CPU A2 signal 


Connect to ground. 


& 
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Software Testing for Coprocessor Presence 


When software is used to test for coprocessor 
(Intel387 SX) presence, it should use only the follow- 
ing coprocessor opcodes: FINIT, FNINIT, FSTCW 
mem, FSTSW mem and FSTSW AX. To use other 
coprocessor opcodes when a coprocessor is known 
to be not present, first set EM = 1 in the Intel386 SX 
CPU’s CRO register. 


6.0 PACKAGE THERMAL 
SPECIFICATIONS 


The Intel386 SX Microprocessor is specified for op- 
eration when case temperature (T,) is within the 
range of 0°C-100°C. The case temperature may be 
measured in any environment, to determine whether 
the Intel386 SX Microprocessor is within specified 
operating range. The case temperature should be 
measured at the center of the top surface opposite 
the pins. 


The ambient temperature (Tg) is related to T, and 
the thermal conductivity parameters 6), and 6), from 
the following equations (eqn. 3 is derived by elimi- 
nating the junction temperature (Tj) between eqns. 
1 and 2): 


ay Ver P*Gic 
2) Ta = Tj Es P*6ia 
3) Te — Ta + P*[6ia re. Bic] 


Values for 6jg and 6), are given in Table 6.1 for the 
100 lead fine pitch. 6j, is given at various airflows. 
The power (P) dissipated by the chip as heat is 
Vec*lcc. A guaranteed maximum safe T, can be cal- 
culated from eqn. 3 by using the maximum safe T, of 
100°C, along with the maximum power drawn by the 
chip in the given design, and 6, and 9j values from 
Table 6.1. (The 6j, value depends on the airflow, 
measured at the top of the chip, provided by the 
system ventilation.) 
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7.0 ELECTRICAL SPECIFICATIONS 


The following sections describe recommended elec- 
trical connections for the Intel386 SX Microproces- 


sor, and its electrical specifications. 


7.1 Power and Grounding 


The Intel386 SX Microprocessor is implemented in 
CHMOS IV technology and has modest power re- 
quirements. However, its high clock frequency and 
47 output buffers (address, data, control, and HLDA) 
Can cause power surges as multiple output buffers 
drive new signal levels simultaneously. For clean on- 
chip power distribution at high frequency, 14 Vcc 
and 18 Vss pins separately feed functional units of 
the Intel386 SX Microprocessor. 


Power and ground connections must be made to all 
external Vcc and Vss pins of the Intel386 SX Micro- 
processor. On the circuit board, all Vcc pins should 
be connected on a Vcc plane and all Vss pins 
should be connected on a GND plane. 


POWER DECOUPLING RECOMMENDATIONS 


Liberal decoupling capacitors should be placed near 
the Intel386 SX Microprocessor. The Intel386 SX Mi- 
croprocessor driving its 24-bit address bus and 
16-bit data bus at high frequencies can cause tran- 
sient power surges, particularly when driving large 
Capacitive loads. Low inductance capacitors and in- 
terconnects are recommended for best high fre- 
quency electrical performance. Inductance can be 
reduced by shortening circuit board traces between 
the Intel386 SX Microprocessor and decoupling ca- 
pacitors as much as possible. 


Table 6.1. Thermal Resistances (°C/Watt) 6j, and 6ja. 


nee 


100 Lead 
Fine Pitch 


Ea 


6ja versus Airflow - ft/min (m/sec) 


400 600 
(2.03) (3.04) 


800 1000 
(4.06) (5.07) 
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Table 7.1. Recommended Resistor Pull-ups to Vcc 


16 ADS# 


LOCK # 


RESISTOR RECOMMENDATIONS 


The ERROR #, FLT # and BUSY # inputs have inter- 
nal pull-up resistors of approximately 20 KN. and the 
PEREQ input has an internal pull-down resistor of 
approximately 20 K. built into the Intel386 SX Mi- 
croprocessor to keep these signals inactive when 
the Intel387 SX is not present in the system (or tem- 
porarily removed from its socket). 


In typical designs, the external pull-up resistors 
shown in Table 7.1 are recommended. However, a 
particular design may have reason to adjust the re- 
sistor values recommended here, or alter the use of 
pull-up resistors in other ways. 


OTHER CONNECTION RECOMMENDATIONS 


For reliable operation, always connect unused in- 
puts to an appropriate signal level. N/C pins should 
always remain unconnected. Connection of N/C 
pins to Vcc or Vss will result in component mal- 
function or incompatibility with future steppings 
of the Intel386 SX Microprocessor. 


Particularly when not using interrupts or bus hold (as 
when first prototyping), prevent any chance of spuri- 
ous activity by connecting these associated inputs to 
GND: 


Pin Signal 
40 INTR 
38 NMI 

4 HOLD 
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| Pin | Signal | __Pullup Value 


20 KX +10% 


20 KN +10% 


Lightly pull ADS # inactive during 
Intel386™ SX CPU hold acknowledge 
states 


Lightly pull LOCK # inactive during 
Intel386™ SX CPU hold acknowledge 
states 


lf not using address pipelining, connect pin 6, NA#, 
through a pull-up in the range of 20 KO. to Vcc. 


7.2 Maximum Ratings 
Table 7.2. Maximum Ratings 


Storage temperature —65 °C to 150°C 

Case temperature under bias | —65 °C to 110°C 

Supply voltage with respect 
to Vss 

Voltage on other pins 


— .5V to 6.5V 
—.5V to (Vce+ .5)V 


Table 7.2 gives stress ratings only, and functional 
operation at the maximums is not guaranteed. Func- 
tional operating conditions are given in section 7.3, 
D.C. Specifications, and section 7.4, A.C. Specifi- 
cations. 


Extended exposure to the Maximum Ratings may af- 
fect device reliability. Furthermore, although the 
Intel386 SX Microprocessor contains protective cir- 
cuitry to resist damage from static electric discharge, 
always take precautions to avoid high static voltages 
or electric fields. 


a : 
intel ; Intel386™ SX MICROPROCESSOR 


7.3 D.C. Specifications 
Functional operating range: Vcc = 5V +10%; Tcoase = 0°C to 100°C 


Table 7.3. Intel386™ SX Microprocessor D.C. Characteristics—33 MHz, 25 MHz, 20 MHz and 16 MHz 


[Symbol Parameter [in| Max 
[M__[meutvowvonge —SSC~=~srC | ow fv 
vin [Inout GH votage ——=SSCS~*~wC‘ [ets | 
[oLK2 input LOW Votiags 5 SRNR 

pet 


CLK2 Input HIGH Voltage Vect 0.3} V 


VOL Output LOW Voltage 
V 
V 
V 
V 
V 


loc =4 mA: Ao3-A1,D15-Do 0.45 
0.45 
. af 


VOH Output HIGH Voltage 
lon = —1 MA: Ao3-A1,D45-Do 
lon = —0.2 mA: Ao3-A1,0145-Do 
lon = —0.9 mA: BHE#,BLE#,W/R#, 


D/C#,M/lIO#,LOCK#, 

ADS #,HLDA 

lon = — 0.18 mA: BHE #,BLE#,W/R#, 
D/C #,M/lIO#,LOCK#, 

ADS#,HLDA 


lol =5 mA: BHE #,BLE#,W/R#,D/C#, 
215 BA | OV<Vin<Voc 


M/IO#,LOCK #,ADS#,HLDA 
Input Leakage Current 200 BA | Vip=2.4V, Note 1 
(PEREQ pin) 
Input Leakage Current — 400 BA | Vi_=0.45V, Note 2 
(BUSY #, ERROR# and FLT # pins) 


ao 
a 
rs 


ly Input Leakage Current 
(for all pins except PEREQ, BUSY #, FLT # 
and ERROR #) | 


Supply Current (See Note 3) 
CLK2 = 32 MHz: with 16 MHz Intel386 SX CPU loc typ = 150 mA 
CLK2= 40 MHz: with 20 MHz Intel386 SX CPU loc typ = 180 mA 
CLK2= 50 MHz: with 25 MHz Intel886 SX CPU loc typ= 210 mA 
CLK2= 66 MHz: with 33 MHz Intel386 SX CPU loc typ = 290 mA 


Input Capacitance Fo=1 MHz, Note 4 
Output or |/O Capacitance Fo=1 MHz, Note 4 
CLK2 Capacitance Le ae a Fo=1 MHz, Note 4 


All values except Icc tested at the minimum operating frequency of the part (CLK2 = 8 MHz). 


NOTES: 

1. PEREQ input has an internal pull-down resistor. 

2. BUSY #, FLT# and ERROR # inputs each have an internal pull-up resistor. 

3. Icc max measurement at worst case frequency, Vcc and temperature, with 50 pF output load. 
4. Not 100% tested. 


| 1-379 


| : | Bee, 
Intel386™ SX MICROPROCESSOR | intel : 


Functional operating range: Vcc = 5V +10%; Tcase = 0°C to 100°C 


Table 7.4. Low Power (LP) Intel386™ SX Microprocessor 
D.C. Characteristics—33 MHz, 25 MHz, 20 MHz, 16 MHz, and 12 MHz 


ee oe | 
vn [Inputtowvonags ——SSSSSS*dtC ee 
Vin [nowt iGHvotage ——=S~S~*d:~CiO [Vogts v | 
iwc [OLK2 Input HIGH Votage——=dVp-08 |Vootos| v | 


Ao3-A1,015-Do 0.45 V 

BHE#,BLE#,W/R#,D/C#, 0.45 V 
M/lO #,LOCK #,ADS #,HLDA 

V 

V 

V 


Output HIGH Voltage 
V 


ADS#,HLDA 

lon = —0.18 mA: BHE #,BLE#,W/R#, 
D/C #,M/lIO#,LOCK#, 

ADS #,HLDA 


loH= —1 MA: A23-A1,D15-Do 
BA | OVSVinsVcc 


lon = —0.2 mA: Ao3-A1,D145-Do 
lIoH = —0.9 mA: BHE #,BLE#,W/R#, 
ViL=0.45V, Note 2 
215 


D/C #,M/lIO#,LOCK#, 
| #18 | pA | 0.45V<Vout<Vcc 


ly Input Leakage Current 


(for all pins except PEREQ, BUSY #, FLT # 
and ERROR #) 


Input Leakage Current 
(BUSY #, ERROR # and FLT # pins) 


Supply Current (See Note 3) 
CLK2= 4 MHz loc typ = 50 mA 
CLK2 = 24 MHz: with 12 MHz Intel386 SX CPU loc typ = 120 mA 
CLK2 = 32 MHz: with 16 MHz Intel386 SX CPU loc typ = 150 mA 
CLK2= 40 MHz: with 20 MHz Intel386 SX CPU loc typ =.180 mA 
CLK2= 50 MHz: with 25 MHz Intel386 SX CPU loc typ = 210 mA 


CLK2=66 MHz: with 33 MHz Intel386 SX CPU Icc typ = 290 mA 


Fo=1 MHz, Note 4 
Fo=1 MHz, Note 4 
Fo=1 MHz, Note 4 


All values except Icc tested at the minimum operating frequency of the part (CLK2 = 4 MHz). 


NOTES: 

1. PEREQ input has an internal pull-down resistor. 

2. BUSY #, FLT # and ERROR # inputs each have an internal pull-up resistor. 

3. loc max measurement at worst case frequency, Vcc and temperature, with 50 pF output load. 
4. Not 100% tested. . 
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7.4 A.C. Specifications 


The A.C. specifications given in Tables 7.5 through 
7.8 consist of output delays, input setup require- 
ments and input hold requirements. All A.C. specifi- 
cations are relative to the CLK2 rising edge crossing 
the 2.0V level. 


A.C. spec measurement is defined by Figure 7.1. In- 
puts must be driven to the voltage levels indicated 
by Figure 7.1 when A.C. specifications are mea- 
sured. Output delays are specified with minimum 
and maximum limits measured as shown. The mini- 
mum delay times are hold times provided to external 
circuitry. Input setup and hold times are specified 


CLK2 


(8) 


atthe RK 


OUTPUTS 
(A1—A23,BHE#,BLE#, 
ADS#,M/10#,D/C#, 
W/R#,LOCK#,HLDA) 


(DO=D15) 


INPUTS 
(N/A#,INTR,NMI) 


L 
[ 
L 


INPUTS 
(READY#,HOLD, 
FLT#,ERROR#,BUSY#, 


PEREQ,D0=D15) 


LEGEND 

A — Maximui Output Delay Spec 
B — Minimum Output Delay Spec 
C — Minimum Input Setup Spec 
D — Minimum Input Hold Spec 


Intel386™ SX MICROPROCESSOR 


as minimums, defining the smallest acceptable sam- 
pling window. Within the sampling window, a syn- 
chronous input signal must be stable for correct op- 
eration. 


Outputs ADS#, W/R#, D/C#, M/IO#, LOCK#, 
BHE#, BLE#, Ao3-A; and HLDA only change at 
the beginning of phase one. D15-Do (write cycles) 
only change at the beginning of phase two. The 
READY#, HOLD, BUSY#, ERROR#, PEREQ, 
FLT # and Dys5-Dp (read cycles) inputs are sampled 
at the beginning of phase one. The NA#, INTR and 
NMI inputs are sampled at the beginning of phase 
two. 


VALID 
OUTPUT n+1 


© 
cies 


NJ \4 
VALID 4 ay PAY 1 sy VALID 
OUTPUT n f\\W N OUTPUT n+1 


¢ \ 
1.5V . bes 1.5V RY 


240187-35 


_ Figure 7.1. Drive Levels and Measurement Points for A.C. Specifications 
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A.C. SPECIFICATIONS 
Functional operating range: Vcc = 5V +10%; Tcase = 0°C to 100°C 


Table 7.5. Intel386™ SX Microprocessor A.C. Characteristics—33 MHz and 25 MHz 


2 i bl cl 


Min | Max 
Operating Frequency | 4 | 33 [MHz| | Half CLK2 Frequency | 
ae 


feuk2Peiod | 18 | 128 
[cuRzHIGH Tine [625[ 
feuKzwigh Time | 40 | 
feuxzowTime [eas | 
feuxztowtime | 45 | 
feukzraitine |_| 4 
feuK2rise tine | [4 
[s-AsvaaDoly [+ | 18 
[Azs~Ai Float olay | | 20 


BHE#, BLE#, LOCK# 4 
Valid Delay 
BHE#, BLE#, LOCK# 
Float Delay 
W/R#, M/IO#, D/C#, 15 
ADS # Valid Delay 
W/R#, M/IO#, D/C#, 
ADS # Float Delay 
D15—-Dpo Write Data 
Valid Delay 


“eauresaeay 


CL = 50 pF(4, 5) 


ty2q =| D15-Do Write Data C, = 50 ahah 


Hold Time 


D15-Dpo Write Data 17 
Float Delay 
ana HLDA Valid Delay 


NA# Setup Time 


Cie [Nae Hottie [2 


D15—-Dpo Read Data 

Setup Time 

D45—-Dp Read Data 3 
Hold Time 


N N N 
on rep) on 
ra 
oO 
= 
40) 
nck 
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Functional operating range: Voc = 5V +10%; Tcase = 0°C to 100°C 


Intel386™ SX MICROPROCESSOR 


Table 7.5. intel386™ SX Microprocessor A.C. Characteristics—33 MHz and 25 MHz (Continued) 


[e | HOLD Soup Time 
Tx | HOLDHoldTime 
[tes | RESET Sup Time 
[tee | RESETHod Tine 


NMI, INTR Hold Time 
PEREQ, ERROR#, BUSY #, 
FLT # Setup Time 

PEREQ, ERROR#, BUSY #, 
FLT # Hold Time 


NOTES: 


33 MHz 25 MHz 
Parameter intel386 SX intel386 SX 


a [a [ 
eee 
oe an 
Ss Taam 
7: 
ra. savy ino [3 | [6 | 
ee en 
Bea i el ee 


(Note 2) 
ra Tw 2 


/ ns 
| ns 
prs 
BE ee 
ns 
ie 


1. Float condition occurs when maximum output current becomes less than |,o in magnitude. Float delay is not 100% 


tested. 


2. These inputs are allowed to be asynchronous to CLK2. The setup and hold specifications are given for testing purposes 


to assure recognition within a specific CLK2 period. 
3. These are not tested. They are guaranteed by design characterization. 


4. Tested with CL set at 50 pF. See Figures 7 and 8 for load capacitance derating curve. 


5. Minimum time not 100% tested. 


Table 7.6. Low Power (LP) Intel386™ SX Microprocessor A.C. Characteristics—33 MHz and 25 MHz 


25 MHz 
Intel386 SX 


i 
N 


33 MHz 
Parameter intel386 SX 


|__| Operating Frequency _ 
tes [cuKeHGHTn® 
ie fouReniGatine | 4 
tee | CLK2LOW Tine 
Tu [ouKoFarTine 
| ts | CLK2 Rise Time 

| tg | Agg—A; Valid Delay 
Ao3-Aj Float Delay 


BHE#, BLE#, LOCK# 
Valid Delay 


‘ 


BHE#, BLE#, LOCK# 
Float Delay 


z . 


ASS 


+} lle | ele]s|&]s|6/ 
=| slels]-[+| | | | lalele 
oh lelel | lel l+-fel-le 
*| slels|-[+| | | | [alale 


(Note 1) 


7.6 (Note 1) 
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Functional operating range: Vcc = 5V +10%; Tcase = 0°C to 100°C 


Table 7.6. Low Power (LP) Intel386™ SX Microprocessor 
A.C. Characteristics—33 MHz and 25 MHz (Continued) 


33 MHz 25 MHz 
Parameter Intel386 SX Intel386 SX 
W/R#, M/IO#, D/C#, 4 17 Le C, = 50 pF(4) 
ADS # Valid Delay 
ty4 W/R#, M/IO#, D/C#, 4 7.6 (Note 1) 
ADS # Float Delay : 
tio D15—-Do Write Data tg Z 75 C, = 50 pF(4, 5) 
Valid Delay 
ti24 D45—-Dpo Write Data C. = 50 pF(4) 
Hold Time 
ti3 D45—-Dpo Write Data 4 17 4 7.6 (Note 1) 
Float Delay 


s [fs | || 76 [= sono 
[NA Soup Time 


NA# Setup Time 


NA# Hold Time 
READY # Setup Time 
READY # Hold Time 


D15-Do Read Data 
Setup Time 
D45-Do Read Data 
Hold Time 


PEREQ, ERROR #, BUSY #, 
FLT # Setup Time 
PEREQ, ERROR #, BUSY #, 
FLT # Hold Time 
NOTES: 


1. Float condition occurs when maximum output current becomes less than I_o in magnitude. Float delay is not 100% 
tested. 

2. These inputs are allowed to be asynchronous to CLK2. The setup and hold specifications are given for testing purposes 
to assure recognition within a specific CLK2 period. 

3. These are not tested. They are guaranteed by design characterization. 

4. Tested with CL set at 50 pF. See Figures 7 and 8 for load capacitance derating curve. 

5. Minimum time not 100% tested. 


t14 
t15 
tie 
tig 
to1 
t24 
to7 


BAS 
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Functional operating range: Vcc = 5V +10%; Tcase = 0°C to 100°C 


Table 7.7. Intel386™ SX A.C. Characteristics—20 MHz and 16 MHz 


20 MHz 16 MHz 
Parameter Intel386 SX intel386 SX Notes 


2 
oe 


ns 

ns 
ns 
pms | 79 [atv 
ins | 73 |atosve 
ns 
ns 


ty 


Ba 
[oueWGHTine [5 
a 

at 0.8V(3) 


CLK2 LOW Time 
ee! (Vcc —0.8)V to 0.8V(3) 


[eukeLowtime | 6 
[our raitime | 
a 
Pee [ns [75 [= 1209 


ts CLK2 Rise Time 
i7 | AaanAi Float Delay [40 | ns | 76 | Note 


BHE#, BLE#, LOCK# 4 
Valid Delay 
BHE#, BLE#, LOCK# 4 
Float Delay 


ts _| Azg—A1 Valid Delay 
75 |C, = 75 pF) 
tioa | M/IO# D/C# Valid Delay ‘a: 
y 


«33 7.5 | Cy = 75 pF(4) 
tiob | W/R#, ADS# Valid Dela 
ty W/R#, M/IO#, D/C#, 35 7.6 | (Note 1) 
ADS # Float Delay 
tio D45—-Do Write Data “ 8 4 40 7.5 | Cy = 120 pF(4) 
Valid Delay 
D15—-Do Write Data 4 27 4 35 7.6 | (Note 1) 
Float Delay 
HLDA Valid Delay 4 | 2 | 4'| 33 | ns | 75 | C= 75 pr 


NA# Setup Time 
NA# Hold Time 


w 
3 


oe) Dw) o*) © | © | a. 
of; NT COINnTsS el 


READY # Setup Time 
READY # Hold Time 


D45-Dp Read Data 
Setup Time 
D45-Dp Read Data 
Hold Time 


=k 
i<e) 
a | 
Hos 


N 


—_ 


t13 
t14 
t15 
t16 
tig 
t20 
tor 
tog 
to4 
to5 
t26 
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Functional operating range: Vcc = 5V +10%; Toase = 0°C to 100°C 


Table 7.7. Intel386™ SX A.C. Characteristics—20 MHz and 16 MHz (Continued) 


20 MHz 16 MHz 
Parameter Intel386 SX intel386 SX 


NMI, INTR Setup Time 


| tag | NMI, INTR Hold Time 


ae i oe 
1D | OD 


arg 
(o> a me) 


PEREQ, ERROR #, BUSY #, 14 
FLT # Setup Time 

PEREQ, ERROR #, BUSY #, 
FLT # Hold Time 


Table 7.8. Low Power (LP) Intel386™ SX A.C. Characteristics—20 MHz, 16 MHz and 12 MHz 


20 MHz 16 MHz 12 MHz 
Parameter Intel386 SX | Intel386 SX | Intel386 SX 


Min | Max | Min 

Operating Frequency | 2 | 20 | 2 
CLK2Period | 25 | 250 | 31 
CLK2HIGHTime | @ | | 9 
CuKeHIGHTime | 5 | | 5 
CuKetowTime | @ | | 9 
Oe5 

2. 

eee 


(Note 2) 


Half CLK2 Frequency 


7.3 |at 2V (Note 3) 
7.3 |at (Vcc — 0.8V)(S) 


N 


a 
a) 


oO 


— 
—k 


{ee 
pe) 

_ 
ne) 
= 
A 


cuKeLOWTime | 6 
cuKeraitine | 
CLK2 Rise Time | 
we 
ray 


NI NIN 
oe) 
=. 
ad 
0 
= 
£ 


3 |(Voc — 0.8V) to 0.8V(3) 
| 7.3. |0.8V to (Voc — 0.8V)(3) 
7.5 |CL = 120 pF() 


N 


tg |Ao3—-Ay Valid Delay 
Ao3-A; Float Delay 


BHE#, BLE#,LOCK#} 4 30 4 
Valid Delay 


fe 

| tea | 

tay | 

[taza | 

tap 

Le 

aoe 

 fg- = 
a 
Pe eee 4 

Float Delay 
A te 


| 32 | 4 


pllh (ag 
on | 
za 
ie) 
+ 
140) 
as 


?) 
= 
I 
~ 
oO 
50] 
o 


~ Piss 
on o>) 
a 

Oo 

+ 

_@ 

er 


M/lO#, D/C#, W/R#, 30 

ADS # Float Delay 

D15-D0 Write 4 38 4 
Data Valid Delay 

D15-D0 Write 4 

Data Float Delay 

HLDA ValidDelay | 4 | 28] 6 | 


NA# SetipTine | 5 | 
NA@HoWdTime [v2 | | 2 


7.6 |(Note 1) 


7.5 |C, = 120 pF(4) 


M/lO#, D/C#, W/R#, 28 
ADS # Valid Delay 


£ 
ine) 


NO 
Go ie) & ie) ie) = wo a tt 


©) 
BS 
I 
~ 
oO 
so) 
a) 
= 


ajaja| @| a] 2) a] a) alalalalalalalalalals| & 
=e 


oo ms On oo wD IN olpA]A nO 
oo ° ° on oo ° || 
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Functional operating range: Vcc = 5V+10%; Tcase = 0°C to 100°C 


Table 7.8. Low Power (LP) Intel386™ SX 
A.C. Characteristics—20 MHz, 16 MHz and 12 MHz (Continued) 


20 MHz 16 MHz 
Parameter Iintel386 SX | Intel386 SX 


rin | Max 
ro] [wo] [wl] 
“¢ YR 


co 
ai 
READY#HoldTime «|| «| 


i 
| teo i 
D15-D0 Read Data 
pe lemme 
= fe 
Hold Time 
[tes [HOLDSewpTime | 7 | | | 
| 
tas [REseTHodTime | «| | «| |6|  |ns|77| 
i 
os ses 


— —_ — 


if [re { [16 [ [ne] 7a [moto 
[NMLINTRHoIGTINe [16] | 6 | | | [ns | 74 


PEREQ, ERROR#, BUSY#,| 14 16 16 7.4 

FLT # Setup Time 
PEREQ, ERROR #, BUSY #, 7.4 | (Note 2) 
FLT # Hold Time 
NOTES: 


1. Float condition occurs when maximum output current becomes less than I_o in magnitude. Float delay is not 100% 
tested. 

2: These inputs are allowed to be asynchronous to CLK2. The setup and hold specifications are given for testing purposes, 
to assure recognition within a specific CLK2 period. 

3: These are not tested. They are guaranteed by design characterization. 

4: Tested with C, set at 50 pf and derated to support the indicated distributed capacitive load. See Figures 7.8 though 7.10 
for the capacitive derating curve. 


= 
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A.C. TEST LOADS A.C. TIMING WAVEFORMS 


Intel386™™ sx CPU 


OUTPUT 


q 
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Figure 7.2. A.C. Test Loads Figure 7.3. CLK2 Waveform 
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$2 
CLK2 [ : 


© 20) 
rearvy | NOOK | 

23) e4 
Horo | SOK AM 

DO 


er ae AY SD 
BUSY#, 29 0) 
"PEREO BAY Gea aD VS 
+1319 
Nae | WKN 
+4) >|) —~ 
NN WKN 
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Figure 7.4. A.C. Timing Waveforms—Input Setup and Hold Timing 


CLK2 § 


MIN MAX 

ae HOCKS VALID n RAK VALID n#1 
W/R#,M/I0#, ev poi eh etd an 

D/C#, ADS# VALID n RAK VALID n#1 
©)-—haw | Max 

A1-A23 ’ VALID n RAK VALID n#1 

, 02) MIN MAX 
aa ZETD ANN ZEEE 


HLDA i 
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Figure 7.5. A.C. Timing Waveforms—Output Valid Delay Timing 
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CLK2 i 


BHE#,BLE#, 
LOCK# 


W/R#, M/l0#, 
D/C#, ADS# 


A1-A23 [ 


DO=-D15 I 


ALSO APPLIES TO DATA FLOAT WHEN WRITE 
CYCLE IS FOLLOWED BY READ OR IDLE 


14 MIN MAX 4 |_| MIN 
HLDA | WLLL RAY 


MAX 
N 
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Figure 7.6. A.C. Timing Waveforms—Output Float Delay and HLDA Valid Delay Timing 
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Figure 7.7. A.C. Timing Waveforms—RESET Setup and Hold Timing and Internal Phase 


1-389 


Intel386™ SX MICROPROCESSOR 


OUTPUT VALID DELAY (ns) 


-_ 
” 
c 

~ 

< 
lal 

a 

2 

a 

< 

> 

— 

—_ 

a 

= 

= | 

oO 


100 150 To 100 125 150 
C, (picofarads) C, (picofarads) 
240187-42 240187-43 
Figure 7.8. Typical Output Valid Delay versus i alae WA ee Mati apes i 
Load Capacitance at Maximum Operating oad Capacitance at Maximum Operating 


Temperature (C, = 120 pF) Temperature (C, = 75 pF) 


RISE TIME (ns) 0.8V = 2.0V 


75 100 150 
C, (picofarads) 
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Figure 7.10. Typical Output Rise Time versus 
Load Capacitance at Maximum Operating 
Temperature 


Typical log 


CHMOS IV 


10 12 14 16 18 20 
Clock Speed (MHz) 


240187-45 


Figure 7.11. Typical icc vs Frequency 
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Figure 7.13. Preliminary ICET™-Intel386™ SX Emulator User Cable with OIB and PQFP Adapter 


7.5 Designing for the 
ICETM-iIntel386™ SX Emulator 


ICE-Intel386 SX is the in-circuit emulator for the In- 
tel886™ SX CPU. The ICE-386 SX emulator pro- 
vides a 100-pin fine pitch flat-pack probe for connec- 
tion to a socket located on the target system. 


Sockets that accept this probe are available from 


3M (part #2-0100-07243-000) or from AMP (part . 


#821959-1 and part #821949-4). The ICE-386 SX 
emulator probe attaches to the target system via an 
adapter that replaces the Intel386 SX component in 
the target system. 
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Due to the high operating frequency of Intel886 SX 
CPU based systems, there is no buffering between 
the Intel886 SX emulation processor (on the emula- 
tor probe) and the target system. A direct result of 
the non-buffered interconnect is that the ICE- 
Intel386 SX emulator shares the address and data 
busses with the target system. 


In order to avoid problems with the shared bus and 
maintain signal integrity, the system designer must 
adhere to the following guidelines: 


1. The bus controller must only enable data trans- 
ceivers onto the data bus during valid read cycles 
(initiated by assertion of ADS#) of the Intel386 
SX CPU, other local devices or other bus mas- 
ters. 


2. Before another bus master drives the local proc- 
essor address bus, the other master must gain 
control of the address bus by asserting HOLD 
and receiving the HLDA response. 


3. The emulation processor receives the RESET 
signal 2 or 4 CLK2 cycles later than an Intel386 
SX CPU would, and responds to RESET later. 
Correct phase of the response is guaranteed. 


In order to avoid problems that might arise due to 
the shared busses, an Optional use Isolation Board 
(OIB) is included with the emulator hardware. The 
OIB may be used to provide buffering between the 
emulation processor and the target system, but in- 
serts a delay of approximately 10 ns in signal path. 


In addition to the above considerations, the 
ICE-386 SX emulator processor module has several 
electrical and mechanical characteristics that should 
be taken into consideration when designing the 
Intel886 SX CPU system. - 


Capacitive Loading: ICE-Intel386 SX adds up to 27 
pF to each Intel386 SX CPU signal. 


Drive Requirements: ICE-Iintel386 SX adds one 
FAST TTL load on the CLK2, control, address, and 
data lines. These loads are within the processor 
module and are driven by the Intel3886 SX CPU emu- 
lation processor, which has standard drive and load- 
ing capability listed in Tables 7.3 and 7.4. 


Power Requirements: For noise immunity and 
CMOS latch-up protection the ICE-Intel386 SX emu- 
lator processor module is powered by the user sys- 
tem. 


The circuitry on the processor module draws up to 


1.4A including the maximum Intel3886 SX CPU Icc 
from the user Intel386 SX CPU socket. 
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Intel386 SX CPU Location and Orientation: The 
ICE-Intel386 SX emulator processor module may re- 
quire lateral clearance. Figure 7.12 shows the clear- 
ance requirements of the iMP adapter. The optional 
isolation board (OIB), which provides extra electrical 
buffering and has the same lateral clearance re- 
quirements as Figure 7.12, adds an additional 0.5 
inches to the vertical clearance requirement. This is 
illustrated in Figure 7.13. 


Optional Isolation Board (OIB) and the CLK2 
speed reduction: Due to the unbuffered probe de- 
sign, the ICE-Intel386 SX emulator is susceptible to 
errors on the user’s bus. The OIB allows the ICE- 
Intel386 SX emulator to function in user systems 
with faults (shorted signals, etc.). After electrical ver- 
ification the OIB may be removed. When the OIB is 
installed, the user system must have a maximum 
CLK2 frequency of 20 MHz. 


8.0 DIFFERENCES BETWEEN THE 
Intel386™ SX CPU AND THE 
Intel386™ DX CPU 


The following are the major differences between the 
Intel386 SX CPU and the Intel886 DX CPU: 


1. The Intel886 SX CPU generates byte selects on 
BHE# and BLE# (like the 8086 and 80286) to 
distinguish the upper and lower bytes on its 16-bit 
data bus. The Intel886 DX CPU uses four byte 
selects, BEO #-BE3*#, to distinguish between the 
different bytes on its 32-bit bus. 


2. The Intel386 SX CPU has no bus sizing option. 
The Intel386 DX CPU can select between either 
a 32-bit bus or a 16-bit bus by use of the BS16# 
input. The Intel386 SX CPU has a 16-bit bus size. 


3. The NA# pin operation in the Intel886 SX CPU is 
identical to that of the NA# pin on the Intel386 
DX CPU with one exception: the Intel886 DX CPU 
NA# pin cannot be activated on 16-bit bus cy- 
cles (where BS16# is LOW in the Intel886 DX 
CPU case), whereas NA# can be activated on 
any Intel386 SX CPU bus cycle. 


4. The contents of all Intel886 SX CPU registers at 
reset are identical to the contents of the Intel386 
DX CPU registers at reset, except the DX regis- 
ter. The DX register contains a component-step- 
ping identifier at reset, i.e. 


in Intel3886 DX CPU, DH = 3 indicates Intel386 
DX CPU after reset 

DL = revision number; 
in Intel886 SX CPU, DH = 23H indicates 
Intel386 SX CPU after reset 

DL = revision number. 


intel. 


5. The Intel886 DX CPU uses A3; and M/IO# as 
selects for the numerics coprocessor. The 
Intel386 SX CPU uses Ag3 and M/IO# as selects. 


6. The Intel886 DX CPU prefetch unit fetches code 
in four-byte units. The Intel886 SX CPU prefetch 
unit reads two bytes as one unit (like the 80286). 
In BS16 mode, the Intel886 DX CPU takes two 
consecutive bus cycles to complete a prefetch re- 
quest. If there is a data read or write request after 
the prefetch starts, the Intel886 DX CPU will fetch 
all four bytes before addressing the new request. 


7. Both Intel386 DX CPU and Intel886 SX CPU have 
the same logical address space. The only differ- 
ence is that the Intel886 DX CPU has a 32-bit 
physical address space and the Intel3886 SX CPU 
has a 24-bit physical address space. The Intel386 
SX CPU has a physical memory address space of 
up to 16 megabytes instead of the 4 gigabytes 
available to the Intel886 DX CPU. Therefore, in 
Intel386 SX CPU systems, the operating system 
must be aware of this physical memory limit and 
should allocate memory for applications programs 
within this limit. If a Intel886 DX CPU system uses 
only the lower 16 megabytes of physical address, 
then there will be no extra effort required to mi- 
grate Intel386 DX CPU software to the Intel386 
SX CPU. Any application which uses more than 
16 megabytes of memory can run on the Intel386 
SX CPU if the operating system utilizes the 
Intel386 SX CPU’s paging mechanism. In spite of 


this difference in physical address space, the: 


Intel886 SX CPU and Intel386 DX CPU can run 
the same operating systems and applications 
within their respective physical memory con- 
straints. 


8. The Intel386 SX has an input called FLT # which 
tri-states all bidirectional and output pins, includ- 
ing HLDA#, when asserted. It is used with ON 
Circuit Emulation (ONCE). In the Intel886 DX 
CPU, FLT # is found only on the plastic quad flat 
package version and not on the ceramic pin grid 
array version. For a more detailed explanation of 
FLT# and testability, please refer to section 5.4. 


9.0 INSTRUCTION SET 


This section describes the instruction set. Table 9.1 
lists all instructions along with instruction encoding 
diagrams and clock counts. Further details of the 
instruction encoding are then provided in the follow- 
ing sections, which completely describe the encod- 
ing structure and the definition of all fields occurring 
within instructions. 


9.1 Intel386™ SX CPU Instruction 
Encoding and Clock Count 
Summary 


To calculate elapsed time for an instruction, multiply 
the instruction clock count, as listed in Table 9.1 be- 


Intel386™ SX MICROPROCESSOR 


low, by the processor clock period (e.g. 62.5 ns 
for an Intel3886 SX Microprocessor operating at 
16 MHz). The actual clock count of an Intel3886 SX 
Microprocessor program will average 5% more than 
the calculated clock count due to instruction se- 
quences which execute faster than they can be 
fetched from memory. 


Instruction Clock Count Assumptions . 


1. The instruction has been prefetched, decoded, 
and is ready for execution. 


2. Bus cycles do not require wait states. 


3. There are no local bus HOLD requests delaying 
processor access to the bus. 


4. No exceptions are detected during instruction ex- 
ecution. 


5. If an effective address is calculated, it does not 
use two general register components. One regis- 
ter, scaling and displacement can be used within 
the clock counts shown. However, if the effective 
address calculation uses two general register 
components, add 1 clock to the clock count 
shown. 


Instruction Clock Count Notation 


1. If two clock counts are given, the smaller refers to 
a register operand and the larger refers to a mem- 
ory operand. 


2. n = number of times repeated. 


3. m = number of components in the next instruc- 
tion executed, where the entire displacement (if 
any) counts as one component, the entire imme- 
diate data (if any) counts as one component, and 
all other bytes of the instruction and prefix(es) 
each count as one component. 


Misaligned or 32-Bit Operand Accesses 


— lf instructions accesses a misaligned 16-bit oper- 
and or 32-bit operand on even address add: 
2* clocks for read or write 
4** clocks for read and write 


— If instructions accesses a 32-bit operand on odd 
address add: 
4* clocks for read or write 
8** clocks for read and write 


Wait States 


Wait states add 1 clock per wait state to instruction 
execution for each data access. 
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Table 9-1. Instruction Set Clock Count Summary 


INSTRUCTION FORMAT Protected 
Virtual 
Address 

Mode 

GENERAL DATA TRANSFER 

MOV = Move: 

Register to Register/Memory 1000100w |modreg~=s§ r/m 

Register/Memory to Register . 1000101w | modreg r/m 

Immediate to Register/Memory 1100011w {|mod000 1r/m| immediate data 

Immediate to Register (short form) 1011Ww reg | immediate data 

Memory to Accumulator (short form) 1010000w | full displacement 

Accumulator to Memory (short form) 1010001w | full displacement 


Register Memory to Segment Register 10001110 {| modsreg3 r/m 


Segment Register to Register/Memory 10001100 | modsreg3 r/m 
MOVSX = Move With Sign Extension 
Register From Register/Memory 00001111 r/m 


MOVZX = Move With Zero Extension 


Be 
a) 
3 


Register From Register/Memory 00001111 1011011Ww 
PUSH = Push: 
Register/Memory 110 r/m 
Register (short form) 01010 reg 
Segment Register (ES, CS, SS or DS) 

(short form) 0.00 sreg2 110 
ae? aa iB) BR SS, Sy 00001111 | 10sreg3000 
Immediate 011010s0 | immediate data 
PUSHA = Push All 01100000 
POP = Pop 
Register/Memory | 40001111 | mod000 r/m 
Register (short form) 01011 reg 
Segment Register (ES, CS, SS or DS) 

(short form) 000 sreg’2 1.11 
Ee T5001 574: "| 1eeey 004 
POPA = Pop All 01100001 


XCHG = Exchange 


& 
= 
3 


Register/Memory With Register 1000011w | mod 

Register With Accumulator (short form) 10010 reg Clk Count 
IN = Input from: ee 
Fixed Port 1 4110010w | portnumber | +26 
Variable Port +27 
OUT = Output to: 

Fixed Port |1110011w | portnumber | 124 
Variable Port 25 
LEA = Load EA to Register 
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Table 9-1. Instruction Set Clock Count Summary (Continued) 


CLOCK COUNT NOTES 


INSTRUCTION 


SEGMENT CONTROL 

LDS = Load Pointer to DS 

LES = Load Pointer to ES 

LFS = Load Pointer to FS 

LGS = Load Pointer to GS 

LSS = Load Pointer to SS 

FLAG CONTROL 

CLC = Clear Carry Flag 

CLD = Clear Direction Flag 

CLI = Clear Interrupt Enable Fiag 
CLTS = Clear Task Switched Flag 
CMC = Complement Carry Flag 
LAHF = Load AH into Flag 

POPF = Pop Flags 

PUSHF = Push Flags 

SAHF = Store AH into Flags 

STC = Set Carry Flag 

STD = Set Direction Flag 

STI = Set Interrupt Enable Flag 


ARITHMETIC 
ADD = Add 


Register to Register 

Register to Memory 

Memory to Register 

Immediate to Register/Memory 
Immediate to Accumulator (short form) 
ADC = Add With Carry 

Register to Register 

Register to Memory 

Memory to Register 

Immediate to Register/Memory 
Immediate to Accumulator (short form) 


INC = Increment 


Register/Memory 
Register (short form) 
SUB = Subtract 


Register from Register 


FORMAT Address | Protected 


Mode or Virtual 
Virtual Address 
8086 Mode 

Mode 


11000101 | modreg r/m 26*/28* 


11000100 | modreg r/m 26*/28* 


10110100 29°/31° 
10110101 26° /28" 
10110010 26*/28° 


00001111 


00001111 


00001111 


11111000 
11111100 
11111010 
00001111 00000110 
17130101 
10011111 
10011101 
10011100 
10011110 
TTT7 71001 
TTA 9:101 


11977011 


000000dw | modreg r/m 


0000000w | modreg r/m 


0000001w | modreg r/m 


100000sw | mod000_ 1r/m|] immediate data 


0000010w immediate data 


000100dw | modreg r/m 


0001000w | modreg r/m 


0001001w | modreg r/m 


100000sw |mod010 r/m] immediate data 


0001010w immediate data 


1111111W |mod000 1r/m 


01000 reg 


001010dw | modreg r/m 


Address Protected 


Mode or Virtual 
Virtual Address 
8086 Mode 

Mode 
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Table 9-1. instruction Set Clock Count Summary (Continued) 


INSTRUCTION 


ARITHMETIC (Continued) 
Register from Memory 
emory from Register 


mmediate from Register/Memory 


mmediate from Accumulator (short form) 


SBB = Subtract with Borrow 


emory from Register 


mmediate from Register/Memory 


mmediate from Accumulator (short form) 


DEC = Decrement 


mmediate with Register/Memory 


immediate with Accumulator (short form) 


EG = Change Sign 
AAA = ASCII Adjust for Add 
AAS = ASCIil Adjust for Subtract 


DAA = Decimal Adjust for Add 


DAS = Decimal Adjust for Subtract 


UL = Multiply (unsigned) 


Accumulator with Register/Memory 
Multiplier-Byte 
-Word 
-Doubleword 
MUL = Integer Multiply (signed) 
Accumulator with Register/Memory 
Multiplier-Byte 
-Word 
-Doubleword 


egister with Register/ Memory 


Multiplier-Byte 
-Word 
-Doubleword 


Register/Memory with Immediate to Register} 011010s1 immediate data 


-Word 
-Doubleword 
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FORMAT 


0010100w 
0010101w 
100000sw 


0010110w 


000110dw 


100000sw 


0001110w 


001110dw 
0011100w 
0011101Ww 


100000sw 


1111011w 


1111011Wwsjmod101 = r/m 


Tea On ae 


mod reg r/ 


r/mi immediate data 


immediate data 


mod reg r/m 


mod reg r/ 


mod reg r/ 


mod111. ¢/ 


Real 
Address 
Mode or 

Virtual 

8086 

Mode 


12-17/15-20* 
12-25/15-28* 
12-41/17-46* 


12-17/15-20* 
12-25/15-28* 
12-41/17-46* 


12-17/15-20* 
12-25/15-28* 
12-41/17-46* 


Protected 
Virtual 
Address 


12-17/15-20* 
12-25/15-28* 
12-41/17-46* 


12-17/15-20* 
12-25/15-28* 
12-41/17-46* 


12-17/15-20* 
12-25/15-28°* 
12-41/17-46* 


13-26/14-27 
13-42/16-45 
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Table 9-1. Instruction Set Clock Count Summary (Continued) 


INSTRUCTION FORMAT 
Virtual 
Address | Virtual | Address 
Mode 


ARITHMETIC (Continued) 
DIV = Divide (Unsigned) 


Accumulator by Register/ Memory 1111011wWsmod110 f/m 


Divisor—Byte 
—Word 
—Doubleword 


IDIV = Integer Divide (Signed) 


Accumulator By Register/Memory 


Divisor—Byte 
—Word 
—Doubleword 


AAD = ASCIil Adjust for Divide 
AM = ASCIil Adjust for Multiply 
BW = Convert Byte to Word 
CWD = Convert Word to Double Word 


LOGIC 


Shift Rotate Instructions 
Not Through Carry (ROL, ROR, SAL, SAR, SHL, and SHR) 


Register/Memory by1_ . 1101000w |mod 


[1101000w |mod TTT _r/m 


mod / 


: 


Register/Memory by CL 1101001w 
Register/Memory by Immediate Count | 1100000w |modTTT  r/mjimmed 8-bit data 
Through Carry (RCL and RCR) 
Register/Memory by 1 1101000w |mod r/ 


/ 


aT 


Register/Memory by CL 


Register/Memory by Immediate Count | 1100000w |modTTT  r/mjimmed 8-bit data 


TTT Instruction 
000 ROL 
001 ROR 
010 RCL 
011 RCR 
100 SHL/SAL 
101 SHR 
111 SAR 


10100100 |modreg _r/mlimmed é-bit data 
10100101 


10101100 |modreg _r/mimmed 8-bit data 
10101101 | 


SHLD = Shift Left Double 
Register/Memory by Immediate 00001111 
Register/Memory by CL 00001111 


SHRD = Shift Right Double 
Register/Memory by Immediate 00001111 


Register/Memory by CL 00001111 


AND = And 
Register to Register 001000dw 


mod reg r/m 
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Table 9-1. Instruction Set Clock Count Summary (Continued) 


Real , Real 
INSTRUCTION FORMAT Address | Protected | Address | Protected 

Mode or Mode or 

Virtual Virtual 

8086 8086 

Mode Mode 


_|LOGIC (Continued) 
Register to Memory 0010000w |modreg r/m 
Memory to Register 0010001w |modreg r/m 


Immediate to Register/ Memory 1000000w |mod100_ r/m| immediate data 


Immediate to Accumulator (Short Form) 0010010w | immediate data 


TEST = And Function to Flags, No Result 


Register/Memory and Register 1000010w |modreg r/m 


Immediate Data and Register/Memory 1111011w |mod000_ 1r/m| immediate data 


Immediate Data and Accumulator 
(Short Form) 1010100w | immediate data 


OR = Or 
Register to Register 000010dw 


mod reg r/m 


Register to Memory 0000100w |modreg r/m 


Memory to Register 0000101w |modreg r/m 


Immediate to Register/Memory 1000000w |mod001_ r/m| immediate data 


Immediate to Accumulator (Short Form) 0000110w | immediate data 
XOR = Exclusive Or 


Register to Register 001100dw |modreg r/m 


Register to Memory 0011000w |modreg r/m 


Memory to Register 0011001w |modreg r/m 


mod110 _ r/m| immediate data 


Immediate to Register/ Memory 1000000w 


Immediate to Accumulator (Short Form) 0011010w | immediate data 


NOT = Invert Register/Memory 1111011w |mod010 f/m 


Clik 
STRING MANIPULATION Count 
Virtual 


CMPS = Compare Byte Word 1010011w Bead h 


INS = Input Byte/Word from DX Port 0110110w 9*/29** s/t,h,m 
LODS = Load Byte/Word to AL/AX/EAX| 1010110w | 5* h 
MOVS = Move Byte Word 1010010w Fa h 
OUTS = Output Byte/Wordto DX Port | 0110111w 8*/28" s/t, h, m 
SCAS = Scan Byte Word 1010111Ww ia h 
STOS = Store Byte/Word from 


AL/AX/EX 1010101Ww 


XLAT = Translate String 11010111 


REPEATED STRING MANIPULATION 
Repeated by Count in CX or ECX 


REPE CMPS = Compare String 
(Find Non-Match) PLLC TS 


1010011w 
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Table 9-1. Instruction Set Clock Count Summary (Continued) 


CLOCK COUNT NOTES 


INSTRUCTION FORMAT 
Virtual 
Address 
Mode 


REPEATED STRING MANIPULATION (Continued) 
REPNE CMPS = Compare String 
(Find Match) 5+9n** 5+9n** 


REP INS = Input String 13+6n* | 7+6n*/ s/t, h,m 
27+6n* 


REP LODS = Load String 11110010 5+6n* 5+6n* 


REP MOVS = Move String 11110010;,1010010w 7+4n* 7+4n** 


REP OUTS = Output String 12+5n* 6+ 5n*/ s/t, h,m 


26+ 5n* 


REPE SCAS = Scan String 
(Find Non-AL/AX/EAX) 11470011 


REPNE SCAS = Scan String 


(Find AL/AX/EAX) 11110010;]1010111Ww 


REP STOS = Store String 1010101wW 


BIT MANIPULATION 


g 
3 


BSF = Scan Bit Forward 00001111 10+ 3n* 10+3n** 


BSR = Scan Bit Reverse 00001111{10111101 jmodreg- r/ 10+3n* 10+ 3n** 


BT = Test Bit 
Register/Memory, Immediate 00001111 100 r/mimmed 8-bit data 


: 
S 


Register/Memory, Register 00001111})]10100011 


BTC = Test Bit and Compiement 
Register/Memory, Immediate 00001111]10111010 


: 
= 
a 
? 
% 
: 


= 
~ 


Register/Memory, Register 00001111 


BTR = Test Bit and Reset 
Register/Memory, Immediate 00001111] 10111010 |mod110 = r/mlimmed 


? 
g 
S 


r/ 


3 
a 
& 


Register/Memory, Register 00001111 


BTS = Test Bit and Set 
Register/Memory, Immediate 00001111 r/mim 


: 
d 


8-bit date 


Register/Memory, Register 00001111 modreg ss r/ 


CONTROL TRANSFER 
CALL = Call 
Direct Within Segment 11101000 | full displacement 


Register/Memory 
Indirect Within Segment : i ee 


mod010 = fr/ 7+m*/10+m* 


Direct Intersegment 10011010 Junsigned full offset, selector 


NOTE: 
+t Clock count shown applies if 1/O permission allows I/O to the port in virtual 8086 mode. If 1/O bit map denies permission 
exception 13 fault occurs; refer to clock counts for INT 3 instruction. 
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Table 9-1. Instruction Set Clock Count Summary (Continued) 


CLOCK COUNT NOTES 


INSTRUCTION FORMAT Protected | Address | Protected 
. Virtual 
Address 
Mode 


ONTROL TRANSFER (Continued) 
Protected Mode Only (Direct Intersegment) 


Via Call Gate to Same Privilege Level h, j,k, 
Via Call Gate to Different Privilege Level, 

(No Parameters) h,j,k,r 
Via Call Gate to Different Privilege Level, 

(x Parameters) h,j,K,r 
From 286 Task to 286 TSS hj kr 
From 286 Task to Intel386™ SX CPU TSS h,j,k,r 
From 286 Task to Virtual 8086 Task (Intel386 SX CPU TSS) h,j,k,r 
From Intel386 SX CPU Task to 286 TSS hj. kr 
From Intel886 SX CPU Task to Intel886 SX CPU TSS h,j,. kr 
From Intel386 SX CPU Task to Virtual 8086 Task (Intel386 SX CPU TSS) h,j,k,r 


Indirect Intersegment 11111111 |[mod011 r/m| h,j,k,r 


rotected Mode Only (Indirect Intersegment) 
Via Call Gate to Same Privilege Level 68+m h,j,k,r 
Via Call Gate to Different Privilege Level, 

(No Parameters) 102+m h,j,k,r 
Via Call Gate to Different Privilege Level, 

(x Parameters) 110+8x+m h,j,k,r 
From 286 Task to 286 TSS h,j,k,r 
From 286 Task to Intel386 SX CPU TSS h,j,k,r 
From 286 Task to Virtual 8086 Task (Intel386 SX CPU TSS) h,j,k,r 
From Intel386 SX CPU Task to 286 TSS h,j,k,r 
From Intel386 SX CPU Task to Intel386 SX CPU TSS h,j,k,r 
From Intel386 SX CPU Task to Virtual 8086 Task (Intel386 SX CPU TSS) h,j,k,r 


MP = Unconditional Jump 
11101011 |8-bit displacement 


Direct within Segment 11101001 | full displacement 


ister/M Indirect 
ee ee 11111111 |mod100 = ¢/ 
ithin Segment 
Direct Intersegment 11101010 |junsigned full offset, selector j,k,r 


rotected Mode Only (Direct Intersegment) 
Via Call Gate to Same Privilege Level h,j,k,r 
From 286 Task to 286 TSS h, j,k, 
From 286 Task to Intel386 SX CPU TSS h,j,k,r 
From 286 Task to Virtual 8086 Task (Intel886 SX CPU TSS) h,j,.k,r 
From Intel386 SX CPU Task to 286 TSS h,j,k,r 
From Intel386 SX CPU Task to Intel386 SX CPU TSS © h,j,k,r 
From Intel386 SX CPU Task to Virtual 8086 Task (Intel886 SX CPU TSS) h,j,k,r 


indirect Intersegment 11111111 |jmod101 r/m h,j,.K,r 


rotected Mode Only (Indirect Intersegment) 
Via Call Gate to Same Privilege Level h,j,k,r 
From 286 Task to 286 TSS h,j,k,r 
From 286 Task to Intel386 SX CPU TSS h,j.K,r 
From 286 Task to Virtual 8086 Task (Intel386 SX CPU TSS) h,j,k,r 
From Intel386 SX CPU Task to 286 TSS h,j,k,r 
From Intel386 SX CPU Task to Intel386 SX CPU TSS h,j,k,r 
From Intel386 SX CPU Task to Virtual 8086 Task (Intel386 SX CPU TSS) h,j,k,r 
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Table 9-1. Instruction Set Clock Count Summary (Continued) 


CLOCK COUNT NOTES 


Real Real 
INSTRUCTION FORMAT Address | Protected Address Protected 
Mode or Virtual Mode or Virtual 
Virtual Address Virtual Address 
8086 Mode 8086 Mode 
Mode Mode 


CONTROL TRANSFER (Continued) 
RET = Return from CALL: 


Within Segment 11000011 g,h,r 


. 


Within Segment Adding Immediate to SP 11000010 16-bit displ g,h,r 


+ 


Intersegment 


g, h, j,k, r 


Intersegment Adding Immediate to SP 11001010 16-bit displ SCHL 


Protected Mode Only (RET): 
to Different Privilege Level 
Intersegment 
Intersegment Adding Immediate to SP 


CONDITIONAL JUMPS 
NOTE: Times Are Jump “Taken or Not Taken” 
JO = Jump on Overflow 


8-Bit Displacement 01110000 


8-bit displ 7+mor3} 7+mor3 


10000000 | full displacement 7+mor3| 7+mor3 


Full Displacement 00001111 


JNO = Jump on Not Overflow 
8-Bit Displacement 01110001 8-bit displ 7+mor3| 7+mor3 


Full Displacement 00001111 10000001 | full displacement 7+mor3} 7+mor3 


JB/JNAE = Jump on Below/Not Above or Equal 
8-Bit Displacement 01110010 8-bit displ 7+mor3} 7+mor3 


Full Displacement 00001111 10000010 | full displacement 7+mor3]| 7+mor3 


JNB/JAE = Jump on Not Below/Above or Equal 
8-Bit Displacement 01110011 


8-bit displ 7+mor3| 7+mor3 
Full Displacement 00001111 10000011 | full displacement 7+mor3}| 7+mor3 


JE/JZ = Jump on Equal/Zero 
8-Bit Displacement 01110100 8-bit displ 7+mor3}| 7+mor3 


Full Displacement 00001111 10000100 | full displacement 7+mor3} 7+mor3 


JNE/JNZ = Jump on Not Equal/Not Zero 
8-Bit Displacement 01770107 8-bit displ 7+mor3}| 7+mor3 


Full Displacement 00001111 10000101 | full displacement 7+mor3| 7+mor3 


JBE/JNA = Jump on Below or Equal/Not Above 
8-Bit Displacement 01110110 8-bit displ 7+mor3} 7+mor3 


Full Displacement 00001111 10000110 | full displacement 7+mor3| 7+mor3 


JNBE/JA = Jump on Not Below or Equal/Above 


8-Bit Displacement OLTIO117 8-bit displ 7+mor3} 7+mor3 


Full Displacement ; 00001111 10000111 | full displacement 7+mor3}| 7+mor3 
JS = Jump on Sign 
8-Bit Displacement 01111000 8-bit displ 7+mor3}| 7+mor3 


Full Displacement 00001111 10001000 | full displacement 7+mor3| 7+mor3 
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Table 9-1. Instruction Set Clock Count Summary (Continued) 


\ Real 
INSTRUCTION FORMAT Address 
Mode or 
Virtual 
8086 
Mode 


CONDITIONAL JUMPS (Continued) 
JNS = Jump on Not Sign 


8-Bit Displacement 8-bit disp! 7+mor3 


Full Displacement 00001111 10001001 | full displacement 7+mor3 


JP/JPE = Jump on Parity/Parity Even 


8-Bit Displacement C1117010 8-bit disp! 7+mor3 


Full Displacement 00001111 10001010 | full displacement 7+mor3 


JNP/JPO = Jump on Not Parity/Parity Odd 


8-Bit Displacement 197110914 8-bit disp! 7+mor3 | 7+mor3 


Full Displacement 00001111 10001011 | full displacement 7+mor3| 7+mor3 


JL/JNGE = Jump on Less/Not Greater or Equal 


8-Bit Displacement 8-bit displ 7+mor3 


Full Displacement 00001111 10001100 | full displacement 7+mor3 


JNL/JGE = Jump on Not Less/Greater or Equal 


8-Bit Displacement 8-bit disp! 7+mor3 


Full Displacement 00001111 10001101 | full displacement 7+mor3 


JLE/JNG = Jump on Less or Equal/Not Greater 


8-Bit Displacement 8-bit disp! 7+mor3 | 7+mor3 


Full Displacement 00001111 10001110 | full displacement 7+mor3| 7+mor3 


JNLE/JG = Jump on Not Less or Equal/Greater 


8-Bit Displacement 8-bit displ 7+mor3 | 7+mor3 


10001111 | full displacement 7+mor3| 7+mor3 


Full Displacement 00001111 


JCXZ = Jump on CX Zero 8-bit disp! 9+mor5| 9+mord 


JECXZ = Jump on ECX Zero 8-bit disp! 9+mor5| 9+morsd 


(Address Size Prefix Differentiates JCXZ from JECXZ) 


LOOP = Loop CX Times 11100010 8-bit disp! 


LOOPZ/LOOPE = Loop with 
Zero/Equal 11100001 8-bit disp! 


LOOPNZ/LOOPNE = Loop While 
Not Zero 11100000 8-bit disp! 


CONDITIONAL BYTE SET 
NOTE: Times Are Register/Memory 


SETO = Set Byte on Overflow 
To Register/Memory 00001111 


10010000 |mod000 f/m 


SETNO = Set Byte on Not Overflow 
To Register/Memory 00001111" 


10010001 |mod000_ fr/m 


10010010 | mod000 fr/m 


SETB/SETNAE = Set Byte on Below/Not Above or Equal 
To Register/Memory | 00001111 
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Table 9-1. Instruction Set Clock Count Summary (Continued) — 


INSTRUCTION FORMAT Protected 
Virtual Virtual 
Address Address 
Mode Mode 
CONDITIONAL BYTE SET (Continued) 
SETNB = Set Byte on Not Below/Above or Equal 
To Register/ Memory 


SETE/SETZ = Set Byte on Equal/Zero 
To Register/Memory 00001111 


SETNE/SETNZ = Set Byte on Not Equal/Not Zero 
To Register/Memory | 00001111 10010101 
SETBE/SETNA = Set Byte on Below or Equal/Not Above 
To Register/Memory | 00001111 10010110 
SETNBE/SETA = Set Byte on Not Below or Equal/Above 
To Register/Memory | 00001111 10010111 |mod000 f/m 
SETS = Set Byte on Sign 


To Register/Memory 00001111 10011000 |mod000 f/m 


SETNS = Set Byte on Not Sign 


To Register/Memory 00001111 10011001 |mod000 f/m 


SETP/SETPE = Set Byte on Parity/Parity Even 
To Register/Memory 00001111 10011010 |mod000 f/m 
SETNP/SETPO = Set Byte on Not Parity/Parity Odd 
To Register/Memory | 00001111 10011011 |mod000 f/m 
SETL/SETNGE = Set Byte on Less/Not Greater or Equal 


To Register/Memory | 00001111 10011100 |mod000 f/m 


SETNL/SETGE = Set Byte on Not Less/Greater or Equal 
To Register/Memory | 00001111 


SETLE/SETNG = Set Byte on Less or Equal/Not Greater 
To Register/Memory | 00001111 modQ00 r/m 
SETNLE/SETG = Set Byte on Not Less or Equal/Greater 


To Register/Memory | 00001111 10011111 |mod000 f/m 


ENTER = Enter Procedure 11001000 | 16-bit displacement, 8-bit level 


L=0 
L=1 
L>1 


LEAVE = Leave Procedure 11001001 
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Table 9-1. Instruction Set Clock Count Summary (Continued) 


INSTRUCTION FORMAT 


INTERRUPT INSTRUCTIONS 
INT = Interrupt: 
Type Specified 


Type 3 


INTO = Interrupt 4 if Overflow Flag Set; 11001110 


IfOF = 1 
IfOF = 0 


Bound = Interrupt 5 if Detect Value 01100010 | modreg r/m 
Out of Range 


If Out of Range e,g,h,j,k,r 
If In Range e, g, h, j,k, r 


Protected Mode Only (INT) 
INT: Type Specified 
Via Interrupt or Trap Gate 
Via Interrupt or Trap Gate 
to Same Privilege Level g, j, k, r 
to Different Privilege Level : g,j, kr 
From 286 Task to 286 TSS via Task Gate G1, KF 
From 286 Task to Intel386™ SX CPU TSS via Task Gate g, j, k, r 
From 286 Task to virt 8086 md via Task Gate 9g, j,k, r 
From Intel386™ SX CPU Task to 286 TSS via Task Gate g, j,k, r 
From Intel386™ SX CPU Task to Intel386™ SX CPU TSS via Task Gate g, j,k, r 
From Intel386™ SX CPU Task to virt 8086 md via Task Gate g, j,k, r 
From virt 8086 md to 286 TSS via Task Gate g, j,k, r 
From virt 8086 md to Intel386™ SX CPU TSS via Task Gate g, j,k, r 
From virt 8086 md to priv level 0 via Trap Gate or Interrupt Gate 


INT: TYPE 3 
Via Interrupt or Trap Gate 
to Same Privilege Level 
Via Interrupt or Trap Gate 
to Different Privilege Level 
From 286 Task to 286 TSS via Task Gate 
From 286 Task to Intel386™ SX CPU TSS via Task Gate 
From 286 Task to Virt 8086 md via Task Gate 
From Intel386™ SX CPU Task to 286 TSS via Task Gate 
From Intel886™ SX CPU Task to Intel386™ SX CPU TSS via Task Gate 
From Intel386™ SX CPU Task to Virt 8086 md via Task Gate 
From virt 8086 md to 286 TSS via Task Gate 
From virt 8086 md to Intel386™ SX CPU TSS via Task Gate 
From virt 8086 md to priv level 0 via Trap Gate or Interrupt Gate 


INTO: 


Via Interrupt or Trap Grate 

to Same Privilege Level 71 
Via Interrupt or Trap Gate 

to Different Privilege Level 111 
From 286 Task to 286 TSS via Task Gate 384 
From 286 Task to Intel386™ SX CPU TSS via Task Gate 411 
From 286 Task to virt 8086 md via Task Gate 328 
From Intel386™ SX CPU Task to 286 TSS via Task Gate Intel386 DX 
From Intel386™ SX CPU Task to Intel386™ SX CPU TSS via Task Gate 413 
From Intel386™ SX CPU Task to virt 8086 md via Task Gate 329 
From virt 8086 md to 286 TSS via Task Gate 391 
From virt 8086 md to Intel386™ SX CPU TSS via Task Gate 418 
From virt 8086 md to priv level 0 via Trap Gate or Interrupt Gate 223 
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Table 9-1. Instruction Set Clock Count Summary (Continued) 


CLOCK COUNT NOTES 


INSTRUCTION FORMAT Address | Protected Protected 
Virtual 
Address 
Mode 


INTERRUPT INSTRUCTIONS (Continued) 
BOUND: 


Via Interrupt or Trap Gate 

to Same Privilege Level g, j,k, r 
Via Interrupt or Trap Gate 

to Different Privilege Level g, j,k, r 
From 286 Task to 286 TSS via Task Gate g,j,k,r 
From 286 Task to Intel386™ SX CPU TSS via Task Gate g, j,k, r 
From 268 Task to virt 8086 Mode via Task Gate g, j,k, r 
From Intel386 SX CPU Task to 286 TSS via Task Gate g, j,k, r 
From Intel886 SX CPU Task to Intel386 SX CPU TSS via Task Gate g, j,k, r 
From Intel886 SX CPU Task to virt 8086 Mode via Task Gate g, j, k, Fr, 
From virt 8086 Mode to 286 TSS via Task Gate g,j,k,r 
From virt 8086 Mode to Intel386 SX CPU TSS via Task Gate g,j,k,r 
From virt 8086 md to priv level 0 via Trap Gate or Interrupt Gate 


INTERRUPT RETURN 


IRET = Interrupt Return 11001111 


Protected Mode Only (IRET) 
To the Same Privilege Level (within task) 
To Different Privilege Level (within task) 
From 286 Task to 286 TSS 
From 286 Task to Intel386 SX CPU TSS 
From 286 Task to Virtual 8086 Task 
From 286 Task to Virtual 8086 Mode (within task) 
From Intel386 SX CPU Task to 286 TSS 
From Intel386 SX CPU Task to Intel386 SX CPU TSS 
From intel386 SX CPU Task to Virtual 8086 Task 
From Intel386 SX CPU Task to Virtual 8086 Mode (within task) 


PROCESSOR CONTROL 


HLT = HALT 11110100 


MOV = Move to and From Control/Debug/Test Registers 


CRO/CR2/CR3 from register 00001111 
Register From CRO-3 00001111 
DRO-3 From Register 00001111 
DR6-7 From Register 00001111 
Register from DR6-7 00001111 
Register from DRO-3 00001111 
TR6-7 from Register 00001111 
Register from TR6-7 00001111 


NOP = No Operation 10010000 | 


WAIT = Wait until BUSY # pinis negated | 10011011 
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Table 9-1. Instruction Set Clock Count Summary (Continued) 


Real 
INSTRUCTION FORMAT Address 
Mode or 
Virtual 
8086 
Mode 


PROCESSOR EXTENSION INSTRUCTIONS 


Processor Extension Escape 11011TTT |modLLL f/m 


TTT and LLL bits are opcode Intel387SX 


information for coprocessor. data sheet for 
clock counts 


PREFIX BYTES 
Address Size Prefix 
LOCK = Bus Lock Prefix | 11110000 
Operand Size Prefix 01100110 
Segment Override Prefix 
CS: 00101110 
DS: 00111110 
ES: 00100110 
FS: 01100100 
GS: 01100101 


SS: 00110110 


PROTECTION CONTROL 
ARPL = Adjust Requested Privilege Level 


From Register/Memory 01100011 20/21°* 


LAR = Load Access Rights 
From Register/Memory 00001111 00000010 | modreg r/m 15/16* g,h, j, p 
LGDT = Load Global Descriptor 


Table Register 00001111 00000001 |mod010 r/m h, | 


LIDT = Load Interrupt Descriptor 


Table Register 00001111 00000001 |mod011 r/m h, | 


LLDT = Load Local Descriptor 


Table Register to 
Register/Memory 00001111 00000000 |mod010 f/m 


LMSW = Load Machine Status Word 
From Register/Memory 00001111 00000001 |mod110 f/m 10/13* 
LSL = Load Segment Limit 


From Register/Memory 00001111 00000011 | mod 


Byte-Granular Limit 20/21* g,h, j, p 
Page-Granular Limit 25/26* g, h, j, p 


LTR = Load Task Register 
From Register/Memory 00001111 00000000 |mod001 f/m 23/27* g, h, j, | 
SGDT = Store Global Descriptor 


Table Register 00001111 00000001 |mod000 f/m 


SIDT = Store Interrupt Descriptor 
Table Register 00001111 00000001 |mod001 f/m 


SLDT = Store Local Descriptor Table Register 
To Register/Memory 00001111 00000000 |mod000 f/m 


& 
i . 
3 
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Table 9-1. Instruction Set Clock Count Summary (Continued) 
| cLockcount | NOTES 


Real Real 
INSTRUCTION FORMAT Address | Protected Address Protected 
Mode or Mode or Virtual 
Virtual Virtual Address 
8086 8086 Mode 


Mode Mode 


PROTECTION CONTROL (Continued) 


= Store Machine 
Status Word 00001111 00000001 |mod100 f/m 
STR = Store Task Register 


To Register/Memory 00001111 00000000 |mod001 f/m 


VERR = Verify Read Access 


Register/Memory 00001111 00000000 |mod100 f/m 
VERW = Verify Write Access 00001111 00000000 |mod101 f/m 


INSTRUCTION NOTES FOR TABLE 9-1 


Notes a through c apply to Real Address Mode only: 

a. This is a Protected Mode instruction. Attempted execution in Real Mode will result in exception 6 (invalid opcode). 

b. Exception 13 fault (general protection) will occur in Real Mode if an operand reference is made that partially or fully 
extends beyond the maximum CS, DS, ES, FS or GS limit, FFFFH. Exception 12 fault (stack segment limit violation or not 
present) will occur in Real Mode if an operand reference is made that partially or fully extends beyond the maximum SS limit. 
c. This instruction may be executed in Real Mode. In Real Mode, its purpose is primarily to initialize the CPU for Protected 
Mode. 


Notes d through g apply to Real Address Mode and Protected Virtual Address Mode: 
d. The Intel886 SX CPU uses an early-out multiply algorithm. The actual number of clocks depends on the position of the 
most significant bit in the operand (multiplier). 
Clock counts given are minimum to maximum. To calculate actual clocks use the following formula: 
Actual Clock = if m < > 0 then max ([logo |ml], 3) + b clocks: 
ifm = 0 then 3+b clocks 
In this formula, m is the multiplier, and 
9 for register to register, 
12 for memory to register, 
10 for register with immediate to register, 
11 for memory with immediate to register. 
e. An exception may occur, depending on the value of the operand. 
f. LOCK# is automatically asserted, regardless of the presence or absence of the LOCK # prefix. 
g. LOCK # is asserted during descriptor table accesses. 


SMSW 


Notes h through s/t apply to Protected Virtual Address Mode only: 

h. Exception 13 fault (general protection violation) will occur if the memory operand in CS, DS, ES, FS or GS cannot be used 
due to either a segment limit violation or access rights violation. If a stack limit is violated, an exception 12 (stack segment 
limit violation or not present) occurs. 

i. For segment load operations, the CPL, RPL, and DPL must agree with the privilege rules to avoid an exception 13 fault 
(general protection violation). The segment’s descriptor must indicate “present” or exception 11 (CS, DS, ES, FS, GS not 
present). If the SS register is loaded and a stack segment not present is detected, an exception 12 (stack segment limit 
violation or not present) occurs. 

j. All segment descriptor accesses in the GDT or LDT made by this instruction will automatically assert LOCK # to maintain 
descriptor integrity in multiprocessor systems. 

k. JMP, CALL, INT, RET and IRET instructions referring to another code segment will cause an exception 13 (general 
protection violation) if an applicable privilege rule is violated. 

|. An exception 13 fault occurs if CPL is greater than 0 (0 is the most privileged level). 

m. An exception 13 fault occurs if CPL is greater than IOPL. 

n. The IF bit of the flag register is not updated if CPL is greater than IOPL. The IOPL and VM fields of the flag register are 
updated only if CPL = 0. 

o. The PE bit of the MSW (CRO) cannot be reset by this instruction. Use MOV into CRO if desiring to reset the PE bit. 

p. Any violation of privilege rules as applied to the selector operand does not cause a protection exception; rather, the zero 
flag is cleared. 

q. If the coprocessor’s memory operand violates a segment limit or segment access rights, an exception 13 fault (general 
protection exception) will occur before the ESC instruction is executed. An exception 12 fault (stack segment limit violation 
or not present) will occur if the stack limit is violated by the operand’s starting address. 

r. The destination of a JMP, CALL, INT, RET or IRET must be in the defined limit of a code segment or an exception 13 fault 
(general protection violation) will occur. 

s/t. The instruction will execute in s clocks if CPL < IOPL. If CPL > IOPL, the instruction will take t clocks. 
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9.2 INSTRUCTION ENCODING 


9.2.1 Overview 


All instruction encodings are subsets of the general 
instruction format shown in Figure 8-1. Instructions 
consist of one or two primary opcode bytes, possibly 
an address specifier consisting of the ‘mod r/m” 
_ byte and “‘scaled index’ byte, a displacement if re- 
quired, and an immediate data field if required. 


Within the primary opcode or opcodes, smaller en- 
coding fields may be defined. These fields vary ac- 
cording to the class of operation. The fields define 
such information as direction of the operation, size 
of the displacements, register encoding, or sign ex- 
tension. 


Almost all instructions referring to an operand in 
memory have an addressing mode byte following 
the primary opcode byte(s). This byte, the mod r/m 
byte, specifies the address mode to be used. Certain 


intel. 


encodings of the mod r/m byte indicate a second 
addressing byte, the scale-index-base byte, follows 
the mod r/m byte to fully specify the addressing 
mode. 


Addressing modes can include a displacement im- 
mediately following the mod r/m byte, or scaled in- 
dex byte. If a displacement is present, the possible 
sizes are 8, 16 or 32 bits. 


If the instruction specifies an immediate operand, 
the immediate operand follows any displacement 
bytes. The immediate operand, if specified, is always 
the last field of the instruction. 


Figure 9-1 illustrates several of the fields that can 
appear in an instruction, such as the mod field and 
the r/m field, but the Figure does not show all fields. 
Several smaller fields also appear in certain instruc- 
tions, sometimes within the opcode bytes them- 
selves. Table 9-2 is a complete list of all fields ap- 
pearing in the instruction set. Further ahead, follow- 
ing Table 9-2, are detailed tables for each field. 


TTTTTTTT|TTTTTTTT| modTTTr/m| ss index base |d32 | 16 | 8 | none data32 | 16 | 8 | none 


0-76 5:9 29 


765320 


re en ae ee ie i eee RR oe 


opcode “mod r/m’”’ 
(one or two bytes) byte 
(T represents an 

opcode bit.) 


=“. " 


ae ee los ae hs ee 


register and address 


address immediate 

byte displacement data 

(4, 2, 1 bytes (4, 2, 1 bytes 
or none) or none) 


mode specifier 


Figure 9-1. General Instruction Format 


Table 9-2. Fields within Instructions 


Field Name Description Number of Bits 


Specifies if Data is Byte or Full Size (Full Size is either 16 or 32 Bits 


Specifies Direction of Data Operation 


Specifies if an Immediate Data Field Must be Sign-Extended 


reg General Register Specifier 
mod r/m 


Address Mode Specifier (Effective Address can be a General Register) 


2 for mod; 
3 forr/m 


ss Scale Factor for Scaled Index Address Mode 


index 


General Register to be used as Index Register 


base General Register to be used as Base Register 


sreg2 
sreg3 


Segment Register Specifier for CS, SS, DS, ES 
Segment Register Specifier for CS, SS, DS, ES, FS, GS 


tttn For Conditional Instructions, Specifies a Condition Asserted 


or a Condition Negated 
Note: Table 9-1 shows encoding of individual instructions. 
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9.2.2 32-Bit Extensions of the 
Instruction Set 


With the Intel386 SX CPU, the 8086/80186/80286 
instruction set is extended in two orthogonal direc- 
tions: 32-bit forms of all 16-bit instructions are added 
to support the 32-bit data types, and 32-bit address- 
ing modes are made available for all instructions ref- 
erencing memory. This orthogonal instruction set ex- 
tension is accomplished having a Default (D) bit in 
the code segment descriptor, and by having 2 prefix- 
es to the instruction set. 


Whether the instruction defaults to operations of 
16 bits or 32 bits depends on the setting of the D bit 
in the code segment descriptor, which gives the de- 
fault length (either 32 bits or 16 bits) for both oper- 
ands and effective addresses when executing that 
code segment. In the Real Address Mode or Virtual 
8086 Mode, no code segment descriptors are used, 
but a D value of 0 is assumed internally by the 
Intel886 SX CPU when operating in those modes 
(for 16-bit default sizes ie: ct with the 8086/ 
80186/80286). 


Two prefixes, the Operand Size Prefix and the Effec- 
tive Address Size Prefix, allow overriding individually 
the Default selection of operand size and effective 
address size. These prefixes may precede any op- 
code bytes and affect only the instruction they pre- 
cede. If necessary, one or both of the prefixes may 
be placed before the opcode bytes. The presence of 
the Operand Size Prefix and the Effective Address 
Prefix will toggle the operand size or the effective 
address size, respectively, to the value “opposite”’ 
from the Default setting. For example, if the default 
operand size is for 32-bit data operations, then pres- 
ence of the Operand Size Prefix toggles the instruc- 
tion to 16-bit data operation. As another example, if 
the default effective address size is 16 bits, pres- 
ence of the Effective Address Size prefix toggles the 
instruction to use 32-bit effective address computa- 
tions. 


These 32-bit extensions are available in all modes, 
including the Real Address Mode or the Virtual 8086 
Mode. In these modes the default is always 16 bits, 
so prefixes are needed to specify 32-bit operands or 
addresses. For instructions with more than one pre- 
fix, the order of prefixes is unimportant. 


Unless specified otherwise, instructions with 8-bit 
and 16-bit operands do not affect the contents of 
the high-order bits of the extended registers. 


9.2.3 Encoding of Instruction Fields 


Within the instruction are several fields indicating 
register selection, addressing mode and so on. The 
exact encodings of these fields are defined immedi- 
ately ahead. 
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9.2.3.1 ENCODING OF OPERAND LENGTH (w) 
FIELD 


For any given instruction performing a data opera- 
tion, the instruction is executing as a 32-bit operation 
or a 16-bit operation. Within the constraints of the 
operation size, the w field encodes the operand size 
as either one byte or the full operation size, as 
shown in the table below. 


Operand Size 
During 16-Bit 
Data Operations 


Operand Size 
During 32-Bit 
Data Operations 


9.2.3.2 ENCODING OF THE GENERAL 
REGISTER (reg) FIELD 


The general register is specified by the reg field, 
which may appear in the primary opcode bytes, or as 
the reg field of the ‘mod r/m” byte, or as the r/m 
field of the ‘mod r/m”’ byte. 


Encoding of reg Field When w Field 
is not Present in Instruction 


Register Selected | Register Selected 
During 16-Bit During 32-Bit 
Data Operations | Data Operations 


reg Field 


Encoding of reg Field When w Field 
is Present in Instruction 


1-409 


intel386™ SX MICROPROCESSOR 


Register Specified by reg Field 
During 32-Bit Data Operations 


Function of w Field 


9.2.3.3 ENCODING OF THE SEGMENT 
REGISTER (sreg) FIELD 


The sreg field in certain instructions is a 2-bit field 
allowing one of the four 80286 segment registers to 
be specified. The sreg field in other instructions is a 
3-bit field, allowing the Intel886 SX CPU FS and GS 
segment registers to be specified. 


2-Bit sreg2 Field 


Segment 
Register 
Selected 


2-Bit 
sreg2 Field 


3-Bit sreg3 Field 


Segment 
Register 
Selected 


3-Bit 
sreg3 Field 


do not use 
do not use 
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9.2.3.4 ENCODING OF ADDRESS MODE 


Except for special instructions, such as PUSH or 
POP, where the addressing mode is pre-determined, 
the addressing mode for the current instruction is 
specified by addressing bytes following the primary 
opcode. The primary addressing byte is the “mod 
r/m’’ byte, and a second byte of addressing informa- 
tion, the “s-i-b’ (scale-index-base) byte, can be 
specified. 


The s-i-b byte (scale-index-base byte) is specified 
when using 32-bit addressing mode and the “mod 
r/m” byte has r/m = 100 and mod = 00, 01 or 10. 
When the sib byte is present, the 32-bit addressing 
mode is a function of the mod, ss, index, and base 
fields. 


The primary addressing byte, the ‘mod r/m”’ byte, 
also contains three bits (shown as TTT in Figure 8-1) 
sometimes used as an extension of the primary op- 
code. The three bits, however, may also be used as 
a register field (reg). 


When calculating an effective address, either 16-bit 
addressing or 32-bit addressing is used. 16-bit ad- 
dressing uses 16-bit address components to calcu- 
late the effective address while 32-bit addressing 
uses 32-bit address components to calculate the ef- 
fective address. When 16-bit addressing is used, the 
“mod r/m”’ byte is interpreted as a 16-bit addressing 
mode specifier. When 32-bit addressing is used, the 
“mod r/m’”’ byte is interpreted as a 32-bit addressing 
mode specifier. 


Tables on the following three pages define all en- 
codings of all 16-bit addressing modes and 32-bit 
addressing modes. 
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Encoding of 16-bit Address Mode with “mod r/m” Byte 


Effective Address 


DS:[BX+ SI] 
DS:[BX + DI] 
SS:[BP + Si] 
SS:[BP + Dl] 
DS:[SI] 
DS:[D!] 
DS:d16 
DS:[BX] 


DS:[BX + S!I+ d8] 
DS:[BX + DI + d8] 
SS:(BP + SI+ d8] 
SS:[BP + DI + d8] 
DS: [SI + d8] 

DS: [DI + d8] 
SS:[BP + d8] 
DS:[BX + d8] 


Effective Address 


DS:[BX + SI+ d16] 
DS:[BX + DI+d16] 
SS:[BP + SI+ d16] 
SS:[BP + DI+ d16] 
DS:[S!+ d16] 
DS:[Di+ d16] 
SS:[BP + d16] 
DS:[BX + d16] 


register—see below 
register—see below 
register—see below 
register—see below 
register—see below 
register—see below 
register—see below 
register—see below 


Register Specified by r/m 
During 16-Bit Data Operations 
Function of w Field 
AL AX 


mod r/m 


Register Specified by r/m 
During 32-Bit Data Operations 
Function of w Field 


1-411 


a 
Intel386™ SX MICROPROCESSOR intel ° 


Encoding of 32-bit Address Mode with “mod r/m” byte (no “s-i-b” byte present): 


Effective Address Effective Address 


DS:[EAX] DS:[EAX + d32] 
DS:[ECX] DS:[ECX + d32] 
DS: [EDX] DS:[EDX + d32] 
DS: [EBX] DS:[EBX + d32] 
s-i-b is present s-i-b is present 
DS:d32 SS:[EBP + d32] 
DS: [ESI] DS: [ESI + d32] 
DS: [EDI] DS:[EDI+ d32] 


DS:[EAX + d8] register—see below 
DS:[ECX + d8] register—see below 
DS:[EDX + d8] register—see below 
DS:[EBX + d8] register—see below 

s-i-b is present register—see below 
SS:[EBP + d8] register—see below 


DS:[ESI + d8] | register—see below 
DS:[EDI + d8] register—see below 


Register Specified by reg or r/m 
during 16-Bit Data Operations: 


function of w field 


Register Specified by reg or r/m 
during 32-Bit Data Operations: 


function of w field 
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Encoding of 32-bit Address Mode (‘‘mod r/m” byte and “s-i-b” byte present): 


Effective Address 


DS:[EAX + (scaled index)] 
DS:[ECX + (scaled index)] 
DS:[EDX + (scaled index)] 
DS: [EBX + (scaled index)] 
SS:[ESP + (scaled index)] 
DS:[d32 + (scaled index)] 

DS:[ESI+ (scaled index)] 
DS:[EDI+ (scaled index)] 


DS:[EAX + (scaled index) + d8] 
DS:[ECX + (scaled index) + d8] 
DS:[EDX + (scaled index) + d8] 
DS:[EBX + (scaled index) + d8] 
SS:[ESP + (scaled index) + d8] 
SS:[EBP + (scaled index) + d8] 
DS: [ESI + (scaled index) + d8] 
DS:[EDI + (scaled index) + d8] 


DS:[EAX + (scaled index) + d32] 
DS:[ECX + (scaled index) + d32] 
DS: [EDX + (scaled index) + d32] 
DS:[EBX + (scaled index) + d32] 
SS:[ESP + (scaled index) + d32] 
SS:[EBP + (scaled index) + d32] 
DS:[ESI+ (scaled index) + d32] 
DS:[EDI+ (scaled index) + d32] 


NOTE: 
Mod field in “mod r/m” byte; ss, index, base fields in 
“s-i-b” byte. 


| ss | __ Scale Factor 


00 x1 
01 x2 
10 x4 


11 x8 


| _index —|__ index Register 


EAX 
ECX 
EDX 


EBX 
no index reg** 
EBP 
ESI 
EDI 


**IMPORTANT NOTE: 

When index field is 100, indicating “no index register,” then 
ss field MUST equal 00. If index is 100 and ss does not 
equal 00, the effective address is undefined. 
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9.2.3.5 ENCODING OF OPERATION DIRECTION 
(d) FIELD 


In many two-operand instructions the d field is pres- 
ent to indicate which operand is considered the 
source and which is the destination. 


id | Direction of Operation 


Register/Memory <- - Register 
“reg” Field Indicates Source Operand; 

“mod r/m”’ or “mod ss index base”’ Indicates 
Destination Operand 


Register <- - Register/Memory 
“reg” Field Indicates Destination Operand; 


“mod r/m” or “mod ss index base”’ Indicates 
Source Operand 


9.2.3.6 ENCODING OF SIGN-EXTEND (s) FIELD 


The s field occurs primarily to instructions with im- 
mediate data fields. The s field has an effect only if 
the size of the immediate data is 8 bits and is being 
placed in a 16-bit or 32-bit destination. 


Effect on Effect on 
immediate Data8 | Immediate Data 16/32 


None 


Sign-Extend Data8 
to Fill 16-Bit or 32-Bit 
Destination 


9.2.3.7 ENCODING OF CONDITIONAL TEST 
(tttn) FIELD 


For the conditional instructions (conditional jumps 
and set on condition), tttn is encoded with n indicat- 
ing to use the condition (n= 0) or its negation (n= 1), 
and ttt giving the condition to test. 
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No Overflow 

Below/Not Above or Equal 
Not Below/Above or Equal 
Equal/ Zero 


Not Equal/Not Zero 

Below or Equal/Not Above 

Not Below or Equal/Above 

Sign 

Not Sign 

Parity/Parity Even 

Not Parity/Parity Odd 

Less Than/Not Greater or Equal 
Not Less Than/Greater or Equal 


9.2.3.8 ENCODING OF CONTROL OR DEBUG 
OR TEST REGISTER (eee) FIELD 


For the loading and storing of the Control, Debug 
and Test registers. 


When Interpreted as Control Register Field 


000 CRO 
010 CR2 
011 CR3 


Do not use any other encoding 
When Interpreted as Debug Register Field 


Do not use any other encoding 
When Interpreted as Test Register Field 


110 TR6 
111 TR7 


Do not use any other encoding 
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DATA SHEET REVISION REVIEW 


The following list represents key differences between this data sheet and the -007 version of the Intel386™ 
SX microprocessor data sheet. Please review the summary carefully. 


1. Table 5.7, E-Step revision identifier is added. 
2. Table 7.3, Icc supply current for CLK2 = 40 MHz with 20 MHz Intel386 SX has a typical Icc of 180 mA. 


3. Table 7.5, t4 CLK2 fall time and ts CLK2 rise time have no minimum time for all speeds but maximum time 
for all speeds is 8 ns. 


4. Figure 7.11, CHMOS III characteristics for typical Icc has been taken out. 
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Intel387™ SX 
MATH COPROCESSOR 

m= New Automatic Power Management = Compatible with the Intel386™ SX 

— Low Power Consumption Microprocessor 

— Typically 100 mA in Dynamic Mode, — Extends CPU Instruction Set to 

and 4 mA in Idle Mode Include Trigonometric, Logarithmic, 

m Socket Compatible with Intel387 Family and Exponential 

of Math CoProcessors m@ High Performance 80-Bit Internal 

— Hardware and Software Compatible Architecture 


— Supported by Over 2100 Commercial = implements ANSI/IEEE Standard 
Software Packages 754-1985 for Binary Floating-Point 


— 10% to 15% Performance Increase Arithmetic 
on Whetstone and Livermore 
Benchmarks @ Available in a 68-Pin PLCC Package 


See Intel Packaging Specification, Order #231369 


The Intel3887™ SX Math CoProcessor is an extension to the Intel886™ SX microprocessor architecture. The 
combination of the Intel3887™ SX with the Intel886™ SX microprocessor dramatically increases the process- 
ing speed of computer application software that utilizes high performance floating-point operations. An internal 
Power Management Unit enables the Intel387™ SX to perform these floating-point operations while maintain- 
ing very low power consumption for portable and desktop applications. The internal Power Management Unit 
effectively reduces power consumption by 95% when the device is idle. 


The Intel387™ SX Math CoProcessor is available in a 68-pin PLCC package, and is manufactured on Intel’s 
advanced 1.0 micron CHMOS IV technology. 
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1.0 PIN ASSIGNMENT 


The Intel3887 SX Math CoProcessor pinout as 
viewed from the top side of the component is shown 
in Figure 1-1. Voc and Vss (GND) corinections must 
be made to multiple pins. The circuit board should 


as | 
intel. 
include Vcc and Vsg planes for power distribution 


and all Vcc and Vss pins must be connected to the 
appropriate plane. 


NOTE: 
Pins identified as N.C. should remain completely 
unconnected. 


LJ CPUCLK2 
at NUMCLK2 


14) 


51 LJ RESETIN 


Intel387™ SX Math CoProcessor 
(top view) 


36 LJ BUSY# 
35 LJ ERROR# 
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Figure 1-1. Intel387™ SX Math CoProcessor Pinout 


Table 1-1. Pin Cross Reference—Functional Grouping 


BUSY # 
PEREQ 
ERROR # 


READY # 
READYO # 


CKM 
CPUCLK2 
NUMCLK2 


RESETIN 
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1.1. Pin Description Table 


The following table lists a brief description of each 
pin on the Intel3887 SX Math CoProcessor. For a 
more complete description refer to Section 4.1 Sig- 
nal Description. The following definitions are used in 
these descriptions: 

# The signal is active LOW. 

| Input Signal 

O Output Signal 


1/O ‘Input and Output Signal 


Type Name and Function 


ADDRESS STROBE indicates that the address and bus cycle definition is valid. 
- BUSY# BUSY indicates that the Math CoProcessor is currently executing an instruction. 


CKM mie CLOCKING MODE is used to select synchronous or asynchronous clock modes. 

CMDO COMMAND determines whether an opcode or operand are being sent to the Math 
CoProcessor. During a read cycle it indicates which register group is being read. 

CPUCLK2 CPU CLOCK input provides the timing for the bus interface unit and the execution 
unit in synchronous mode. 


NO CONNECT should always remain unconnected. Connection of a N.C. pin may 
cause the Math CoProcessor to malfunction or be incompatible with future 
steppings. 


NPX SELECT 1 is used to select the Math CoProcessor. 
NPX SELECT 2 is used to select the Math CoProcessor. 


NUMERICS CLOCK is used in asynchronous mode to drive the Floating Point 
Execution Unit. 

PROCESSOR EXTENSION REQUEST signals the CPU that the Math 
CoProcessor is ready for data transfer to/from its FIFO. 

READY indicates that the bus cycle is being terminated. 


READYO# See: READY OUT signals the CPU that the Math CoProcessor is terminating the bus 
cycle. 


RESETIN SYSTEM RESET terminates any operation in progress and forces the Math 
CoProcessor to enter a dormant state. 


STATUS ENABLE serves as a master chip select for the Math CoProcessor. 
When inactive, this pin forces all outputs and bi-directional pins into a floating 
state. 


WRITE/READ indicates whether the CPU bus cycle in progress is a read or a write 
cycle. 


SYSTEM POWER provides the + 5V nominal D.C. supply input. 


SYSTEM GROUND provides the OV connection from which all inputs and outputs 
are measured. 
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2.0 FUNCTIONAL DESCRIPTION 


The Intel387 SX Math CoProcessor is designed to 
support the Intel386 SX Microprocessor and effec- 
tively extend the CPU architecture by providing fast 
execution of arithmetic instructions and transcen- 
dental functions. This component contains internal 
power management circuitry for reduced active pow- 
er dissipation and ian automatic idle mode. 


2.1 Feature List 


e New power saving design provides low power 
dissipation in active and idle modes. 


e Higher Performance, 10%-25% higher bench- 
mark performance than the original Intel887 SX 
Math CoProcessor. 


e High Performance 84-bit Internal Architecture 


e Eight 80-bit Numeric Registers, usable as individ- 
ually addressable general registers or as a regis- 
ter stack. 


e Full-range transcendental operations for SINE, 
COSINE, TANGENT, ARCTANGENT, and LOG- 
ARITHM. 


e Programmable rounding modes and notification 
of rounding effects. 


e Exception reporting either by software polling or 
hardware interrupts. 


e Fully compatible with the SX Microprocessors. 


l 
BUS CONTROL LOGIC DATA INTERFACE AND CONTROL UNIT " 


32 


STATUS WORD 
16 INTERNAL 
CONTROL WORD DATA 


BUS 


DATA FIFO 
2.5x32 BIT 
REGISTERS 


MICRO 


INSTRUCTION 
SEQUENCER 


STATUS 


ADDRESS & 
BUS CONTROL 


CPUCLK2 NUMCLK2 


s 


g ' 
intel. 
e Expands Intel386 SX CPU data types to include 


32-bit, 64-bit, and 80-bit Floating Point; 32-bit and 
64-bit Integers; and 18 Digit BCD Operands. 


e Directly extends the Intel386 SX CPU Instruction 
Set to trigonometric, logarithmic, exponential, 
and arithmetic functions for all data types. 


e Operates independently of Real, Protected, and 
Virtual-86 Modes of the Intel386 SX Microproces- 
sors. 


e Fully compatible with the Intel887 SL Mobile and 
DX Math CoProcessors. Implements all Intel387 
Math CoProcessor architectural enhancements 
over 8087 and 80287. 


e Implements ANSI/IEEE Standard 754-1985 for 
binary floating point arithmetic. 


e Upward Object Code compatible from 8087 and 
80287. 


2.2 Math CoProcessor Architecture 


As shown in Figure 2-1, the Intel887 SX Math Co- 
Processor is internally divided into four sections; the 
Bus Control Logic, the Data Interface and Control 
Logic, the Floating Point Unit, and the Power Man- 
agement Unit. The Bus Control Logic is responsible 
for the CPU bus tracking and interface. The Data 
Interface and Control Unit latches data and decodes 
instructions. The Floating Point Unit executes the 
mathematical instructions. The Power Management 
Unit is new to the Intel387 family and is the nucleus 


FLOATING POINT UNIT 


DBUS INTERFACE 
DATA ALIGNMENT AND OPERAND CHECKING 


0) 
1) 
2) 


16 
EXPONENT ADDER OPERAND REGISTER 
3 
ae" lerl B es 
: 4) 


OPERAND B EXP 
REGISTER (16-BiT) ra 


1 
j 
| 
I 
l 
I 
MICRO INSTRUCTION BUS 1] opeRAND A EXP 
Lessin 
I 
I 
| 
1 
I 


5) MANTISSA ADDER 
(68-BIT) + 
6) SUM REGISTER 


7) 
16-BIT LEFT/RIGHT 


Fea BARREL SHIFTER + 


REGISTER FILE (STACK 
x ¢ ) ' 68-BIT REGISTER 


(8x 80 BITS) 


—_ 
z 
wd 
z 
& 
< 
wl 


MANTISSA 


CONSTANT ROM 
(44x67 BITS) 


FPU CONTROL + 
CORDICS NANO-MACHINE 


240225-2 


Figure 2-1. Intel387™ SX Math CoProcessor Block Diagram 
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of the static architecture. It is responsible for shut- 
ting down idle sections of the device to save power. 


Microprocessor/Math CoProcessor Interface 
The Intel386 CPU interprets the pattern 11011B in 
most significant five bits of an instruction as an op- 
code intended for a math coprocessor. Instructions 
thus marked are called ESCAPE or ESC instruc- 
tions. Upon decoding the instruction as an ESC in- 
struction, the Intel386 CPU transfers the opcode to 
the math coprocessor through an |/O write cycle at 
a dedicated address (8000F8H) outside the normal 
programmed |/O address range. The math coproc- 
essor has dedicated output signals for controlling 
the data transfer and notifying the CPU if the Math 
CoProcessor is busy or that a floating point error has 
occurred. 


2.3 Power Management 


The Intel387 SX Math CoProcessor offers two 
modes of power management; dynamic and idle. 


2.3.1 DYNAMIC MODE 


Dynamic Mode is when the device is executing an 
instruction. Using Intel’s CHMOS IV technology, the 
Intel387 SX Math CoProcessor draws considerably 
less power than its predecessor. The active power 
supply current is reduced to approximately 100 mA 
at 20 MHz and provides low case temperatures. 


2.3.2 IDLE MODE 


When an instruction is not being executed, the 
Intel3887 SX Math CoProcessor will automatically 
change to /dle Mode. Three clocks after completion 
of the previous instruction, the internal power man- 
ager shuts down the floating point execution unit 
and all non-essential circuitry. Only portions of the 
Bus Interface Unit remain active to monitor the CPU 
bus activity and to accept the next instruction when 
it is transferred. When the CPU transfers the next 
instruction to the Math CoProcessor, the Intel387 SX 


intel387™ SX MATH COPROCESSOR 


Math CoProcessor accepts the instruction and 
ramps the internal core within one clock so there is 
no impact to performance or throughput. In idle 
mode, the Intel387 SX Math CoProcessor draws typ- 
ically 4 mA of current and reduces case temperature 
to near ambient. 


NOTE: 
In asynchronous clock mode (CKM = 0), the inter- 
nal idle mode is disabled. 


2.4 Compatibility 


The Intel887 SX Math CoProcessor is compatible 
with the Intel387 SL Mobile Math CoProcessor. Due 
to the increased performance and internal pipelining 
effects, diagnostic programs should never use in- 
struction execution time for test purposes. 


2.5 Performance 


The increased performance of floating point calcula- 
tions can be attributed to the 84-bit architecture and 
floating point processor. For the CPU to execute 
floating point calculations requires very long soft- 
ware emulation methods with reduced resolution 
and accuracy. The performance of the Intel387 SX 
Math CoProcessor has been further enhanced 
through improvements in the internal microcode and 
through internal architectural changes. These refine- 
ments will increase Whetstone benchmarks by ap- 
proximately 10% to 25% over the original Intel387 
SX Math CoProcessor. 


Real performance, however, should be measured 
with application software. Depending upon software 
coding, system overhead, and percentage of floating 
point instructions, performance can vary significant- 


ly. 
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3.0 PROGRAMMING INTERFACE 


The Intel887 SX Math CoProcessor effectively ex- 
tends to an Intel386 Microprocessor system addi- 
tional instructions, registers, data types, and inter- 
rupts specifically designed to facilitate high-speed 
floating point processing. All communication be- 
tween the CPU and the Math CoProcessor is trans- 
parent to applications software. The CPU automati- 
cally controls the Math CoProcessor whenever a 
numerics instruction is executed. All physical memo- 
ry and virtual memory of the CPU are available for 
storage of the instructions and operands of pro- 
grams that use the Math CoProcessor. All memory 
addressing modes, including use of displacement, 
base register, index register, and scaling are avail- 
able for addressing numerical operands. 


The Intel387 SX Math CoProcessor is software com- 
patible with the Intel887 DX Math CoProcessors and 
supports all applications written for the Intel886 CPU 
and Intel387 Math CoProcessors. 


3.1 Instruction Set 


The Intel386 CPU interprets the pattern 11011B in 
most significant five bits of an instruction as an op- 
code intended for a math coprocessor. Instructions 
thus marked are called ESCAPE or ESC instruction. 


The typical Math CoProcessor instruction accepts 
one or two operands and produces one or some- 
times two results. In two-operand instructions, one 
operand is the contents of the Math CoProcessor 
register, while the other may be a memory location. 
The operands of some instructions are predefined; 
for example, FSQRT always takes the square root of 
the number in the top stack element. 


The Intel387 SX Math CoProcessor instruction set 
can be divided into six groups. The following sec- 
tions gives a brief description of each instruction. 
Section 8.0 defines the instruction format and byte 
fields. Further details can be obtained from the 
Intel387 User’s Manual, Programmer’s Reference, 
Order #231917. 


3.1.1 DATA TRANSFER INSTRUCTIONS 


The class includes the operations that load, store, 
and convert operands of any support data types. 


Real Transfers 
FLD Load Real (single, double, extended) 
FST Store Real (single, double) 


FSTP Store Real and pop (single, double, ex- 
tended) 


FXCH Exchange registers 
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Integer Transfers 


FILD Load (convert from) Integer (word, short, 
long) 


FIST Store (convert to) Integer (word, short) 


FISTP Store (convert to) Integer and pop (word, 
short, long) 


Packed Decimal Transfers 
FBLD Load (convert from) packed decimal 
FBSTP Store packed decimal and pop 


3.1.2 ARITHMETIC INSTRUCTIONS 


This class of instructions provide variations on the 
basic add, subtract, multiply, and divide operations 
and a number of other basic arithmetic operations. 
Operands may reside in registers or one operand 
may reside in memory. 


Addition 
FADD Add Real 
FADDP Add Real and pop 
FIADD Add Integer 
Subtraction 
FSUB Subtract Real 
FSUBP Subtract Real and pop 
FISUB — Subtract Integer 
FSUBR Subtract Real reversed 


_ FSUBRP Subtract Real reversed and pop 


FISUBR Subtract Integer reversed 
Multiplication 
FMUL Multiply Real 


FMULP Multiply Real and pop 

FIMUL ~~ Multiply Integer 
Division 

FDIV Divide Real 


FDIVP Divide Real and pop 

FIDIV Divide Integer 

FDIVR Divide Real reversed 

FDIVRP Divide Real reversed and pop 
FIDIVR Divide Integer reversed 


intel. 


Other Operations 


FSQRT Square Root 

FSCALE Scale 

FPREM Partial Remainder 

FPREM1_ IEEE standard partial remainder 


FRNDINT Round to Integer 

FXTRACT Extract Exponent and Significand 
FABS Absolute Value 

FCHS Change sign 


3.1.3 COMPARISON INSTRUCTION 


Instructions of this class allow comparison of num- 
bers of all supported real and integer data types. 
Each of these instructions analyzes the top stack 
element often in relationship to another operand and 
reports the result as a condition code in the status 
word. 

FCOM Compare Real 

FCOMP Compare Real and pop 

FCOMPP Compare Real and pop twice 

FUCOM _ Unordered compare Real 

FUCOMP Unordered compare Real and pop 


FUCOMPP Unordered compare Real and pop 
twice 


FICOM Compare Integer 
FICOMP Compare Integer and pop 
FTST Test 

FXAM Examine 
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3.1.4 TRANSCENDENTAL INSTRUCTIONS 


This group of the Intel387 operations includes trigo- 
nometric, inverse trigonometric, logarithmic and ex- 
ponential functions. The transcendental operate on 
the top one or two stack elements, and they return 
their results to the stack. The trigonometric opera- 
tions assume their arguments are expressed in radi- 
ans. The logarithmic and exponential operations 
work in base 2. 


FSIN Sine 

FCOS Cosine 

FSINCOS Sine and cosine 
FPTAN = Tangent 

FPATAN Arctangent of ST(1)/ST 
F2XM1 2x-1 

FYL2X. . ¥* logax 


FYL2XP1 Y * logo(X + 1) 


3.1.5 LOAD CONSTANT INSTRUCTIONS 


Each of these instructions loads (pushes) a com- 
monly used constant onto the stack. The constants 
have extended real values nearest to the infinitely 
precise numbers. The only error that can be gener- 
ated is an Invalid Exception if a stack overflow oc- 
curs. 


FLDZ Load +0.0 
FLD1 Load + 1.0 
FLDPI Load 7r 


FLDL2T Load logo 10 
FLDL2E Load logze 
FLDLG2 Load log;02 
FLDLN2 Load loge2 
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3.1.6 PROCESSOR INSTRUCTIONS FRSTOR Restore State 
(ADMINISTRATIVE) FINCSTP Increment Stack pointer 

FINIT Initialize Math CoProcessor FDECSTP Decrement Stack pointer 
FLDCW _Load Control Word FFREE Free Register 
FSTCW __ Store Control Word FNOP No Operation 
FLDCW Load Status Word FWAIT Report Math CoProcessor Error 
FSTSW _ Store Status Word 
FSTSW AX Store Status Word to AX register 3.2 Register Set 


FCLEX Clear Exceptions 


Fi - the Intel3887 SX Math CoProc 
FSTENV Store Environment spb ham gir nikelan ter tee hetepeanptl 


register set. When a Math CoProcessor is present in 


FLDENV Load Environment a system, programmers may use these registers in 
FSAVE Save State addition to the registers normally available on the 
CPU. | 


i386™ Microprocessor Registers i387™ Math CoProcessor Data Registers 


GENERAL REGISTERS Tag 


31 16 15 0 SEGMENT REGISTERS Field 
78 ) ee 


79 
RO | Sign | Exponent Significand 


15 


Control Register 
Status Register 
Tag Word 


47 0 


Instruction Pointer (in CPU) 
Data Pointer (in CPU) 


Figure 3-1. Intel386™ CPU and Intel387™ Math CoProcessor Register Set 
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3.2.1 STATUS WORD (SW) REGISTER 


The 16-bit status word (in the status register) shown 
in Figure 3-2 reflects the overall state of the Math 
CoProcessor. It can be read and inspected by pro- 
grams using the FSTSW memory or FSTSW AX in- 
structions. 


Bit 15, the Busy bit (B) is included for 8087 compati- 
bility only. It always has the same value as the Error 
Summary bit (ES, bit 7 of status word); it does not 
indicate the status of the BUSY # output of the Math 
CoProcessor. 


Bits 13-11 (TOP) serves as the pointer to the Math 
CoProcessor data register that is the current Top-Of- 
Stack. The significance of the stack top is described 
» in Section 3.2.5 Data Registers. 


The four numeric condition code bits (C3—Co, Bit 14, 
10-8) are similar to the flags in a CPU; instructions 
that perform arithmetic operations update these bits 
to reflect the outcome. The effects of the instruc- 
tions on the condition code are summarized in Ta- 
bles 3-1 through 3-4. These condition code bits are 
used principally for conditional branching. The 
FSTSW AX instructions stores the Math CoProces- 
sor status word directly to the CPU AX register, al- 
lowing the condition codes to be inspected efficient- 
ly by Intel886 CPU code. The Intel886 CPU SAHF 
instruction can copy C3-Co directly to the flag bits to 
simplify conditional branching. Table 3-5 shows the 
mapping of these bits to the Intel886 CPU flag bits. 


c cycyc s U Z 
TOP 
3 2} 170 F E E 


ERROR SUMMARY STATUS 
STACK FLAG 


EXCEPTION FLAGS: 
PRECISION 
UNDERFLOW 
OVERFLOW 
ZERO DIVIDE 
DENORMALIZED OPERAND 
INVALID OPERATION 
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Bit 7 is the error summary (ES) status bit. This bit is 
set if any unmasked exception bit is set; it is clear 
otherwise. If this bit is set, the ERROR# signal is 
asserted. 


Bit 6 is the stack flag (SF). This bit is used to distin- 
guish invalid operations due to stack overflow or un- 
derflow from other kinds of invalid operations. When 
SF is set, bit 9 (C1) distinguishes between stack 
overflow (Cy = 1) or underflow (C; = 0). 


Bit 5-0 are the six exception flags of the status word 
and are set to indicate that during an instruction exe- 
cution the Math CoProcessor has detected one of 
six possible exception conditions since these status 
bits were last cleared or reset. Section 3.5 entitled 
Exception Handling explains how they are set and 
used. 


The exception flags are ‘‘sticky” bits and can only 
be cleared by the instructions FINIT, FCLEX, 
FLDENV, FSAVE, and FRSTOR. Note that when a 
new value is loaded into the status word by the 
FLDENV or FRSTOR instruction, the value of ES (bit 
7) and B (bit 15) are not derived from the values 
loaded from memory but rather are dependent upon 
the values of the exception flags (bits 5-0) in the 
status word and their corresponding masks in the 
control word. If ES is set in such a case, the 
ERROR# output of the Math CoProcessor is acti- 
vated immediately. 


BUSY 
TOP OF STACK POINTER 
CONDITION CODE 
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ES is set if any unmasked exception bit is set; cleared otherwise. See Table 2-2 for interpretation of condition code. 


TOP values: 
000 = Register 0 is Top of Stack 
001 = Register 1 is Top of Stack 


111 = Register 7 is Top of Stack 
For definitions of exceptions, refer to the section entitled “Exception Handling” 


Figure 3-2. Status Word 
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Table 3-1. Condition Code Interpretation 


FPREM, FPREM1 Three least significant bits 
(see Table 3-2) of quotient 
QO 


Reduction 
0 = complete 
or O/U¥# 1 = incomplete 


FCOM, FCOMP, 

FCOMPP, FTST, Result of comparison Zero Operand is not 
FUCOM, FUCOMP, (see Table 3-3) or O/U# comparable 
FUCOMPP, FICOM, (Table 3-3) 
FICOMP 


FXAM Operand class Sign Operand class 
(see Table 3-4) or O/U# (Table 3-4) 


FCHS, FABS, FXCH, 

FINCSTP, FDECSTP, cad 

Constant loads, UNDEFINED UNDEFINED 
FXTRACT, FLD, or O/U# 

FILD, FBLD, 

FSTP (ext real) 


FIST, FBSTP, 

FRNDINT, FST, 

FSTP, FADD, FMUL, 

FDIV, FDIVR, UNDEFINED 
FSUB, FSUBR, 

FSCALE, FSQRT, 

FPATAN, F2XM1, 

FYL2X, FYL2XP' 


FPTAN, FSIN Roundup Reduction 

FCOS, FSINCOS UNDEFINED or O/U#, 0 = complete 
undefined 1 = incomplete 
ifC2 = 1 


FLDENV, FRSTOR Each bit loaded from memory 


FLDCW, FSTENV, 

FSTCW, FSTSW, UNDEFINED 
FCLEX, FINIT, 

FSAVE 


Roundup 


NDEFIN 
or O/U# 4 oe 


O/U# When both IE and SF bits of status word are set, indicating a stack exception, this bit 
distinguishes between stack overflow (C1=1) and underflow (C1 =0). 


Reduction lf FPREM or FPREM1 produces a remainder that is less than the modulus, reduction is 
complete. When reduction is incomplete the value at the top of the stack is a partial 
remainder, which can be used as input to further reduction. For FPTAN, FSIN, FCOS, and 
FSINCOS, the reduction bit is set if the operand at the top of the stack is too large. In this 
case the original operand remains at the top of the stack. 


Roundup When the PE bit of the status word is set, this bit indicates whether the last rounding in the 
instruction was upward. 


UNDEFINED Do not rely on finding any specific value in these bits. 
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Table 3-2. Condition Code Interpretation after FPREM and FPREM1 Instructions ; 


Condition Code Interpretation after FPREM and FPREM1 


Incomplete Reduction: 
further interation required 
for complete reduction 


Q MOD8 


Complete Reduction: 
CO, C3, C1 contain three least 
significant bits of quotient 


ose 


Table 3-3. Condition Code Resulting from Comparison 


TOP > Operand 
TOP < Operand 
TOP = Operand 
Unordered 


Table 3-4. Condition Code Defining Operand Class 


pcs | cz) | ct | co | Vaueat TOP 


+ Unsupported 
+ NaN 

— Unsupported 
— NaN 

+ Normal 

+ Infinity 

— Normal 

— Infinity 

+0 

+ Empty 

op 

— Empty 

+ Denormal 

— Denormal 


—aA eee Ss Ss OCT OCOOCOCOCO 
-|}- 0000 + + +] = OOGCodon°o 
-oO--]}-o00c0-+-00++00 
oo}-o0+-0+0+0+0 


Table 3-5 Mapping Condition Codes to Intel386™ CPU Flag Bits 


15 8 
i387 SX Math 
Sab icaeait STATUS WORD ECR 
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3.2.2 CONTROL WORD (CW) REGISTER 


The Math CoProcessor provides the programmer 
with several processing options that are selected by 
loading a control word from memory into the control 
register. Figure 3-3 show the format and encoding of 
fields in the control word. 


The low-order byte of the control word register is 
used to configure the exception masking. Bits 5-0 
of the control word contain individual masks for each 
of the six exceptions that the Math CoProcessor rec- 
ognizes. See Section 3.5, Exception Handling, for 
further explanation on the exception control and def- 
inition. 


The high-order byte of the control word is used to 
configure the Math CoProcessor operating mode, in- 
cluding precision, rounding and infinity control. 


e The rounding control (RC) field (bits 11-10) pro- 
vide for directed rounding and true chop, as well 
as the unbiased round to nearest even mode 
specified in the IEEE standard. Rounding control 
affects only those instructions that perform 
rounding at the end of the operation (and thus 
can generate a precision exception); namely, 
FST, FSTP, FIST, all arithmetic instructions (ex- 
cept FPREM, FPREM1, FXTRACT, FABS, and 
FCHS) and all transcendental instructions. 


= 
intel. 
e The precision control (PC) field (bits 9-8) can be 
used to set the Math CoProcessor internal oper- 
ating precision of the significand at less than the 
default of 64 bits (extended precision). This can 
be useful in providing compatibility with early gen- 
eration arithmetic processors of smaller preci- 
sion. PC affects only the instructions FADD, 
FSUB(R), FMUL, FDIV(R), and FSQRT. For all 
other instructions, either the precision is deter- 
mined by the opcode or extended precision is 
used. 


e The “infinity control bit” (bit 12) is not meaningful 
to the Intel887 SX Math CoProcessor and pro- 
grams must ignore its value. To maintain compat- 
ibility with the 8087 and 80287 (non-387 core), 
this bit can be programmed, however, regardless 
of its value the Intel3887 SX Math CoProcessor 
always treats infinity in the affine sense (— 0 < 
+00), This bit is initialized to zero both after a 
hardware reset and after FINIT instruction. 


All other bits are reserved and should not be pro- 
grammed, to assure compatibility with future proces- 
sors. 


RESERVED 
RESERVED* 
ROUNDING CONTROL 
PRECISION CONTROL 


RESERVED 


EXCEPTION MASKS: 
PRECISION 
UNDERFLOW 
OVERFLOW 
ZERO DIVIDE 
DENORMALIZED OPERAND 
INVALID OPERATION 


Precision Control 
00—24 bits (single precision) 
01—(reserved) 
10—53 bits (double precision) 
11—64 bits (extended precision) 


*"O" AFTER RESET OR FINIT; 
CHANGEABLE UPON LOADING THE 
CONTROL WORD (CW). PROGRAMS 
MUST IGNORE THIS BIT. 
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Rounding Control 
00—Round to nearest or even 
01—Round down (toward — °°) 
10—Round up (toward + 0) 
11—Chop (truncate toward zero) 


Figure 3-3. Control Word 
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3.2.3 DATA REGISTER 


Intel387 SX Math CoProcessor data register set 
consists of eight registers (RO-—R7) which are treat- 
ed as both a stack and a general register file. Each 
of these data registers in the Math CoProcessor is 
80 bits wide and is divided into fields corresponding 
to the Math CoProcessor’s extended-precision real 
data type, which is used for internal calculations. 


The Math CoProcessor register set can be accessed 
either as a stack, with instructions operating on the 
top one or two stack elements, or as individually ad- 
dressable registers. The TOP field in the status word 
identifies the current top-of-stack register. A “push” 
operation decrements TOP by one and loads a value 
into the new top register. A “store and pop” opera- 
tion stores the value from the current top register 
into memory and then increments TOP by one. The 
Math CoProcessor register stack grows “down” 
toward lower-addressed registers. 


Most of the Intel887 SX Math CoProcessor opera- 
tions use the register stack as the operand(s) and/or 
as a place to store the result. Instructions may ad- 
dress the data register either implicitly or explicitly. 
Many instructions operate on the register at the top 
of the stack. These instructions implicitly address 
the register at which TOP points. Other instructions 
allow the programmer to explicitly specify which reg- 
ister to use. Explicit register addressing is also rela- 
tive to TOP (where ST denotes the current stack top 
and ST(i) refers to the i’th register from the ST in the 
stack so the real register address in computed as 
ST+i). 


3.2.4 TAG WORD (TW) REGISTER 
The tag word marks the content of each numeric 


data register, as Figure 3-4 shows. Each two-bit tag 
represents one of the eight data register. The princi- 


15 
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pal function of the tag word is to optimize the Math . 
CoProcessor’s performance and stack handling by 
making it possible to distinguish between empty and 
non-empty register locations. It also enables excep- 
tion handlers to identify special values (e.g. NaNs or 
denormals) in the contents of a stack location with- 
out the need to perform complex decoding of the 
actual data. 


3.2.5 INSTRUCTION AND DATA POINTERS 


Because the Math CoProcessor operates in parallel 
with the CPU, any exceptions detected by the Math 
CoProcessor may be reported after the CPU has ex- 
ecuted the ESC instruction which caused it. To allow 
identification of the numeric instruction which 
caused the exception, the Intel886 Microprocessor 
contains registers that aid in diagnosis. These regis- 
ters supply the address of the failing instruction and 
the address of its numeric memory operand (if ap- 
propriate). 


The instruction and data pointers are provided for 
user-written exception handlers. These registers are 


- located in the CPU, but appear to be located in the 


Math CoProcessor because they are accessed by 
the ESC instructions FLDENV, FSTENV, FSAVE, 
and FRSTOR; which transfer the values between 
the registers and memory. Whenever the CPU exe- 
cutes a new ESC instruction (except administrative 
instructions), it saves the address of the instruction 
(including any prefixes that may be present), the ad- 
dress of the operand (if present) and the opcode. 


The instruction and data pointers appear in one of 
four formats depending on the operating mode of 
the CPU (protected mode or real-address mode) 
and depending on the operand size attribute in ef- 
fect (32-bit operand or 16-bit operand). (See Figures 
3-5, 3-6, 3-7, and 3-8.) Note that the value of the 
data pointer is undefined if the prior ESC instruction 
did not have a memory operand. 


0 


NOTE: 


The index i of tag(i) is not top-relative. A program typically uses the “top” field of Status Word to determine which tag(i) 
field refers to logical top of stack. 
TAG VALUES: 

00 = Valid 

01 = Zero 

10 = QNaN, SNaN, Infinity, Denormal and Unsupported Formats 

11 Empty 


Figure 3-4. Tag Word Register 
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32-BIT PROTECTED MODE FORMAT 


15 


31 23 
RESERVED CONTROL WORD 


RESERVED STATUS WORD 
RESERVED TAG WORD 


Figure 3-5. Instruction and Data Pointer Image in Memory, 32-Bit Protected-Mode Format 


16-BIT PROTECTED MODE FORMAT 


15 0 


32-BIT REAL-ADDRESS MODE FORMAT 
15 


Sa a 


Figure 3-7. Instruction and Data Pointer Image in Memory, 32-Bit Real-Mode Format 
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16-BIT REAL-ADDRESS MODE AND VIRTUAL 8086 MODE FORMAT 


15 7 0 
CONTROL WORD 


STATUS WORD 
TAG WORD 


INSTRUCTION POINTER 15..0 


IP19.16 


0 OPCODE 10..0 


OPERAND POINTER 15..0 
DP 19.16 fofoo 000000000 


Figure 3-8. Instruction and Data Pointer Image in Memory, 16-Bit Real-Mode Format 


3.3 Data Types 


Table 3-6 lists the seven data types that the Math 
CoProcessor supports and presents the format for 
each type. Operands are stored in memory with the 
least significant digit at the lowest memory address. 
Programs retrieve these values by generating the 
lowest address. For maximum system performance, 
all operands should start at physical-memory ad- 
dresses that correspond to the word size of the 
CPU; operands may begin at any other addresses, 
but will require extra memory cycles to access the 
entire operand. 


The data type formats can be divided into three 
classes: binary integer, decimal integer, and binary 
real. These formats, however, exist in memory only. 
Internally, the Math CoProcessor holds all numbers 
in the extended-precision real format. Instructions 
that load operands from memory automatically con- 
vert operands represented in memory as 16, 32, or 
64-bit integers, 32 or 64-bit floating point numbers, 
or 18 digit packed BCD numbers into extended-pre- 
cision real format. Instructions that store operands in 
memory perform the inverse type conversion. 


In addition to the typical real and integer data values, 
the Intel887 SX Math CoProcessor data formats en- 
compass encodings for a variety of special values. 
These special values have significance and can ex- 
press relevant information about the computations 
or operations that produced them. The various types 
of special values are denormal real numbers, zeros, 
positive and negative infinity, NaNs (Not-a-Number), 
Indefinite, and unsupported formats. For further in- 
formation on data types and formats, see the In- 
tel387 Programmer’s Reference Manual. 


3.4 Interrupt Description 


CPU interrupts are used to report errors or excep- 
tional conditions while executing numeric programs 
in either real or protected mode. Table 3-7 shows 
these interrupts and their functions. 


3.5 Exception Handling 


The Math CoProcessor detects six different excep- 
tion conditions that occur during instruction execu- 
tion. Table 3-8 lists the exception conditions in order 
of precedence, showing for each the cause and the 
default action taken by the Math CoProcessor if the 
exception is masked by its corresponding mask bit in 
the control word. 


Any exception that is not masked by the control 
word sets the corresponding exception flag of the 
status word, sets the ES bit of the status word, and 
asserts the ERROR# signal. When the CPU at- 
tempts to execute another ESC instruction or WAIT, 
exception 16 occurs. The exception condition must 
be resolved via an interrupt service routine. The re- 
turn address pushed onto the CPU stack upon entry 


_to the service routine does not necessarily point to 


the failing instruction nor to the following instruction. 
The CPU saves the address of the floating-point in- 
struction that caused the exception and the address 
of any memory operand required by that instruction. 
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Table 3-6. Intel387™ SX Math CoProcessor Data Type Representation in Memory 
Most Significant Byte = HIGHEST ADDRESSED BYTE 
Data Range 
ints [7 ol7 alr ol7 ol7 ofr ol ofr ofr oly 0 


Word Integer | +104 16 Bits eee ie COMPLEMENT) 
1§ 0 
Short Integer | +109 COMPLEMENT) 


Long Integer | +1018 64 Bits COMPLEMENT) 


MAGNITUDE 
Packed BCD D7, Diy p G5 p15 9413 912,411 pGiv, Go » Ge, G7, % 
Single Precision 
Double Precision 


Extended : 
Exended bose] gene [ti 


240225-23 

NOTES: 

. S = Sign bit (0 = positive, 1 = negative) 

. d, = Decimal digit (two per byte) 

. X = Bits have no significance; Math CoProcessor ignores when loading, zeros when storing 

. 4 = Position of implicit binary point 

. | = Integer bit of significand; stored in temporary real, implicit in single and double precision 

. Exponent Bias (normalized values): _ 


aOnrwan — 


Single: 127 (7FH) 

Double: 1023 (8FFH) 

Extended REal: 16383 (SFFFH) 
7. Packed BCD: (—1)5 (D 7..Dg) 
8. Real: (— 1)S (2E-BIAS) (Fo Fy...) 
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Table 3-7. CPU Interrupt Vectors Reserved for Math CoProcessor 


Interrupt 
Cause of Interrupt 


An ESC instruction was encountered when EM or TS of CPU control register zero (CRO) was 
set. EM = 1 indicates that software emulation of the instruction is required. When TS is set, 
either an ESC or WAIT instruction causes interrupt 7. This indicates that the current Math 
CoProcessor context may not belong to the current task. 


In a protected-mode system, an operand of a coprocessor instruction wrapped around an 
addressing limit (OFFFFH for expand-up segments, zero for expand-down segments) and 
spanned inaccessible addresses(1). The failing numerics instruction is not restartable. The 
address of the failing numerics instruction and data operand may be lost; an FSTENV does not 
return reliable addresses. The segment overrun exception should be handled by executing an 
FNINIT instruction (i.e., an FINIT without a preceding WAIT). The exception can be avoided by 
never allowing numerics operands to cross the end of a segment. 


In a protected-mode system, the first word of a numeric operand is not entirely within the limit of 
its segment. The return address pushed onto the stack of the exception handler points at the 
ESC instruction that caused the exception, including any prefixes. The Math CoProcessor has 
not executed this instruction; the instruction pointer and data pointer register refer to a previous, 
| correctly executed instruction. 


The previous numerics instruction caused an unmasked exception. The address of the faulty 
instruction and the address of its operand are stored in the instruction pointer and data pointer 
registers. Only ESC and WAIT instructions can cause this interrupt. The CPU return address 


pushed onto the stack of the exception handler points to a WAIT or ESC instruction (including 
prefixes). This instruction can be restarted after clearing the exception condition in the Math 
CoProcessor. FNINIT, FNCLEX, FNSTSW, FNSTENV, and FNSAVE cannot cause this interrupt. 


NOTE: 

1. An operand may wrap around an addressing limit when the segment limit is near an addressing limit and the operand is 
near the largest valid address in the segment. Because of the wrap-around, the beginning and ending addresses of such an 
operand will be at opposite ends of the segment. There are two ways that such an operand may also span inaccessible 
addresses: 1) if the segment limit is not equal to the addressing limit (e.g. addressing limit is FFFFH and segment limit is 
FFFDH) the operand will span addresses that are not within the segment (e.g. an 8-byte operand that starts at valid offset 
FFFCH will span addresses FFFC—FFFFH and 0000-0003H; however addresses FFFEH and FFFFH are not valid, because 
they exceed the limit); 2) if the operand begins and ends in present and accessible segments but intermediate bytes of the 
operand fall in a not-present page or in a segment or page to which the procedure does not have access rights. 


Table 3-8. Intel387™ SX Math CoProcessor Exceptions 
—— Default Action 
(if exception is masked) 
Invalid Operation on a signalling NaN, unsupported format, Result is a quiet NaN, 


Operation indeterminate for (0-0, 0/0, (+ 2%) + (— ©), etc.), or stack integer indefinite, or 
overflow/underflow (SF is also set). BCD indefinte 


Denormalized | Atleast one of the operands is denormalized, i.e., it has the Normal processing 
Operand | smallest exponent but a nonzero significand. continues 
The divisor is zero biolaca the dividend is a noninfinite, nonzero 
number. 


The result is too large in magnitude to fit in the specified format. | Result is largest finite 
value or °° 


Underflow The true result is nonzero but too small to be represented inthe | Result is denormalized 
specified format, and, if underflow exception is masked, or zero 
denormalization causes the loss of accuracy. 


Inexact Result | The true result is not exactly representable in the specified Normal processing 
(Precision) format (e.g. 1/3); the result is rounded according to the rounding | continues 
mode. 
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3.6 Initialization 


After FNINIT or RESET, the control word contains 
the value 037FH (all exceptions masked, precision 
control 64 bits, rounding to nearest) the same values 
as in an Intel287 after RESET. For compatibility with 
the 8087 and Intel287, the bit that used to indicate 
infinity control (bit 12) is set to zero; however, re- 
gardless of its setting, infinity is treated in the affine 
sense. After FNINIT or RESET, the status word is 
initialized as follows: 


e All exceptions are set to zero. 


e Stack TOP is zero, so that after the first push the 
stack top will be register seven (111B). 


e The condition code C3-Cp is undefined. 
e The B-bit is zero. 


The tag word contains FFFFH (all stack locations 
are empty). 


The Intel386 Microprocessor and Intel887 Math Co- 
Processor initialization software must execute a 
FNINIT instruction (i.e., FINIT without a preceding 
WAIT) after RESET. The FNINIT is not strictly re- 
quired for the Intel3886 software, but Intel recom- 
mends its use to help ensure upware compatibility 
with other processors. After a hardware RESET, the 
ERROR# output is asserted to indicate that an In- 
tel387 Math CoProcessor is present. To accomplish 
this, the IE (Invalid Exception) and ES (Error Sum- 
mary) bits of the status word are set, and the IM bit 
(Invalid Exception Mask) in the control word is 
cleared. After FNINIT, the status word and the con- 
trol word have the same values as in an Intel287 
Math CoProcessor after RESET. 


3.7 Processing Modes 


The Intel387 SX Math CoProcessor works the same 
whether the CPU is executing in real-addressing 
mode, protected mode, or virtual-8086 mode. All ref- 
erences to memory for numerics data or status infor- 
mation are performed by the CPU, and therefore 
obey the memory-management and protection rules 
of the CPU mode currently in effect. The Intel387 SX 
Math CoProcessor merely operates on_instruc- 
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tions and values passed to it by the CPU and there- 


fore is not sensitive to the processing mode of the 
CPU. 


The real-address mode and virtual-8086 mode, the 
Intel387 SX Math CoProcessor is completely upward 
compatible with software for the 8086/8087 and 
80286/80287 real-address mode systems. 


In protected mode, the Intel387 SX Math CoProces- 
sor is completely upward compatible with software 
for the 80286/80287 protected mode system. 


The only differences of operation that may appear 
when 8086/8087 programs are ported to the pro- 
tected mode (not using virtual-8086 mode) is in the 
format of operands for the administrative instruc- 
tions FLDENV, FSTENV, FRSTOR, and FSAVE. 


3.8 Programming Support 


Using the Intel887 SX Math CoProcessor requires 
no special programming tools, because all new in- 
structions and data types are directly supported by 
the assembler and compilers for high-level lan- 
guages. All Intel386 Microprocessor development 
tools that support Intel387 Math CoProcessor pro- 
grams can also be used to develop software for the 
Intel886 SX Microprocessors and Intel887 SX Math 
CoProcessors. All 8086/8088 development tools 
that support the 8087 can also be used to develop 
software for the CPU and Math CoProcessor in real- 
address mode or virtual-8086 mode. All 80286 de- 
velopment tools that support the Intel287 Math Co- 
Processor can also be used to develop software for 
the Intel386 CPU and Intel387 Math CoProcessor. 


4.0 HARDWARE SYSTEM 
INTERFACE 


In the following description of hardware interface, 
the # symbol at the end of a signal name indicates 
that the active or asserted state occurs when the 
signal is at a low voltage. When no # is present after 
the signal name, the signal is asserted when at the 
high voltage level. 
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4.1 Signal Description 


In the following signal descriptions, the Intel387 SX 
Math CoProcessor pins are grouped by function as 
shown by Table 4-1. Table 4-1 lists every pin by its 
identifier, gives a brief description and lists some of 
its characteristics (Refer to Figure 1-1 and Table 1-1 
for pin configuration). 


All output signals can be tri-stated by driving STEN 
inactive. The output buffers of the bi-directional data 
pins D15-D0 are also tri-state; they only leave the 
floating state during read cycles when the Math Co- 
Processor is selected. 


4.1.1 Intel386 CPU CLOCK 2 (CPUCLK2) 


This input uses the CLK2 signal of the CPU to time 
the bus control logic. Several other Math CoProces- 
sor signals are referenced to the rising edge of this 
signal. When CKM = 1 (synchronous mode) this pin 
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also clocks the data interface and control unit and 
the floating point unit of the Math CoProcessor. This 
pin requires CMOS-level input. The signal on this pin 
is divided by two to produce the internal clock signal 
CLK. 


4.1.2 Intel3887 MATH COPROCESSOR CLOCK 2 
(NUMCLK2) 


When CKM = 0 (asynchronous mode), this pin pro- 
vides the clock for the data interface and control unit 
and the floating point unit of the Math CoProcessor. 
In this case, the ratio of the frequency of NUMCLK2 
to the frequency of CPUCLK2 must lie within the 
range 10:16 to 14:10 and the maximum frequency 
must not exceed the device specifications. When 
CKM = 1 (synchronous mode), signals on this pin 
are ignored: CPUCLK2 is used instead for the data 
interface and control unit and the floating point unit. 
This pin requires CMOS level input and should be 
tied low if not used. 


Table 4-1. Pin Summary 


; Input/ Referenced 
Pintieme | Function ae Output 


Execution Control 


CPUCLK2 
NUMCLK2 


Microprocessor Clock2 
Math CoProcessor Clock2 


CKM Math CoProcessor Clock Mode 


RESETIN System Reset 


CPUCLK2 


Math CoProcessor Handshake 


PEREQ 
BUSY # 
ERROR # 


Processor Request 
Busy Status 
Error Status 


CPUCLK2 
CPUCLK2 
NUMCLK2 


Bus Interface 


Data Pins 
Write/Read Bus Cycle 


D15-—D0 
W/R# 


CPUCLK2 


High/Low CPUCLK2 


ADS # 
READY # 
READYO# 


Address Strobe 
Bus Ready Input 


Low 
Low 
Low 


CPUCLK2 
CPUCLK2 
CPUCLK2 


Ready Output 


Chip/Port Select 


Status Enable 
Numerics Select #1 
Numerics Select #2 
Command ' 


CPUCLK2 | 
CPUCLK2 
CPUCLK2 
CPUCLK2 


Power and Ground 


Voc System Power 
Vss System Ground 
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4.1.3 CLOCKING MODE (CKM) 


This pin is strapping option. When it is strapped to 
Voc (HIGH), the Math CoProcessor operates in syn- 
chronous mode; when strapped to Vss (LOW), the 
Math CoProcessor operates in asynchronous mode. 
These modes relate to clocking of the internal data 
interface and control unit and the floating point unit 
only; the bus control logic always operates synchro- 
nously with respect to the CPU. 


Synchronous mode requires the use of only one 
clock, the CPU’s CLK2. Use of synchronous mode 
eliminates one clock generator from the board 
design and is recommended for all designs. Syn- 
chronous mode also allows the internal Power Man- 
agement Unit to enable the idle and standby power 
saving modes. 


Asynchronous mode can provide higher perform- 
ance of the floating point unit by running a faster 
clock on NUMCLK2. (The CPU’s CLK2 must still be 
connected to CPUCLK2 input.) This allows the float- 
ing point unit to run up to 40% faster than in syn- 
chronous mode. Internal power management is dis- 
abled in asynchronous mode. 


4.1.4 SYSTEM RESET (RESETIN) 


A LOW to HIGH transition on this pin causes the 
Math CoProcessor to terminate its present activity 
and to enter a dormant state. RESETIN must remain 
active (HIGH) for at least 40 CPUCLK2 (NUMCLK2 if 
CKM = 0) periods. 


The HIGH to LOW transitions of RESETIN must be 
synchronous with CPUCLK2, so that the phase of 
the internal clock of the bus control logic (which is 
the CPUCLK2 divided by two) is the same as 
the phase of the internal clock of the CPU. After 
RESETIN goes LOW, at least 50 CPUCLK2 
(NUMCLK2 if CKM = 0) periods must pass before 
the first Math CoProcessor instruction is written into 
the Math CoProcessor. This pin should be connect- 
ed to the CPU RESET pin. Table 4-2 shows the 
status of the output pins during the reset sequence. 
After a reset, all output pins return to their inactive 
state except for ERROR# which remains active (for 
CPU recognition) until cleared. 


Table 4-2. Output Pin Status during Reset 


Pin Value 


HIGH READYO#, BUSY # 


LOW PEREQ, ERROR # 


Tri-State OFF D15-—D0 
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4.1.5 PROCESSOR REQUEST (PEREQ) 


When active, this pin signals to the CPU that the 
Math CoProcessor is ready for data transfer to/from 
its data FIFO. When all data is written to or read 
from the data FIFO, PEREQ is deactivated. This sig- 
nal always goes inactive before BUSY # goes inac- 
tive. This signal is reference to CPUCLK2. It should 
be connected to the CPU PEREQ input pin. 


4.1.6 BUSY STATUS (BUSY #) 


When active, this pin signals to the CPU that the 
Math CoProcessor is currently executing an instruc- 
tion. This signal is referenced to CPUCLK2. It should 
be connected to the CPU BUSY # input pin. 


4.1.7 ERROR STATUS (ERROR #) 


This pin reflects the ES bit of the status register. 
When active, it indicates that an unmasked excep- 


tion has occurred. This signal can be changed to the 


inactive state only by the following instructions (with- 
out a_ preceding WAIT); FNINIT, FNCLEX, 
FNSTENV, FNSAVE, FLDCW, FLDENV, and 
FRSTOR. ERROR # is driven active during RESET 
to indicate to the CPU that the Math CoProcessor is 
present. This pin is referenced to NUMCLK2 (or 
CPUCLK2 if CKM = 1). It should be connected to 
the ERROR # pin of the CPU. 


4.1.8 DATA PINS (D15-D0) 


These bi-directional pins are used to transfer data 
and opcodes between the CPU and Math CoProces- 
sor. They are normally connected directly to the cor- 
responding CPU data pins. HIGH state indicates a 
value of one. DO is the least significant data bit. Tim- 
ings are referenced to rising edge of CPUCLK2. 


4.1.9 WRITE/READ BUS CYCLE (W/R#) 


This signal indicates to the Math CoProcessor 
whether the CPU bus cycle in progress is a read or a 
write cycle. This pin should be connected directly to 
the CPU’s W/R# pin. HIGH indicates a write cycle 
to the Math CoProcessor; LOW a read cycle from 
the Math CoProcessor. This input is ignored if any of 
the signals STEN, NPS1#, or NPS2 are inactive. 
Setup and hold times are referenced to CPUCLK2. 


4.1.10 ADDRESS STROBE (ADS#) 


This input, in conjunction with the READY # input, 
indicates when the Math CoProcessor bus control 
logic may sample W/R # and the chip select signals. 
Setup and hold times are referenced to CPUCLK2. 
This pin should be connected to the ADS# pin of 
the CPU. 


4.1.11 BUS READY INPUT (READY #) 


This input indicates to the Math CoProcessor when 
a CPU bus cycle is to be terminated. It is used by the 
bus control logic to trace bus activities. Bus cycles 
can be extended indefinitely until terminated by 
READY #. This input should be connected to the 
same signal that drives the CPU’s READY # input. 
Setup and hold times are referenced to CPUCLK2. 


4.1.12 READY OUTPUT (READYO#) 


This pin is activated at such a time that write cycles 
are terminated after two clocks (except FLDENV 
and FRSTOR) and read cycles after three clocks. In 
configurations where no extra wait states are re- 
quired, this pin must directly or indirectly drive the 
READY # input of the CPU. Refer to the section enti- 
tled ‘BUS OPERATION” for details. This pin is acti- 
vated only during bus cycles that select the Math 
CoProcessor. This signal is referenced to CPUCLK2. 


(FLDENV and FRSTOR require data transfers larger 
than the FIFO. Therefore, PEREQ is activated for 
the duration of transferring 2 words of 32 bits and 
then deactivated until the FIFO is ready to accept 
two additional words. The length of the write cycles 
of the last operand word in each transfer as well as 
the first operand word transfer of the entire instruc- 
tion is 3 clocks instead of 2 clocks. This is done to 
give the Intel3886 CPU enough time to sample 
PEREQ and to notice that the Intel387 is not ready 
for additional transfers.) 


4.1.13 STATUS ENABLE (STEN) 


This pin serves as a chip select for the Math Co- 
Processor. When inactive, this pin forces BUSY #, 
PEREQ, ERROR# and READYO# outputs into a 
floating state. D15-D0 are normally floating and will 
leave the floating state only if STEN is active and 
additional conditions are met (read cycle). STEN 
also causes the chip to recognize its other chip se- 
lect inputs. STEN makes it easier to do on-board 
testing (using the overdrive method) of other chips in 
systems containing the Math CoProcessor. STEN 
should be pulled up with a resistor so that it can be 
pulled down when testing. In boards that do not use 
on-board testing STEN should be connected to Vcc. 
Setup and hold times are relative to CPUCLK2. Note 
that STEN must maintain the same setup and hold 
times as NPS1#, NPS2, and CMDO# (i.e., if STEN 
changes state during a Math CoProcessor bus cycle, 
it must change state during the same CLK period as 
the NPS1#, NPS2, and CMDO# signals). 
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4.1.14 MATH COPROCESSOR SELECT 1 
(NPS1#) 


When active (along with STEN and NPS2) in the first 
period of a CPU bus cycle, this signal indicates that 
the purpose of the bus cycle is to communicate with 
the Math CoProcessor. This pin should be connect- 
ed directly to the M/IO# pin of the CPU, so that the 
Math CoProcessor is selected only when the CPU 
performs I/O cycles. Setup and hold times are refer- 
enced to the rising edge of CPUCLK2. 


4.1.15 MATH COPROCESSOR SELECT 2 
(NPS2) 


When active (along with STEN and NPS1#) in the 
first period of a CPU bus cycle, this signal indicates 
that the purpose of the bus cycle is to communicate 
with the Math CoProcessor. This pin should be con- 
nected directly to the A23 pin of the CPU, so that the 
Math CoProcessor is selected only when the CPU 
issues one of the I/O addresses reserved for the 
Math CoProcessor (8000F8h, 8000FCh, or 8000FEh 
which is treated as 8000FCh by the Math CoProces- 
sor). Setup and hold times are referenced to the ris- 
ing edge of CPUCLK2. 


4.1.16 COMMAND (CMD0#) 


During a write cycle, this signal indicates whether an 
opcode (CMD0O# active low) or data (CMDO# inac- 
tive high) is being sent to the Math CoProcessor. 
During a read cycle, it indicates whether the control 
or status register (CMDO# active) or a data register 
(CMDO #) is being read. CMD0# should be connect- 
ed directly to the A2 output of the CPU. Setup and 
hold times are referenced to the rising edge of 
CPUCLK2 at the end of PH2. 


4.1.17 SYSTEM POWER (Vcc) 


System power provides the +5V DC supply input. 
All Vcc pins should be tied together on the circuit 
board and local decoupling capacitors should be 
used between Vcc and Vss. 


4.1.18 SYSTEM GROUND (Vss) 


System ground provides the OV connection from 
which all inputs and outputs are measured. All Vss 
pins should be tied together on the circuit board and 
local decoupling capacitors should be used between 
Voc and Vss. 
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4.2 System Configuration 


The Intel387 SX Math CoProcessor is designed to 
interface with the Intel3886 SX Microprocessor as 
shown by Figure 4-1. A dedicated communication 
protocol makes possible high-speed transfer of op- 
codes and operands between the CPU and Math 
CoProcessor. The Intel3887 SX Math CoProcessor is 
designed so that no additional components are re- 
quired for interface with the CPU. Most control pins 
of the Math CoProcessor are connected directly to 
pins of the CPU. 


The interface between the Math CoProcessor and 
the CPU has these characteristics: 


e The Math CoProcessor shares the local bus of 
the Intel386 SX Microprocessor. 


intel. 


The CPU and Math CoProcessor share the same 
reset signals. They may also share the same 
clock input; however, for greatest performance, 
an external oscillator may be needed. 


The corresponding Busy#, ERROR#, and 
PEREQ pins are connected together. 


The Math CoProcessor NPS1 # and NPS2 inputs 
are connected to the latched CPU M/IO# and 
A23 outputs respectively. For Math CoProcessor 
cycles, M/IO# is always LOW and A23 always 
HIGH. 


The Math CoProcessor input CMD0O is connected 
to the latched Ao output. The Intel386 SX Micro- 
processor generates address 8000F8H when 
writing a command and address 8000FCH or 
8000FEH (treated as 8000FCH by the Intel387 
SX Math CoProcessor) when writing or reading 
data. It does not generate any other addresses 
during Math CoProcessor bus cycles. 


FROM OTHER PERIPHERALS 


CLOCK Intel387™ SX MCP CLOCK 
GENERATOR 
CLK 


GENERATOR 
(OPTIONAL) 


{pene 


WAIT STATE 
GENERATOR 
(OPTIONAL) 


HLDA 


Intel386™ SX CPU 
RESET D/C# 


READY # LOCK# 
CLK2 BHE#, BLE# 


NA# 
HOLD 
INT# 
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Figure 4-1. Intel386™ SX CPU and intel387™ SX Math CoProcessor System Configuration 
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4.3 Math CoProcessor Architecture 


As shown in Figure 2-1 Block Diagram, the Intel387 
SX Math CoProcessor is internally divided into four 
sections; the Bus Control Logic (BCL), the Data In- 
terface and Control Logic, the Floating Point Unit 
(FPU), and the Power Management Unit (PMU). The 
Bus Control Logic is responsible for the CPU bus 
tracking and interface. The BCL is the only unit in 
the Math CoProcessor that must run synchronously 
with the CPU; the rest of the Math CoProcessor can 
run asynchronously with respect to the CPU. The 
Data Interface and Control Unit is responsible for the 
data flow to and from the FPU and the control regis- 
ters, for receiving the instructions, decoding them, 
sequencing the microinstructions, and for handling 
some of the administrative instructions. The Floating 
Point Unit (with the support of the control unit which 
contains the sequencer and other support units) ex- 
ecutes the mathematical instructions. The Power 
Manager is new to the Intel387 family. It is responsi- 
ble for shutting down idle sections of the device to 
save power. 


4.3.1 BUS CONTROL LOGIC 


The BCL communicates solely with the CPU using 
I/O bus cycles. The BCL appears to the CPU as a 
special peripheral device. It is special in two re- 
spects: the CPU initiates |/O automatically when it 
encounters ESC instructions, and the CPU uses re- 
served I/O addresses to communicate with the BCL. 
The BCL does not communicate directly with memo- 
ry. The CPU performs all memory access, transfer- 
ring input operands from the memory to the Math 
CoProcessor and transferring outputs from the Math 
CoProcessor to memory. 


4.3.2 DATA INTERFACE AND CONTROL UNIT 


The data interface and control unit latches the data 
and, subject to BCL control, directs the data to the 
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FIFO or the instruction decoder. The instruction de- 
coder decodes the ESC instructions sent to it by the 
CPU and generates controls that direct the data flow 
in the FIFO. It also triggers the microinstruction se- 
quencer that controls execution of each instruction. 
If the ESC instruction is FINIT, FCLEX, FSTSW, 
FSTSW AX, FSTCW, FSETPM, or FRSTPM, the 
control unit executes it independently of the FPU 
and the sequencer. The data interface and control 
unit is the unit that generates the BUSY #, PEREQ, 
and ERROR# signals that synchronize the Math 
CoProcessor activities with the CPU. 


4.3.3 FLOATING POINT UNIT 


The FPU executes all instructions that involve the 
register stack, including arithmetic, logical, transcen- 
dental, constant, and data transfer instructions. The 
data path in the FPU is 84 bits wide (68 significant 
bits, 15 exponent bits, and a sign bit) which allows 
internal operand transfers to be performed at very 
high speeds. 


4.3.4 POWER MANAGEMENT UNIT 


The Power Management Unit (PMU) controls all in- 
ternal power savings circuits. When the Math Co- 
Processor is not executing an instruction, the PMU 
disables the internal clock to the FPU, Control Unit, 
and Data Interface within three clocks. The Bus 
Control Logic remains enabled to accept the next 
instruction. Upon decode of a valid Math CoProces- 
sor bus cycle, the PMU enables the internal clock to 
all circuits. No loss in performance occurs. 


4.4 Bus Cycles ; 


All bus cycles are initiated by the CPU. The pins 
STEN, NPS1#, NPS2, CMDO, and W/R# identify 
bus cycles for the Math CoProcessor. Table 4-3 de- 
fines the types of Math CoProcessor bus cycles. 


Table 4-3. Bus Cycle Definition 


STEN | NPS1# CMDO# 


W/R# Bus Cycle Type 


Math CoProcessor not selected and all outputs in floating state 
Math CoProcessor not selected 
Math CoProcessor not selected 


CW or SW read from Math CoProcessor 
Opcode write to Math CoProcessor 
Data read from Math CoProcessor 

Data write to Math CoProcessor 
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4.4.1 INTEL387 SX MATH COPROCESSOR 
ADDRESSING 


The NPS1#, NPS2, and CMDO signals allow the 
Math CoProcessor to identify which bus cycles are 
intended for the Math CoProcessor. The Math Co- 
Processor responds to I/O cycles when the I/O ad- 
dress is 8000F8h, 8000FCh, and 8000FEh (treated 
as 8000FCh). The Math CoProcessor responds to 
1/O cycles when bit 23 of the I/O address is set. In 
other words, the Math CoProcessor acts as an I/O 
device in a reserved |/O address space. 


Because A23 is used to select the Intel887 SX Math 
CoProcessor for data transfers, it is not possible for 
a program running on the CPU to address the Math 
CoProcessor with an I/O instruction. Only ESC in- 
structions cause the CPU to communicate with the 
Math CoProcessor. 


4.4.2 CPU/MATH COPROCESSOR 
SYNCHRONIZATION 


The pins BUSY #, PEREQ, and ERROR# are used 
for various aspects of synchronization between the 
CPU and the Math CoProcessor. 


BUSY # is used to synchronize instruction transfer 
from the CPU to the Math CoProcessor. When the 
Math CoProcessor recognizes an ESC instruction it 
asserts BUSY#. For most ESC instructions, the 
CPU waits for the Math CoProcessor to deassert 
BUSY # before sending the new opcode. 


The Math CoProcessor uses the PEREQ pin of the 
CPU to signal that the Math CoProcessor is ready 
for data transfer to or from.its data FIFO. The Math 
CoProcessor does not directly access memory; rath- 
er, the CPU provides memory access services for 
the Math CoProcessor. (For this reason, memory ac- 
cess on behalf of the Math CoProcessor always 
obeys the protection rules applicable to the current 
CPU mode.) Once the CPU initiates an Math Co- 
Processor instruction that has operands, the CPU 
waits for PEREQ signals that indicate when the Math 
CoProcessor is ready for operand transfer. Once all 
operands have been transferred (or if the instruction 
has no operands) the CPU continues program exe- 
cution while the Math CoProcessor executes the 
ESC instruction. 


In 8087/8087 systems, WAIT instructions may be 
required to achieve synchronization of both com- 
mands and operands. In the Intel3886 Micropro- 
cessor and Intel387 Math CoProcessor systems, 
however, WAIT instructions are required only for op- 
erand synchronization; namely, after Math CoProc- 
essor stores to memory (except FSTSW and 
FSTCW) or load from memory. (In 80286/80287 
systems, WAIT is required before FLDENV and 
FRSTOR.) Used this way, WAIT ensures that the 
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value has already been written or read by the Math 
CoProcessor before the CPU reads or changes the 
value. 


Once it has started to execute a numerics instruction 
and has transferred and operands from the CPU, the 
Math CoProcessor can process the instruction in 
parallel with and independent of the host CPU. 
When the Math CoProcessor detects an exception, 
it asserts the ERROR# signal, which causes a CPU 
interrupt. 


4.4.3 SYNCHRONOUS/ASYNCHRONOUS 
MODES 


The internal logic of the Math CoProcessor can op- 
erate either directly from the CPU clock (synchro- 
nous mode) or from a separate clock (asynchronous 
mode). The two configurations are distinguished by 
the CKM pin. In either case, the bus control logic 
(BCL) of the Math CoProcessor is synchronized with 
the CPU clock. Use of asynchronous mode allows 
the BCL and the FPU section of the Math CoProces- 
sor to run at different speeds. In this case, the ratio 
of the frequency of NUMCLK2 to the frequency of 
CPUCLK2 must lie within the range 10:16 to 14:10. 
Use of synchronous mode eliminates one clock gen- 
erator from the board design. The internal Power 
Management Unit of the Intel887 SX Math CoProc- 
essor is disabled in asynchronous mode. 


4.4.4 AUTOMATIC BUS CYCLE TERMINATION 


In configurations where no extra wait states are re- 
quired, READYO# can drive the CPU’s READY # 
input and the Math CoProcessors READY # input. If 
wait states are required, this pin should be connect- 
ed to the logic that ORs all READY outputs from 
peripheral devices on the CPU bus. READYO# is 


asserted by the Math CoProcessor only during |/O 


cycles that select the Math CoProcessor. Refer to 
Section 5.0 Bus Operation for details. 


5.0 BUS OPERATION 


With respect to bus interface, the Intel387 SX Math 
CoProcessor is fully synchronous with the CPU. 
Both operate at the same rate because each gener- 
ates its internal CLK signal by dividing CPUCLK2 by 
two. Furthermore, both internal CLK signals are in 
phase, because they are synchronized by the same 
RESETIN signal. 


A bus cycle for the Math CoProcessor starts when 
the CPU activates ADS# and drives new values on 
the address and cycle definition lines (W/R#, 
M/lO#, etc.). The Math CoProcessor examines the 
address and cycle definition lines in the same CLK 
period during which ADS# is activated. This CLK 
period is considered the first CLK of the bus cycle. 
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During this first CLK period, the Math CoProcessor 
also examines the W/R# input signal to determine 
whether the cycle is a read or a write cycle and ex- 
amines the CMDO# input to determine whether an 
opcode, operand, or control/status register transfer 
is to occur. 


The Intel887 SX Math CoProcessor supports both 
pipelined (i.e., overlapped) and non-pipelined bus 
cycles. A non-pipelined cycle is one for which the 
CPU asserts ADS# when no other bus cycle is in 
progress. A pipelined bus cycle is one for which the 
CPU asserts ADS# and provides valid next address 
and control signals before the prior Math CoProces- 
sor cycle terminates. The CPU may do this as early 
as the second CLK period after asserting ADS# for 
the prior cycle. Pipelining increases the availability of 
the bus by at least one CLK period. The Intel387 SX 
Math CoProcessor supports pipelined bus cycles in 
order to optimize address pipelining by the CPU for 
memory cycles. 


Bus operation is described in terms of an abstract 
state machine. Figure 5-1 illustrates the states and 
state transitions for Math CoProcessor bus cycles: 


e T; is the idle state. This is the state of the bus 
logic after RESET, the state to which bus logic 
returns after every non-pipelined bus cycle, and 
the state to which bus logic returns after a series 
of pipelined cycles. 


¢ Trs is the READY# sensitive state. Different 
types of bus cycles may require a minimum of 
one or two successive Trs states. The bus logic 
remains in Trs state until READY # is sensed, at 
which point the bus cycle terminates. Any number 
of wait states may be implemented by delaying 
READY #, thereby causing additional successive 
Trs States. 


© Tp is the first state for every pipelined bus cycle. 
This state is not used by non-pipelined cycles. 


Note that the bus logic tracks bus state regardless 
of the values on the chip/port select pins. The 


ADS# 
INACTIVE 


READY # ACTIVE 
*ADS# ACTIVE 


ADS# ACTIVE 


"ALWAYS" 
READY # ACTIVE 
*ADS# INACTIVE 


READY # INACTIVE 


240225-7 


Figure 5-1. Bus State Diagram 
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READYO# output of the Math CoProcessor indi- 
cates when a Math CoProcessor bus cycle may be 
terminated if no extra wait states are required. For all 
write cycles (except those for the instructions 
FLDENV and FRSTOR), READYO# is always as- 
serted during the first Tras state, regardless of the 
number of wait states. For all read cycles (and write 
cycles for FLDENV and FRSTOR), READY -# is al- 
ways asserted in the second Trs state, regardless 
of the number of wait states. These rules apply to 
both pipelined and non-pipelined cycles. Systems 
designers may use READYO # in one of the follow- 
ing ways: 

1. Connect it (directly or through logic that ORs 
READY # signals from other devices) to the 
READY # inputs of the CPU and Math CoProces- 
sor. 


2. Use it as one input to a wait-state generator. 


The following sections illustrate different types of 
Intel387 SX Math CoProcessor bus cycles. Because 
different instructions have different amounts of over- 
head before, between, and after operand transfer 
cycles, it is not possible to represent in a few dia- 
grams all of the combinations of successive operand 
transfer cycles. The following bus cycle diagrams 
show memory cycles between Math CoProcessor 
operand transfer cycles. Note however that, during 
FRSTOR, some consecutive accesses to the Math 
CoProcessor do not have intervening memory ac- 
cesses. For the timing relationship between operand 
transfer cycles and opcode write or other overhead 
activities, see Figure 7-7 ‘Other Parameters”. 


5.1 Non-Pipelined Bus Cycles 


Figure 5-2 illustrates bus activity for consecutive 
non-pipelined bus cycles. 


At the second clock of the bus cycle, the Math Co- 
Processor enters the Trs state. During this state, it 
samples the READY # input and stays in this state 
as long as READY # is inactive. 


5.1.1 WRITE CYCLE 


In write cycles, the Math CoProcessor drives the 
READYO# signal for one CLK period during the 
second CLK period of the cycle (i.e., the first Trs 
state); therefore, the fastest write cycle takes two 
CLK periods (see cycle 2 of Figure 5-2). For the in- 
structions FLDENV and FRSTOR, however, the 
Math CoProcessor forces wait state by delaying the 
activation of READYO# to the second Trs state 
(not shown in Figure 5-2). 


The Math CoProcessor samples the D15-D0 inputs © 
into data latches at the falling edge of CLK as long 
as it stays in Tps state. 
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Cycles 1 & 2 represent part of the operand transfer cycle for instructions involving either 4-byte or 8-byte operand loads. 
Cycles 3 & 4 represent part of the operand transfer cycle for a store operation. 
*Cycles 1 & 2 could repeat here or T; states for various non-operand transfer cycles and overhead. 


Figure 5-2. Non-Pipelined Read and Write Cycles 


When READY # is asserted, the Math CoProcessor 
returns to the idle state. Simultaneously with the 
Math CoProcessor entering the idle state, the CPU 
may assert ADS# again, signaling the beginning of 
yet another cycle. 


5.1.2 READ CYCLE 


At the rising edge of CLK in the second CLK period 
of the cycle (i.e., the first Tras state), the Math Co- 
Processor starts to drive the D15-—D0O outputs and 
continues to drive them as long as it stays in Tras 
state. 


At least one wait state must be inserted to ensure 
that the CPU latches the correct data. Because the 
Math CoProcessor starts driving the data bus only at 
the rising edge of CLK in the second clock period of 
_ the bus cycle, not enough time is left for the data 
signals to propagate and be latched by the CPU be- 
fore the next falling edge of CLK. Therefore, the 
Math CoProcessor does not drive the READYO# 
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signal until the third CLK period of the cycle. Thus, if 
the READYO# output drives the CPU’s READY # 
input, one wait state is automatically inserted. 


Because one wait state is required for Math CoProc- 
essor reads, the minimum length of a Math CoProc- 
essor read cycle is three CLK periods, as cycle 3 of 
Figure 5-2 shows. 


When READY # is asserted, the Math CoProcessor 
returns to the idle state. Simultaneously with the 
Math CoProcessor’s entering the idle state, the CPU 
may assert ADS# again, signaling the beginning of 
yet another cycle. The transition from Trs state to 
idle state causes the Math CoProcessor to put the 
D15-D0 outputs into the floating state, allowing an- 
other device to drive the data bus. 


5.2 Pipelined Bus Cycles 


Because all the activities of the Math CoProcessor 
bus interface occur either during the Trs state or 


a 
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during the transitions to or from that state, the only 
difference between a pipelined and a non-pipelined 
cycle is the manner of changing from one state to 
another. The exact activities during each state are 


detailed in the previous section “Non-pipelined Bus 
Cycles”. 


When the CPU asserts ADS# before the end of a 
bus cycle, both ADS# and READY # are active dur- 
ing a Trs state. This condition causes the Math Co- 
Processor to change to a different state named Tp. 
One clock period after a Tp state, the Math CoProc- 
essor always returns to the Trs state. In consecu- 
tive pipelined cycles, the Math CoProcessor bus log- 
ic uses only the Trs and Tp states. 


Figure 5-3 shows the fastest transitions into and out 
of the pipelined bus cycles. Cycle 1 in the figure rep- 
resents a non-pipelined cycle. (Non-pipelined write 
are always followed by another non-pipelined cycle, 


CYCLE 1 
NON-PIPELINED 
MEMORY READ 


CPUCLK2 


CYCLE 2 
PIPELINED 
Math CoProcessor 
WRITE 
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because READY # is asserted before the earliest 
possible assertion of ADS# for the next cycle.) 


Figure 5-4 shows pipelined write and read cycles 
with one additional Tras state beyond the minimum 
required. To delay the assertion of READY# re- 
quires external logic. 


5.3 Mixed Bus Cycles 


When the Math CoProcessor bus logic is in the Tas 
state, it distinguishes between non-pipelined and 
pipelined cycles according to the behavior of ADS # 
and READY#. In a non-pipelined cycle, only 
READY # is activated, and the transition is from the 
Trs State to the idle state. In a pipelined cycle, both 
READY # and ADS# are active, and the transition is 
first from Trs state to Tp state, then, after one clock 
period, back to Trs state. 


CYCLE 4 
NON-PIPELINED 
Math CoProcessor 
WRITE 


Tp Trs T Trs 


CYCLE 3 
PIPELINED 
MEMORY READ 


al all alle ll 


NPS2, ft 
=| a'r Sees ete ees ae a Me ice 
CMDe# {fg} 


et tree 
regen 


READYO# 


READY# XXX 


— 


RM | Boek 
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Cycle 1 -Cycle 4 represent the operand transfer cycle for an instruction involving a transfer of two 32-bit loads in total. 


The opcode write cycles and other overhead are not shown. 


Note that the next cycle will be a pipelined cycle if both READY # and ADS# are sampled active at the end of a Trs 


state of the current cycle. 


Figure 5-3. Fastest Transitions to and from Pipelined Cycles 
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CYCLE 1 CYCLE 2 
PIPELINED WRITE PIPELINED READ 


CPUCLK2 


YY 
we ol A Ma ie ER Oa es 


W/R# 
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D15-DO | MEMORY Math 
CoProcessor 
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NOTE: 
1. Cycles between operand write to the Math CoProcessor and storing result. 


Figure 5-4. Pipelined Cycles with Wait States 
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5.4 BUSY # and PEREQ Timing 
Relationship 


Figure 5-5 shows the activation of BUSY# at the 
beginning of instruction execution and its deactiva- 


CPUCLK2 


(CLK) 


READY # 


NOTE 1 


NOTES: 
1. Instruction dependent. 


intel387™ SX MATH COPROCESSOR 


tion upon completion of the instruction. PEREQ is 

_ activated within this interval. If ERROR # is ever as- 
serted, it would be asserted at least six CPUCLK2 
periods after the deactivation of PEREQ and would 
be deasserted at least six CPUCLK2 periods before 
the deactivation of BUSY #. 


187 OPERAND 
WRITE 


NOTE 2 NOTE 3 | NOTE 1 
240225-11 


2. PEREQ is an asynchronous input to the Intel386™ Microprocessor; it may not be asserted (instruction dependent). 


3. More operand transfers. 
4. Memory read (operand) cycle is not shown. 


Figure 5-5. STEN, BUSY #, and PEREQ Timing Relationships 
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6.0 PACKAGE SPECIFICATIONS 


6.1 Mechanical Specifications 


The Intel387 SX Math CoProcessor is packaged in a 
68-pin PLCC package. Detailed mechanical specifi- 
cations can be found in the Intel Packaging Specifi- 
cation, Order Number 231369. 


6.2 Thermal Specifications 


The Intel3887 SX Math CoProcessor is specified for 
operation when the case temperature is within the 
range of 0°C to 100°C. The case temperature (Tc) 
may be measured in any environment to determine 
whether the Intel387 SX Math CoProcessor is within 
the specified operating range. The case temperature 
should be measured at the center of the top surface. 


intel. 


The ambient temperature (Ta) is guaranteed as long 
as Tc is not violated. The ambient temperature can 
be calculated from the @jc (thermal resistance con- 
stant from the transistor junction to the case) and 
03a (thermal resistance from junction to ambient) 
from the following calculations: 


Junction Temperature Ty = To + P*8jc 
Ambient Temperature Ta = Ty — P*Ojaq 
Case Temperature To = Ta + P* (O@jq — 8jc) 


Values for 6ja and @ jc are given in Table 6-1 for the 
68 pin PLCC package. @jc is given at various air- 
flows. Table 6-2 shows the maximum T, allowable 
without exceeding Tc at various airflows. Note that 
T, Can be improved further by attaching a heat sink 
to the package. P is calculated by using the maxi- 
mum hot Icc and maximum Vcc. 


Table 6-1. Thermal Resistances (°C/ Watt) 0 jc and Oya 


Oya versus Airflow - ft/min (m/sec) 


Package — 8NC 400 600 800 1000 
(2.03) (3.04) (4.06) (5.07) 


Terme [es | 0 | 2 | o | ws | | 2 


arias @ 6-2. Maximum T, at Various Airflows 


sepinpice | 049 | 03 


7.0 ELECTRICAL CHARACTERISTICS 


Ta (°C) versus Airflow - ft/min (m/sec) 


Package 400 800 1000 
(2.03) Ps “A (4.06) (5.07) 
Peta. | ose |. eee) cere 


Maximum Ta, is calculated at maximum Voc and maximum Icc. 


The following specifications represent the targets of the design effort. They are subject to change without 
notice. Contact your Intel representative to get the most up-to-date values. 


7.1 Absolute Maximum Ratings* 


Case Temperature Tc Under Bias . . .0°C to + 100°C 


Storage Temperature .......... —65°C to + 150°C 
Voltage on Any Pin 

with Respect to Ground....... —05 to Vec +05 
POWS! DMRS sc casoseieiasndadzasiaves 0.8W 
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NOTICE: This is a production data sheet. The specifi- 


cations are subject to change without notice. 


* WARNING: Stressing the device beyond the “Absolute 
Maximum Ratings” may cause permanent damage. 
These are stress ratings only. Operation beyond the 
“Operating Conditions” is not recommended and ex- 
tended exposure beyond the “Operating Conditions” 
may affect device reliability. 


: | 
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7.2 D.C. Characteristics 
Table 7-1. D.C. Specifications Tc = 0°C to + 100°C, Voc = 5V +10% 


Input LO Voltage (Note 1) 
Input HI Voltage 2. : (Note 1) 
CPUCLK2 and NUMCLK2 , 

Input LO Voltage 
CPUCLK2 and NUMCLK2 
Input HI Voltage 


Output LO Voltage 
Output HI Voltage 
Output HI Voltage 


Power Supply Current 
Dynamic Mode 
Freq. = 33 MHz(5) 


(Note 2) 
(Note 3) 
(Note 4) 


135 mA 


Freq. = 25 MHz(5) Icc typ. = 130 mA 
Freq. = 20 MHz(5) loc typ. = 110 mA 
Freq. = 16 MHz(5) Icc typ. = 90 mA 
Freq. = 1 MHz(5) loc pak =5mA 
Idle Mode(®) = 4mA 


Input Capacitance 
1/O Capacitance 
Clock Capacitance 


NOTES: 
1. This parameter is for all inputs, excluding the clock inputs. 
2. This parameter is measured at lo, as follows: 
Data = 4.0 mA 
READYO#, ERROR#, BUSY #, PEREQ = 25 mA 
3. This parameter is measured at Ioy as follows: 
Data = 1.0mA 
READYO#, ERROR#, BUSY #, PEREQ = 0.6 mA 
4. This parameter is measured at Igy as follows: 
Data = 0.2 mA 
READYO#, ERROR#, BUSY # PEREQ = 0.12 mA 
5. Synchronous Clock Mode (CKM = 1). Icc is measured at steady state, maximum capacitive loading on the outputs, and 
worst-case D.C. level at the inputs. 
6. Intel887 SX Math CoProcessor Internal Idle Mode. Synchronous clock mode, clock and control inputs are active but the 
Math CoProcessor is not executing an instruction. Outputs driving CMOS inputs. 
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7.3 A.C. Characteristics 


Table 7-2a. Timing Requirements of the Bus Interface Unit 


Tc = O°C to + 100°C, Vcc = 5V + 10% nein a made at 1.5V unless otherwise specified) 


CPUCLK2 
CPUCLK2 
CPUCLK2 
CPUCLK2 
CPUCLK2 
CPUCLK2 
CPUCLK2 


READYO # 
PEREQ 
BUSY # 
ERROR # 


D15-D0 
D1i5-D0 
D15-—D0 
D15-—D0 


READYO # 
PEREQ 
BUSY # 
ERROR # 


READY # 
READY # 
CMDO # 
CMDO # 


NPS1#, NPS2 
NPS1#, NPS2 


STEN 
STEN 


NOTE: 


Re i-2 


Period 
High Time 
High Time 
Low Time 
Low Time 
Fall Time 
Rise Time 


Out Delay 
Out Delay 
Out Delay 
Out Delay 


Out Delay 
Setup Time 
Hold Time 
Float Time 


Float Time 
Float Time 
Float Time 
Float Time 


Setup Time 
Hold Time 
Setup Time 
Hold Time 


Setup Time 
Hold Time 
Setup Time 
Hold Time 
Setup Time 
Hold Time 
Setup Time 
Hold Time 


Test 
Conditions 


2.0V 

2.0V 

Voc — 0.8V 

2.0V 

0.8V 

From Voc — 0.8V to 0.8V 
From 0.8V to Vcc —0.8V 


Refer to 
Figure 


*Float condition occurs when maximum output current becomes less than I,o in magnitude. Float delay is not tested. 
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Table 7-2b. Timing Requirements of the Execution Unit (Asynchronous Mode CKM = 0) 


Test 
Conditions 


Refer to 
Figure 


Max Max 
toe | tet | to | th 


NUMCLK2 t1 Period 20 500 2.0V 

NUMCLK2 t2a High Time 6 2.0V 

NUMCLK2 t2b High Time 3 Voc — 0.8V 

NUMCLK2 t8a Low Time 6 2.0V 

NUMCLK2 t8b Low Time 4 0.8V 

NUMCLK2 t4 Fall Time 7 From Voc — 0.8V to 0.8V 
NUMCLK2 t5 Rise Time vi From 0.8V to Vcc —0.8V 


NUMCLK2/ 10/16 | 14/10 | 10/16 | 14/10 
CPUCLK2 
NOTE: | | ) 


If not used (CKM = 1) tie NUMCLK2 low. 


Table 7-2c. Other A.C. Parameters 


| Pin’ =| Symbol | Parameter 
RESETIN 
RESETIN RESETIN Inactive to 1st 
Opcode Write 


ERROR # (In)Active to 
BUSY # Inactive 


NUMCLK2 


NUMCLK2 


CPUCLK2 


| Max 
— 
ae 
— 


BUSY #, ERROR# pe 
PEREQ, ERROR # 134 PEREQ Inactive to 
| ERROR # Active 


CPUCLK2 


READY #, BUSY # READY # Active to BUSY # 


Active 
READY # 
READY # 


Minimum Time from 
Opcode Write to 
Opcode/Operand Write 


Minimum Time from 
Operand Write to Operand 
Write 
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ee a SS ee 
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| || nso 
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Sie READYO#, PEREQ, 
BUSY#, ERROR# 
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NOTE: 
*Typical part under worst-case conditions. 


Figure 7-1a. Typical Output Valid Delay vs Load Capacitance at Max Operating Temperature 


(0.4V - 4.0V) 
(0.4V - 4.0V) 


READYO#, PEREQ, 


BUSY#, ERROR# READYO#, PEREQ, 


BUSY#, ERROR# 


TYPICAL* OUTPUT RISE TIME (nS) 
TYPICAL* OUTPUT FALL TIME (nS) 


50 100 150 
LOAD CAPACITANCE, C, (pF) LOAD CAPACITANCE, C, (pF) 


240225-13 240225-14 
NOTE: 
*Typical part under worst-case conditions. 


_ 
< 
= 

~ 

Q 

Oo 
= 
= 
= 
x 
< 
= 


FREQUENCY (MHz) 
240225-15 


Figure 7-1c. Maximum Icc vs Frequency 
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VIH/VCH (MIN) VIH/VCH VIH/VCH (MIN) 
(MIN) 
top 


CPUCLK2/NUMCLK2 
2.0V 


To 


t 


MIN DELAY ‘i 


1.5¥ 
} INPUTS 


MAX DELAY 
240225-16 


Figure 7-2. CPUCLK2/NUMCLK2 Waveform and Measurement Points for Input/Output 


(CLK)  (PH2) 


CPUCLK2 


ty MAX 


ty MIN 
(OUTPUTS) l 40504 


(ERROR# REFERENCED TO NUMCLK2) 
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Figure 7-3. Output Signals 
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(PH1) 


CPUCLK2 


W/R# 


NPS 1#, NPS2, 
STEM, 
CMDO# 


READY # 


D15-D0 
(INPUT) 


D15-D0 
(OUTPUT) 
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Figure 7-4. Input and I/O Signals 


(PH1 or PH2) (PH1 or PH2) 


CPUCLK2 


RESET l SANANAN 


240225-19 


NOTE: 
The second internal processor phase following RESET high to low transition is PH2. 


Figure 7-5. RESET Signal 
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PEREQ 


BUSY #, ERROR#, READYO# 
240225-20 


Figure 7-6. Float from STEN 


es 


157 OPCODE 157 OPERAND QND OPERAND 
WRITE WRITE WRITE (NOTE 1) 


CPUCLK2 


(CLK) 


(ep ee. 


HAirirt tee 


READY # 


ee. 


ERROR# 
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*In NUMCLK2’s 
**or last operand 


' NOTE: 
1. Memory read (operand) cycle is not shown. 


Figure 7-7. Other Parameters 
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8.0 INTEL387 SX MATH 
eee INSTRUCTION 


Instructions for the Intel387 SX Math CoProcessor 
assume one of the five forms shown in Table 8-1. In 
all cases, instructions are at least two bytes long and 
begin with the bit pattern 11011B, which identifies 
the ESCAPE class of instruction. Instructions that 
refer to memory operands specify addresses using 
the CPU’s addressing modes. 


MOD (Mode field) and R/M (Register/Memory spec- 
ifier) have the same interpretation as the corre- 
sponding fields of CPU instructions (refer to Pro- 
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grammer’s Reference Manual for the CPU). SIB 
(Scale Index Base) byte and DISP (displacement) 
are optionally present in instructions that have MOD 
and R/M fields. Their presence depends on the val- 
ues of MOD and R/M, as for instructions of the CPU. 


The instruction summaries that follow in Table 8-2 
assume that the instruction has been prefetched, 
decoded, and is ready for exucution; that bus cycles 
do not require wait states; that there are no local bus 
HOLD requests delaying processor access to the 
bus; and that no exceptions are detected during in- 
struction execution. If the instruction has MOD and 
R/M fields that call for both base and index regis- 


Table 8-1. Instruction Formats 


First Byte 


an fk ODO YO — 


OP = Instruction opcode, possibly split into two fields OPA and OPB 


MF = Memory Format 
00 - 32-bit real 
01 - 32-bit integer 
10 - 64-bit real 
11 - 16-bit integer 
d = Destination 
0 - Destination is ST(0) 
1 - Destination is ST(i) 
R XOR d = 0 - Destination (op) Source 
R XOR d = 1 - Source (op) Destination 
*In FSUB and FDIV, the low-order bit of OPB is the R (reversed) bit 
P = POP 
0 - Do not pop stack 
1 - Pop stack after operation 
ESC = 11011 
ST(i) = Register stack element i 
000 = Stack top 


001 = Second stack element 
e 


111 = Eighth stack element 
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Second Byte 


ters, add one clock. 
Optional 
Fields 


[ore | am | se | DSP 
Tse | ois 
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Encoding Clock Count Range 
Optional 32-Bit 32-Bit 64-Bit 16-Bit 
DATA TRANSFER 
FLD = Load@ : 


Integer/real memory to ST(0) ESC MF 1 MOD 000 R/M SIB/DISP 11-20 28-44 20-27 


Long integer memory to ST(0) ESC 111 MOD 101 R/M SIB/DISP 30-58 


Extended real memory to ST(0) ESC 011 MOD 101 R/M SIB/DISP 16-47 


BCD memory to ST(0) ESC 111 SIB/DISP 49-101 
ST(i) to ST(0) ESC 001 7-12 
FST = Store 

ST(0) to integer/real memory ESC MF 1 SIB/DISP 27-45 59-78 
ST(0) to ST(i) ESC 101 7-11 
FSTP = Store and Pop 
ST(0) to integer/real memory ESC MF 1 SIB/DISP 27-45 59-78 59 
ST(0) to long integer memory ESC 111 SIB/DISP 64-86 
ST(0) to extended real memory ESC 011 SIB/DISP 50-56 
ST(0) to BCD memory ESC 111 SIB/DISP 116-194 


ST(0) to ST(i) ESC 101 11011 ST (i) 7-11 


FXCH = Exchange 


ST(i) and ST(0) ESC 001 11001 ST(i) 


COMPARISON 
FCOM = Compare 


Integer/real memory to ST(0) ESC MF 0 MOD 010 R/M SIB/DISP 15-27 36-54 18-31 
ST(i) to ST(0) ESC 000 11010 ST(i) 13-21 


FCOMP = Compare and pop 


Integer/real memory to ST(0) 15-27 36-54 18-31 
ST(i) to ST(0) 13-21 
FCOMPP = Compare and pop twice 
ST(1) to ST(0) 
FTST = Test ST(0) 


FXAM = Examine ST(0) | Escoot | 11100101 | 
Shaded areas indicate instructions not available in 8087/80287. 
NOTE: 


a. When loading single or double precision zero from memory, add 5 clocks. 
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Nn ® 


Encoding Clock Count Range _ 
Byte 1 Optional 32-Bit 32-Bit 64-Bit 16-Bit 
yt Bytes 2-6 Real integer Real Integer 


ARITHMETIC 
FADD = Add 


MOD 000 R/M SIB/DISP 
11000 ST(i) SIB/DISP 


36-58 
12-265 


Integer/real memory to ST(0) 19-38 
ST(i) and ST(0) 
FSUB = Subtract 
ESC MF 0 


ESC dP 0 


36-58 19-38 


12-264 


Integer/real memory with ST(0) 
ST(i) to ST(0) 
FMUL = Multiply 


MOD 10 R R/M SIB/DISP 


1110 R R/M 


MOD 001 R/M SIB/DISP 45-73 


17-50¢ 


Integer/real memory with ST(0) 27-57 
ST(i) and ST(0) 


FDIV = Divide 


ESC dPO 1100 1 R/M 


103-116f 85-95 
77-80h 


MOD 11 R R/M SIB/DISP 79-87 


1111 RR/M 


Integer/real memory with ST(0) ESC MF 0 


ST(i) and ST(0) 


FSQRT! = Square root 
FSCALE = Scale ST(0) by ST(1) 


FPREM = Partial remainder ESC 001 1111 1000 


SESSA Sea SRI 


97-111 
44-82 
56-140 


0. 


FRNDINT = Round ST(0) to integer 


FXTRACT = Extract components 
of ST(0) 


FABS = Absolute value of ST(0) 
FCHS = Change sign of ST(0) 


TRANSCENDENTAL 


FPTANK = Partial tangent of ST(0) 


ESC 001 1110 0001 


Escoo1 | 11110010 


162-430) 


250-420 


FPATAN = Partial arctangent of ST(0) Escoo1 | 11110011 | 


POSITS é : -s oe 


1111 0000 
FYL2x™ = ST(1) * logaST(O) 
FYL2XP1N = ST(1) *loga[ST() + 1.0] |__ESCoo1 | 11111001 _| 


Shaded areas indicate instructions not available in 8087/80287. 


NOTES: 

b. Add 3 clocks to the range when d = 1. 

c. Add 1 clock to each range when R = 1. 

d. Add 3 clocks to the range when d = 0. 

e. typical = 52 (When d = 0, 46-54, typical = 49). 

f. Add 1 clock to the range when R = 1. 

g. 135-141 when R = 1. 

h. Add 3 clocks to the range when d = 1. 

i. =-0 = STO) <= + oo, 

j. These timings hold for operands in the range |x| < 7. For operands not in this range, up to 76 additional clocks may be 
needed to reduce the operand. 

k. 0 < ST(O) < 263. 

L-10 = SO) = 10. 

m. 0 < ST(0) < 0, —o < ST(1) < +0. 

n. 0 < |ST(O)| < [2-SQRT(2)]/2, — 2° <ST(1) < +0. 
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F2XM1! = 2ST(0) — 4 


167-410 
99-436 
210-447 


CONSTANTS 

FLDZ = Load +0.0 to ST(0) 
FLD1 = Load + 1.0 to ST(0) 
FLDPI = Load 7 to ST(0) 
FLDL2T = Load logo(10) to ST(0) 
FLDL2E = Load logo(e) to ST(0) 
FLDLG2 = Load logj0(2) to ST(0) 
FLDLN2 = Load log,(2) to ST(0) 


PROCESSOR CONTROL 
FINIT = Initialize Math CoProcessor 


FLDCW = Load control word from memory 


FSTCW = Store control word to memory 
FSTSW = Store status word to memory 
FSTSW AX = Store status word to AX 


FCLEX = Clear exceptions 

FSTENV = Store environment 
FLDENV = Load environment 
FSAVE = Save state 

FRSTOR = Restore state 

FINCSTP = Increment stack pointer 
FDECSTP = Decrement stack pointer 
FFREE = Free ST(i) 

FNOP = No operations 
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Encoding Clock Count Range 


32-Bit 64-Bit 
Integer Real 


32-Bit 
Real 


16-Bit 
Integer 


| Escoot | 14101110 | 
| Escoot | 11101001 
| Escoot | 14101101 


ESC 011 
ESC 001 


1110 0011 33 


SIB/DISP 19 
SIB/DISP 15 
SIB/DISP 15 


1110 0000 13 


MOD 101 R/M 
ESC 001 
ESC 101 
ESC 111 


MOD 111 R/M 
MOD 111 R/M 


ESC 011 1110 0010 " 


ESC 001 SIB/DISP 117-118 
ESC 001 ° 
ESC 101° 
ESC 101 
ESC 001 


ESC 001 


MOD 110 R/M 
MOD 100 R/M 
MOD 110 R/M 


SIB/DISP 85 
SIB/DISP 
SIB/DISP 


402-403 


MOD 100 R/M 415 


11110111 21 
11110110 22 


ESC 101 
ESC 001 


1100 0 ST(i) 18 


1101 0000 12 
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APPENDIX A 
INTEL387 SX MATH COPROCESSOR 
COMPATIBILITY 


A.1 8087/80287 Compatibility 


This section summarizes the differences between the Intel387 SX Math CoProcessor and the 80287 Math 
CoProcessor. Any migration from the 8087 directly to the Intel387 SX Math CoProcessor must also take into 
account the differences between the 8087 and the 80287 Math CoProcessor as listed in Appendix B. 


Many changes have been designed into the Intel887 SX Math CoProcessor to directly support the IEEE 


standard in hardware. These changes result in increased performance by eliminating the need for software 
that supports the standard. 


A.1.1 GENERAL DIFFERENCES 


The Intel387 SX Math CoProcessor supports only affine closure for infinity arithmetic, not projective closure. 


Operands for FSCALE and FPATAN are no longer restricted in range (except for + %); F2XM1 and FPTAN 
accept a wider range of operands. 


Rounding control is in effect for FLD constant. 


Software cannot change entries of the tag word to values (other than empty) that differ from actual register 
contents. 


After reset, FINIT, and incomplete FPREM, the Intel887 SX Math CoProcessor resets to zero the condition 
code bits C3-—Cpo of the status word. 


In conformance with the IEEE standard, the Intel387 SX Math CoProcessor does not support the special data 
formats pseudo-zero, pseudo-NaN, pseudo-infinity, and unnormal. 


The denormal exception has a different purpose on the Intel387 SX Math CoProcessor. A system that uses the 
denormal exception handler solely to normalize the denormal operands, would better mask the denormal 
exception on the Intel387 SX Math CoProcessor. The Intel387 SX Math CoProcessor automatically normalizes 
denormal operands when the denormal exception is masked. 


1-460 


intel ‘ Intel387™ SX MATH COPROCESSOR 


A.1.2 EXCEPTIONS 


A number of differences exist due to changes in the IEEE standard and to functional improvements to the 
architecture of the Intel387 SX Math CoProcessor: 


1. 


13. 


14. 


15. 


When the overflow or underflow exception is masked, the Intel887 SX Math CoProcessor differs from the 
80287 in rounding when overflow or underflow occurs. The Intel887 SX Math CoProcessor produces 
results that are consistent with the rounding mode. 


. When the underflow exception is masked, the Intel387 SX Math CoProcessor sets its underflow flag only if 


there is also a loss of accuracy during denormalization. 


. Fewer invalid-operations exceptions due to denormal operand, because the instructions FSQRT, FDIV, 


FPREM, and conversions to BCD or to integer normalize denormal operands before proceeding. 


. The FSQRT, FBSTP, and FPREM instructions may cause underflow, because they support denormal 


operands. 


. The denormal exception can occur during the transcendental instruction and the FXTRACT instruction. 
. The denormal exception no longer takes precedence over all other exceptions. 
. When the denormal exception is masked, the Intel887 SX Math CoProcessor automatically normalizes 


denormal operands. The 8087/80287 performs unnormal arithmetic, which might produce an unnormal 
result. 


. When the operand is zero, the FXTRACT instruction reports a zero-divide exception and leaves — ° in 


ST(1). 


. The status word has a new bit (SF) that signals when invalid-operation exceptions are due to stack 


underflow or overflow. 


. FLD extended precision no longer reports denormal exceptions, because the instruction is not numeric. 
. FLD single/double precision when the operand is denormal converts the number to extended precision 


and signals the denormal operand exception. When loading a signaling NaN, FLD single/double precision 
signals an invalid-operation exception. 


. The Intel387 SX Math CoProcessor only generates quiet NaNs (as on the 80287); however, the Intel387 


SX Math CoProcessor distinguishes between quiet NaNs and signaling NaNs. Signaling NaNs trigger 
exceptions when they are used as operands; quiet NaNs do not (except for FCOM, FIST, and FBSTP 
which also raise IE for quiet NaNs). 


When stack overflow occurs during FPTAN and overflow is masked, both ST(0) and ST(1) contain quiet 
NaNs. The 80287/8087 leaves the original operand in ST(1) intact. 


When the scaling factor is + 0, the FSCALE instruction behaves as follows: 

e FSCALE (0, °°) generates the invalid operation exception. 

e FSCALE (finite, — 9%) generates zero with the same sign as the scaled operand. 
e FSCALE (finite, + °°) generates © with the same sign as the scaled operand. 


The 8087/80287 returns zero in the first case and raises the invalid-operation exception in the other 
cases. 


The Intel387 SX Math CoProcessor returns signed infinity/zero as the unmasked response to massive 
overflow/underflow. The 8087 and 80287 support a limited range for the scaling factor; within this range 
either massive overflow/underflow do not occur or undefined results are produced. 
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APPENDIX B 
COMPATIBILITY BETWEEN THE 80287 
AND 8087 MATH COPROCESSOR 


The 80286/80287 operating in Real Address mode will execute 8086/8087 programs without major modifica- 
tion. However, because of differences in the handling of numeric exceptions by the 80287 Math CoProcessor 
and the 8087 Math CoProcessor, exception handling routines may need to be changed. This appendix summa- 
rizes the differences between the 80287 Math CoProcessor and the 8087 Math CoProcessor, and provides 
details showing how 8087/8087 programs can be ported to the 80286/80287. 


hi 


The Math CoProcessor signals exceptions through a dedicated ERROR # line to the 80286. The Math 
CoProcessor error signal does not pass through an interrupt controller (the 8087 INT signal does). There- 
fore, any interrupt controller oriented instructions in numeric exception handlers for the 8086/8087 should 
be deleted. 


. The 8087 instructions FENI and FDISI perform no useful function in the 80287. If the 80287 encounters one 


of these opcodes in its instruction stream, the instruction will effectively be ignored; none of the 80287 
internal states will be updated. While 8086/8087 programs containing the instruction may be executed on 
the 80286/80287, it is unlikely that the exception handling routines containing these instructions will be 
completely portable to the 80287. 


. Interrupt vector 16 must point to the numeric exception handling routine. 
. The ESC instruction address saved in the 80287 includes any leading prefixes before the ESC opcode. The 


corresponding address saved in the 8087 does not include leading prefixes. 


. In Protected Address mode, the format of the 80287’s saved instruction and address pointers is different 


than for the 8087. The instruction opcode is not saved in Protected mode; exception handlers will have to 
retrieve the opcode from memory if needed. 


. Interrupt 7 will occur in the 80286 when executing ESC instructions with either TS (task switched) or EM 


(emulation) of the 80286 MSW set (TS = 1 or EM = 1). It TS is set, then a WAIT instruction will also cause 
interrupt 7. An exception handler should be included in 80286/80287 code to handle these situations. 


. Interrupt 9 will occur if the second or subsequent words of a floating point operand fall outside a segment’s 


size. Interrupt 13 will occur if the starting address of a numeric operand falls outside a segment’s size. An 
exception handler should be included in 80286/80287 code to report these programming errors. 


. Except for the processor control instructions, all of the 80287 numeric instructions are automatically syn- 


chronized by the 80286 CPU; the 80286 CPU automatically tests the BUSY # line from the 80287 to ensure 
that the 80287 has completed its previous instruction before executing the next ESC instruction. No explicit 
WAIT instructions are required to assure this synchronization. For the 8087 used witth 8086 and 8088 
processors, explicit WAITs are required before each numeric instruction to ensure synchronization. Al- 
though 8086/8087 programs having explicit WAIT instructions will execute perfectly on the 80286/80287 
without reassembly, these WAIT instructions are unnecessary. 


. Since the 80287 does not require WAIT instructions before each numeric instruction, the ASM286 assem- 


bler does not automatically generate these WAIT instuctions. The ASM86 assembler, however, automati- 
cally precedes every ESC instruction with a WAIT instruction. Although numeric routines generated using 
the ASM86 assembler will generally execute correctly on the 80286/80287, reassembly using ASM286 
may result in a more compact code image. | 


The processor control instructions for the 80287 may be coded using either a WAIT or No-WAIT form of 
mnemonic. The WAIT forms of these instructions cause ASM286 to precede the ESC instructions with a CPU 
WAIT instruction, in the identical manner as does ASM86. 
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HIGH PERFORMANCE 32-BIT DMA CONTROLLER WITH 
INTEGRATED SYSTEM SUPPORT PERIPHERALS 


@ High Performance 32-Bit DMA m Programmable Wait State Generator 
Controller —0 to 15 Wait States Pipelined 
— 50 MBytes/sec Maximum Data —1to 16 Wait States Non-Pipelined 
Transfer Rate at 25 MHz = DRAM Refresh Controller 
— 8 Independently Programmable 
Channels m 80386 Shutdown Detect and Reset 
Control 
Ey 20-Source Interrupt Controller — Software/Hardware Reset 
— Individually Programmable Interrupt 
Vectors m@ High Speed CHMOS Ill Technology 
— 15 External, 5 Internal Interrupts m 132-Pin PGA Package 
— 82C59A Superset (See Packaging Handbook Order 240800-001, Package Type A) 
@ Four 16-Bit Programmable Interval = Optimized for use with the 80386 
Timers Microprocessor 
— 82C54 Compatible — Resides on Local Bus for Maximum 


Bus Bandwidth 
— 16, 20, and 25 MHz Clock 


The 82380 is a multi-function support peripheral that integrates system functions necessary in an 80386 
environment. It has eight channels of high performance 32-bit DMA with the most efficient transfer rates 
possible on the 80386 bus. System support peripherals integrated into the 82380 provide Interrupt Control, 
Timers, Wait State generation, DRAM Refresh Control, and System Reset logic. 


The 82380’s DMA Controller can transfer data between devices of different data path widths using a single 


channel. Each DMA channel operates independently in any of several modes. Each channel has a temporary 
data storage register for handling non-aligned data without the need for external alignment logic. 
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1.0 FUNCTIONAL OVERVIEW 


The 82380 contains several independent functional 
modules. The following is a brief discussion of the 
components and features of the 82380. Each mod- 
ule has a corresponding detailed section later in this 
data sheet. Those sections should be referred to for 
design. and programming information. 


1.1 82380 Architecture 


The 82380 is comprised of several computer system 
functions that are normally found in separate LSI 
and VLSI components. These include: a high-per- 
formance, eight-channel, 32-bit Direct Memory Ac- 
cess Controller; a 20-level Programmable Interrupt 
Controller which is a superset of the 82C59A; four 
16-bit Programmable Interval Timers which are func- 
tionally equivalent to the 82C54 timers; a DRAM Re- 
fresh Controller; a Programmable Wait State Gener- 
ator; and system reset logic. The interface to the 
82380 is optimized for high-performance operation 
with the 80386 microprocessor. 


The 82380 operates directly on the 80386 bus. In 
the Slave mode, it monitors the state of the proces- 
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sor at all times and acts or idles according to the 
commands of the host. It monitors the address pipe- 
line status and generates the programmed number 
of wait states for the device being accessed. The 
82380 also has logic to reset the 80386 via hard- 
ware or software reset requests and processor shut- 
down status. 


After a system reset, the 82380 is in the Slave 
mode. It appears to the system as an I/O device. It 
becomes a bus master when it is performing DMA 
transfers. 


To maintain compatibility with existing software, the 
registers within the 82380 are accessed as bytes. If 
the internal logic of the 82380 requires a delay be- 
fore another access by the processor, wait states 
are automatically inserted into the access cycle. 
This allows the programmer to write initialization rou- 
tines, etc. without regard to hardware recovery 
times. 


Figure 1-1 shows the basic architectural compo- 
nents of the 82380. The following sections briefly 
discuss the architecture and function of each of the 
distinct sections of the 82380. 
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Figure 1-1. Architecture of the 82380 
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1.1.1 DMA CONTROLLER 


The 82380 contains a high-performance, 8-channel, 
32-bit DMA controller. It is capable of transferring 
any combination of bytes, words, and double words. 
The addresses of both source and distination can be 
independently incremented, decremented or held 
constant, and cover the entire 32-bit physical ad- 
dress space of the 80386. It can disassemble and 
assemble misaligned data via a 32-bit internal tem- 
porary data storage register. Data transferred be- 
tween devices of different data path widths can also 
be assembled and disassembled using the internal 
temporary data storage register. The DMA Controller 
can also transfer aligned data between I/O and 
memory on the fly, allowing data transfer rates up to 
32 megabytes per second for an 82380 operating at 
16 MHz. Figure 1-2 illustrates the functional compo- 
nents of the DMA Controller. 


There are twenty-four general status and command 
registers in the 82380 DMA Controller. Through 
these registers any of the channels may be pro- 
grammed into any of the possible modes. The oper- 
ating modes of any one channel are independent of 
the operation of the other channels. 


Each channel has three programmable registers 
which determine the location and amount of data to 
be transferred: 


CONTROL/STATUS REGISTERS 
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Byte Count Register—Number of bytes to trans- 
fer. (24-bits) : 


Requester Register—Address of memory or pe- 
ripheral which is requesting DMA service. (32- 
bits) 


Target Register—Address of peripheral or mem- 
ory which will be accessed. (32-bits) 


There are also port addresses which, when ac- 
cessed, cause the 82380 to perform specific func- 
tions. The actual data written does not matter, the 
act of writing to the specific address causes the 
command to be executed. The commands which op- 
erate in this mode are: Master Clear, Clear Terminal 
Count Interrupt Request, Clear Mask Register, an 

Clear Byte Pointer Flip-Flop. | 


DMA transfers can be done between all combina- 
tions of memory and I/O; memory-to-memory, mem- 
ory-to-I/O, |/O-to-memory, and |/O-to-I/O. DMA 
service can be requested through software and/or 
hardware. Hardware DMA acknowledge signals are 
available for all channels (except channel 4) through 
an encoded 3-bit DMA _ acknowledge bus 
(EDACKO-2). 
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Figure 1-2. 82380 DMA Controller 
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The 82380 DMA controller transfers blocks of data 
(buffers) in three modes: Single Buffer, Buffer Auto- 
Initialize, and Buffer Chaining. In the Single Buffer 
Process, the 82380 DMA Controller is programmed 
to transfer one particular block of data. Successive 
transfers then require reprogramming of the DMA 
channel. Single Buffer transfers are useful in sys- 
tems where it is known at the time the transfer be- 
gins what quantity of data is to be transferred, and 
there is a contiguous block of data area available. 


The Buffer Auto-Initialize Process allows the same 
data area to be used for successive DMA transfers 
without having to reprogram the channel. 


The Buffer Chaining Process allows a program to 
specify a list of buffer transfers to be executed. The 
82380 DMA Controller, through interrupt routines, is 
reprogrammed from the list. The channel is repro- 
grammed for a new buffer before the current buffer 
transfer is complete. This pipelining of the channel 
programming process allows the system to allocate 
non-contiguous blocks of data storage space, and 
transfer all of the data with one DMA process. The 
buffers that make up the chain do not have to be in 
contiguous locations. 


Channel priority can be fixed or rotating. Fixed priori- 
ty allows the programmer to define the priority of 
DMA channels based on hardware or other fixed pa- 
rameters. Rotating priority is used to provide periph- 
erals access to the bus on a shared basis. 


With fixed priority, the programmer can set any 
channel to have the current lowest priority. This al- 
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schedule without reprogramming the command reg- 
isters. 


1.1.2 PROGRAMMABLE INTERVAL TIMERS 


Four 16-bit programmable interval timers reside 
within the 82380. These timers are identical in func- 
tion to the timers in the 82C54 Programmable Inter- 
val Timer. All four of the timers share a common 
clock input which can be independent of the system 
clock. The timers are capable of operating in six dif- 
ferent modes. In all of the modes, the current count 
can be latched and read by the 80386 at any time, 
making these very versatile event timers. Figure 1-3 
shows the functional components of the Program- 
mable Interval Timers. 


The outputs of the timers are directed to key system 
functions, making system design simpler. Timer 0 is 
routed directly to an interrupt input and is not avail- 
able externally. This timer would typically be used to 
generate time-keeping interrupts. 


Timers 1 and 2 have outputs which are available for 
general timer/counter purposes as well as special 
functions. Timer 1 is routed to the refresh control 
logic to provide refresh timing. Timer 2 is connected 
to an interrupt request input to provide other timer 
functions. Timer 3 is a general purpose timer/coun- 
ter whose output is available to external hardware. It 
is also connected internally to the interrupt request 
which defaults to the highest priority (IRQO). 
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Figure 1-3. Programmable Interval Timers—Block Diagram 
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1.1.3 INTERRUPT CONTROLLER 


The 82380 has the equivalent of three enhanced 
82C59A Programmable Interrupt Controllers. These 
controllers can all be operated in the Master mode, 
but the priority is always as if they were cascaded. 
There are 15 interrupt request inputs provided for 
the user, all of which can be inputs from external 
slave interrupt controllers. Cascading 82C59As to 
these request inputs allows a possible total of 120 
external interrupt requests. Figure 1-4 is a block dia- 
gram of the 82380 Interrupt Controller. 


Each of the interrupt request inputs can be individu- 
ally programmed with its own interrupt vector, allow- 
ing more flexibility in interrupt vector mapping than 
was available with the 82C59A. An interrupt is pro- 
vided to alert the system that an attempt is being 
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made to program the vectors in the method of the 
82C59A. This provides compatibility of existing soft- 
ware that used the 82C59A or 8259A with new de- 
signs using the 82380. 


In the event of an unrequested or otherwise errone- 
ous interrupt acknowledge cycle, the 82380 Interrupt 
Controller issues a default vector. This vector, pro- 
grammed by the system software, will alert the sys- 
tem of unsolicited interrupts of the 80386. 


The functions of the 82380 Interrupt Controller are 
identical to the 82C59A, except in regards to pro- 
gramming the interrupt vectors as mentioned above. 
Interrupt request inputs are programmable as either 
edge or level triggered and are software maskable. 
Priority can be either fixed or rotating and interrupt 
requests can be nested. 
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Figure 1-4. 82380 Interrupt Controller—Biock Diagram 
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Enhancements are added to the 82380 for cascad- 
ing external interrupt controllers. Master to Slave 
handshaking takes place on the data bus, instead of 
dedicated cascade lines. 


1.1.4 WAIT STATE GENERATOR 


The Wait State Generator is a programmable 
READY generation circuit for the 80386 bus. A pe- 
ripheral requiring wait states can request the Wait 
State Generator to hold the processor’s READY in- 
put inactive for a predetermined number of bus 
states. Six different wait state counts can be pro- 
grammed into the Wait State Generator by software; 
three for memory accesses and three for I/O ac- 
cesses. A block diagram of the 82380 Wait State 
Generator is shown in Figure 1-5. 


The peripheral being accessed selects the required 
wait state count by placing a code on a 2-bit wait 
state select bus. This code along with the M/IO# 
signal from the bus master is used to select one of 
six internal 4-bit wait state registers which has been 
programmed with the desired number of wait states. 
From zero to fifteen wait states can be programmed 
into the wait state registers. The Wait State Genera- 
tor tracks the state of the processor or current bus 
master at all times, regardless of which device is the 
current bus master and regardless of whether or not 
the Wait State Generator is currently active. 


The 82380 Wait State Generator is disabled by mak- 
ing the select inputs both high. This allows hardware 
which is intelligent enough to generate its own ready 
signal to be accessed without penalty. As previously 


D7 


REGISTER 
SELECT 


5 | 

I ntel ° 
mentioned, deselecting the Wait State Generator 
does not disable its ability to determine the proper 


number of wait states due to pipeline status in sub- 
sequent bus cycles. 


The number of wait states inserted into a pipelined 
bus cycle is the value in the selected wait state reg- 
ister. If the bus master is operating in the non-pipe- 
lined mode, the Wait State Generator will increase 
the number of wait states inserted into the bus cycle 
by one. 


On reset, the Wait State Generator’s registers are 
loaded with the value FFH, giving the maximum 
number of wait states for any access in which the 
wait state select inputs are active. 


1.1.5 DRAM REFRESH CONTROLLER 


The 82380 DRAM Refresh Controller consists of a 
24-bit refresh address counter and bus arbitration 
logic. The output of Timer 1 is used to periodically 
request a refresh cycle. When the controller re- 
ceives the request, it requests access to the system 
bus through the HOLD signal. When bus control is 
acknowledged by the processor or current bus mas- 
ter, the refresh controller executes a memory read 
operation at the address currently in the Refresh Ad- 
dress Register. At the same time, it activates a re- 
fresh signal (REF #) that the memory uses to force a 
refresh instead of a normal read. Control of the bus 
is transferred to the processor at the completion of 
this cycle. Typically a refresh cycle will take six clock 
cycles to execute on an 80386 bus. 
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Figure 1-5. 82380 Wait State Generator—Block Diagram 
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The 82380 DRAM Refresh Controller has the high- 
est priority when requesting bus access and will in- 
terrupt any active DMA process. This allows large 
blocks of data to be moved by the DMA controller 
without affecting the refresh function. Also the DMA 
controller is not required to completely relinquish the 
bus, the refresh controller simply steals a bus cycle 
between DMA accesses. 


The amount by which the refresh address is incre- 
mented is programmable to allow for different bus 
widths and memory bank arrangements. 


1.1.6 CPU RESET FUNCTION 


The 82380 contains a special reset function which 
can respond to hardware reset signals from the 
82384, as well as a software reset command. The 
circuit will hold the 80386’s RESET line active while 
an external hardware reset signal is present at its 
RESET input. It can also reset the 80386 processor 
as the result of a software command. The software 
reset command causes the 82380 to hold the proc- 
essor’s RESET line active for a minimum of 62 CLK2 
cycles; enough time to allow an 80386 to re-initialize. 


The 82380 can be programmed to sense the shut- 
down detect code on the status lines from the 
80386. If the Shutdown Detect function is enabled, 
the 82380 will automatically reset the processor. A 
diagnostic register is available which can be used to 
determine the cause of reset. 


1.1.7 REGISTER MAP RELOCATION 


After a hardware reset, the internal registers of the 
82380 are located in I/O space beginning at port 
address OOOOH. The map of the 82380’s registers is 
relocatable via a software command. The default 
mapping places the 82380 between I/O addresses 
OOOOH and OODBH. The relocation register allows 
this map to be moved to any even 256-byte bounda- 
ry in the processor’s 16-bit |/O address space or any 
even 16-Mbyte boundary in the 32-bit memory ad- 
dress space. 


1.2 Host Interface 


The 82380 is designed to operate efficiently on the 
local bus of an 80386 microprocessor. The control 
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signals of the 82380 are identical in function to 
those of the 80386. As a slave, the 82380 operates 
with all of the features available on the 80386 bus. 
When the 82380 is in the Master mode, it looks iden- 
tical to the 80386 to the connected devices. 


The 82380 monitors the bus at all times, and deter- 


‘mines whether the current bus cycle is a pipelined or 


non-pipelined access. All of the status signals of the 
processor are monitored. 


The control, status, and data registers within the 
82380 are located at fixed addresses relative to 
each other, but the group can be relocated to either 
memory or |/O space and to different locations with- 
in those spaces. 


As a Slave device, the 82380 monitors the control/ 
status lines of the CPU. The 82380 will generate all 
of the wait states it needs whenever it is accessed. 
This allows the programmer the freedom of access- 
ing 82380 registers without having to insert NOPs in 
the program to wait for slower 82380 internal regis- 
ters. . 


The 82380 can determine if a current bus cycle is a 
pipelined or a non-pipelined cycle. It does this by 
monitoring the ADS# and READY# signals and 
thereby keeping track of the current state of the 
80386. 


As a bus master, the 82380 looks like an 80386 to 
the rest of the system. This enables the designer 
greater flexibility in systems which include the 
82380. The designer does not have to alter the inter- 
faces of any peripherals designed to operate with 
the 80386 to accommodate the 82380. The 82380 
will access any peripherals on the bus in the same 
manner as the 80386, including recognizing pipe- 
lined bus cycles. 


The 82380 is accessed as an 8-bit peripheral. This is 
done to maintain compatibility with existing system 
architectures and software. The 80386 places the 
data of all 8-bit accesses either on D (0-7) or D (8- 
15). The 82380 will only accept data on these lines 
when in the Slave mode. When in the Master mode, 
the 82380 is a full 32-bit machine, sending and re- 
ceiving data in the same manner as the 80386. 
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1.3 IBM PC* System Compatibility 


The 82380 is an 80386 companion device designed 
to provide an enhancement of the system functions 
common to most small computer systems. It is mod- 
eled after and is a superset of the Intel peripheral 
products found in the IBM PC, PC-AT, and other 
popular small computers. 


2.0 80386 HOST INTERFACE 


The 82380 contains a set of interface signals to op- 
erate efficiently with the 80386 host processor. 
These signals were designed so that minimal hard- 
ware is needed to connect the 82380 to the 80386. 


Figure 2-1 depicts a typical system configuration 
with the 80386 processor. As shown in the diagram, 
the 82380 is designed to interface directly with the 
80386 bus. 


*IBM PC and IBM PC-AT are registered trademarks of Inter- 
national Business Machines Inc. 
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Since the 82380 is residing on the opposite side of 
the data bus transceiver (with respect to the rest of 
the peripherals in the system), it is important to note 
that the transceiver should be controlled so that 
contention between the data bus transceiver and 
the 82380 will not occur. In order to do this, port 
address decoding logic should be included in the di- 
rection and enable control logic of the transceiver. 
When any of the 82380 internal registers is read, the 
data bus transceiver should be disabled so that only 
the 82380 will drive the local bus. 


This section describes the basic bus functions of the 
82380 to show how this device interacts with the 
80386 processor. Other signals which are not direct- 
ly related to the host interface will be discussed in 
their associated functional block description. 
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Figure 2-1. 80386/82380 System Configuration 
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2.1 Master and Slave Modes 


At any time, the 82380 acts as either a Slave device 
or a Master device in the system. Upon reset, the 
82380 will be in the Slave Mode. In this mode, the 
80386 processor can read/write into the 82380 in- 
ternal registers. Initialization information may be pro- 
grammed into the 82380 during Slave Mode. 


When DMA service (including DRAM Refresh Cycles 
generated by the 82380) is requested, the 82380 will 
request and subsequently get control of the 80386 
local bus. This is done through the HOLD and HLDA 
(Hold Acknowledge) signals. When the 80386 proc- 
essor responds by asserting the HLDA signal, the 
82380 will switch into Master Mode and perform 
DMA transfers. In this mode, the 82380 is the bus 
master of the system. It can read/write data from/to 
memory and peripheral devices. The 82380 will re- 
turn to the Slave Mode upon completion of DMA 
transfers, or when HLDA is negated. 


2.2 80386 Interface Signals 


As mentioned in the Architecture section, the Bus 
Interface module of the 82380 (see Figure 1-1) con- 
tains signals that are directly connected to the 
80386 host processor. This module has separate 
32-bit Data and Address busses. Also, it has addi- 
tional control signals to support different bus opera- 
tions on the system. By residing on the 80386 local 
bus, the 82380 shares the same address, data and 
control lines with the processor. The following sub- 
sections discuss the signals which interface to the 
80386 host processor. 


82380 CLOCK PERIOD 
CLK2 PERIOD 
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2.2.1 CLOCK (CLK2) 


The CLK2 input provides fundamental timing for the 
82380. It is divided by two internally to generate the 
82380 internal clock. Therefore, CLK2 should be 
driven with twice the 80386’s frequency. In order to 
maintain synchronization with the 80386 host proc- 
essor, the 82380 and the 80386 should share a 
common clock source. 


The internal clock consists of two phases: PHI1 and 
PHI2. Each CLK2 period is a phase of the internal 
clock. PHI2 is usually used to sample input and set 
up internal signals and PHI1 is for latching internal 
data. Figure 2-2 illustrates the relationship of CLK2 
and the 82380 internal clock signals. The CPURST 
signal generated by the 82380 guarantees that the 
80386 will wake up in phase with PHI1. 


2.2.2 DATA BUS (D0-D31) 


This 32-bit three-state bidirectional bus provides a 
general purpose data path between the 82380 and 
the system. These pins are tied directly to the corre- 
sponding Data Bus pins of the 80386 local bus. The 
Data Bus is also used for interrupt vectors generated 
by the 82380 in the Interrupt Acknowledge cycle. 


During Slave I/O operations, the 82380 expects a 
single byte to be written or read. When the 80386 
host processor writes into the 82380, either DO-D7 
or D8-—D15 will be latched into the 82380, depend- 
ing upon how the Byte Enable (BEO#-BE #3) sig- 
nals are driven. The 82380 does not need to look at 
D16-D31 since the 80386 duplicates the single byte 
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Figure 2-2. CLK2 and 82380 Internal Clock 
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data on both halves of the bus. When the 80386 
host processor reads from the 82380, the single 
byte data will be duplicated four times on the Data 
Bus; i.e., on DO—-D7, D8-D15, D16-D23 and D24- 
D31. 


During Master Mode, the 82380 can transfer 32-, 16-, 
and 8-bit data between memory (or I/O devices) and 
|/O devices (or memory) via the Data Bus. 


2.2.3 ADDRESS BUS (A31-A2) 


These three-state bidirectional signals are connect- 
ed directly to the 80386 Address Bus. In the Slave 
Mode, they are used as input signals so that the 
processor can address the 82380 internal ports/reg- 
isters. In the Master Mode, they are used as output 
signals by the 82380 to address memory and periph- 
eral devices. The Address Bus is capable of ad- 
dressing 4 G-bytes of physical memory space 
(OOOOOO000H to FFFFFFFFh), and 64 K-bytes of I/O 
addresses (OOOOQO000H to OOOOFFFFH). 
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2.2.4 BYTE ENABLE (BE3# -BE0#) 


These bidirectional pins select specific byte(s) in the 
double word addressed by A31-A2. Similar to the 
Address Bus function, these signals are used as in- 
puts to address internal 82380 registers during 
Slave Mode operation. During Master Mode opera- 
tion, they are used as outputs by the 82380 to ad- 
dress memory and |/O locations. 


NOTE: 


In addition to the above function, BE3# is used 
to enable a production test mode and must be 
LOW during reset. The 80386 processor will au- 
tomatically hold BE3# LOW during RESET. . 


The definitions of the Byte Enable signals depend 
upon whether the 82380 is in the Master or Slave 
Mode. These definitions are depicted in Table 2-1. 


Table 2-1. Byte Enable Signals 


As INPUTS (Slave Mode): 


. Data Bits Written 
BE3 # -BEO# implied A1, AO to 82380" 


00 


01 


10 


11 


X-DON’T CARE 


*During READ, data will be duplicated on DO-D7, D8-D15, D16-D23, and D24-D31. 
During WRITE, the 80386 host processor duplicates data on DO-D15, and D16-D31, so that the 82380 
is concerned only with the lower half of the Data Bus. 


As OUTPUTS (Master Mode): 


BE3 # -BE0# 


ie at Oe ow hs 


Nyon 
wo 


0 
1 

2 
3 
1 

0, 
2 
0 
, 

0 


Undefined 
Logical DO-D7 
Logical D8-D15 
Logical D16-D23 
D = Logical D24-D31 


Byte to be Accessed 
Relative to A31-A2 


Logical Byte Presented On 
Data Bus During WRITE Only* 
D24-31 D16-23 D8-15 D0-7 


ee Baek one ae 2 ee on a 
qOowvworcvwvcszcc 
ODrwwoworrcrc 
>rrrrrrrr> 


*Actual number of bytes accessed depends upon the programmed data path width. 
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2.2.5 BUS CYCLE DEFINITION SIGNALS (D/C#, 
W/R#, M/IO#) 


These three-state bidirectional signals define the 
type of bus cycle being performed. W/R# distin- 
guishes between write and read cycles. D/C# dis- 
tinguishes between processor data and control cy- 
cles. M/IO# distinguishes between memory and |/O 
cycles. 


During Slave Mode, these signals are driven by the 
80386 host processor; during Master Mode, they are 
driven by the 82380. In either mode, these signals 
will be valid when the Address Status (ADS#) is 
driven LOW. Exact bus cycle definitions are given in 
Table 2-2. Note that some combinations are recog- 
nized as inputs, but not generated as outputs. In the 
Master Mode, D/C# is always HIGH. 


2.2.6 ADDRESS STATUS (ADS #) 


This bidirectional signal indicates that a valid ad- 
dress (A2—A31, BEO#-BE3#) and bus cycle defini- 
tion (W/R#, D/C#, M/IO#) is being driven on the 
bus. In the Master Mode, it is driven by the 82380 as 
an output. In the Slave Mode, this signal is moni- 
tored as an input by the 82380. By the current and 
past status of ADS# and the READY # input, the 
82380 is able to determine, during Slave Mode, if the 
next bus cycle is a pipelined address cycle. ADS # is 
asserted during T1 and T2P bus states (see Bus 
State Definition). 


Note that during the idle states at the beginning and 
the end of a DMA process, neither the 80386 nor the 
82380 is driving the ADS# signal; i.e., the signal is 
left floated. Therefore, it is important to use a pull-up 
resistor (approximately 10 KM.) on the ADS# signal. 


2.2.7 TRANSFER ACKNOWLEDGE (READY #) 


This input indicates that the current bus cycle is 
complete. In the Master Mode, assertion of this sig- 


82380 


nal indicates the end of a DMA bus cycle. In the 
Slave Mode, the 82380 monitors this input and 
ADS # to detect a pipelined address cycles. This sig- 
nal should be tied directly to the READY # input of 
the 80386 host processor. 


2.2.8 NEXT ADDRESS REQUEST (NA#) 


This input is used to indicate to the 82380 in the 
Master Mode that the system is requesting address 
pipelining. When driven LOW by either memory or 
peripheral devices during Master Mode, it indicates 
that the system is prepared to accept a new address 
and bus cycle definition signals from the 82380 be- 
fore the end of the current bus cycle. If this input is 
active when sampled by the 82380, the next address 
is driven onto the bus, provided a bus request is 
already pending internally. 


This input pin is monitored only in the Master Mode. 
In the Slave Mode, the 82380 uses the ADS# and 
READY # signals to determine address pipelining 
cycles, and NA# will be ignored. 


2.2.9 RESET (RESET, CPURST) 
RESET 


This synchronous input suspends any operation in 
progress and places the 82380 in a known initial 
state. Upon reset, the 82380 will be in the Slave 
Mode waiting to be initialized by the 80386 host 
processor. The 82380 is reset by asserting RESET 
for 15 or more CLK2 periods. When RESET is as- 
serted, all other input pins are ignored, and all other 
bus pins are driven to an idle bus state as shown in 
Table 2-3. The 82380 will determine the phase of its 
internal clock following RESET going inactive. 


Table 2-2. Bus Cycle Definition 


D/C# 


0 


As INPUTS As OUTPUTS 


0 Interrupt NOT GENERATED 
Acknowledge 
UNDEFINED NOT GENERATED 
1/O Read I/O Read 
I/O Write I/O Write 
UNDEFINED NOT GENERATED 
HALT if NOT GENERATED 
BE(3-0) # = X011 
SHUTDOWN if 
BE (3-0)# = XXX0 
Memory Read Memory Read 


Memory Write 


Memory Write 
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Table 2-3. Output Signals Following RESET 


A2-A31, DO-D31, BEO#-BE3 # 
D/C#, W/R#, M/IO#, ADS# 
READYO# 

EOP # 

EDACK2—EDACKO 

HOLD 

INT 


CPURST 


RESET is level-sensitive and must be synchronous 
to the CLK2 signal. Therefore, this RESET input 
should be tied to the RESET output of the Clock 
Generator. The RESET setup and hold time require- 
ments are shown in Figure 2.3. 


CPURST 


This output signal is used to reset the 80386 host 
processor. It will go active (HIGH) whenever one of 
the following events occurs: a) 82380’s RESET input 
is active; b) a software RESET command is issued 
to the 82380; or c) when the 82380 detects a proc- 
essor Shutdown cycle and when this detection fea- 
ture is enabled (see CPU Reset and Shutdown De- 
tect). When activated, CPURST will be held active 
for 62 CLK2 periods. The timing of CPURST is such 
that the 80386 processor will be in synchronization 
with the 82380. This timing is shown in Figure 2-4. 


TOUT1/REF #, TOUT2#/IRQ3#, TOUT3# 


*The Interrupt Controller and Programmable Interval Timer are initialized by software commands. 


Float 
Float 
4 
‘1’ (Weak Pull-UP) 
‘100’ 

‘0’ 

UNDEFINED* 
UNDEFINED* 

‘0’ 


2.2.10 INTERRUPT OUT (INT) 


This output pin is used to signal the 80386 host 
processor that one or more interrupt requests (either 
internal or external) are pending. The processor is 
expected to respond with an Interrupt Acknowledge 
cycle. This signal should be connected directly to 
the Maskable Interrupt Request (INTR) input of the 
80386 host processor. 


2.3 82380 Bus Timing 


The 82380 internally divides the CLK2 signal by two 
to generate its internal clock. Figure 2-2 shows the 
relationship of CLK2 and the internal clock. The in- 
ternal clock consists of two phases: PHI1 and PHI2. 
Each CLkK2 period is a phase of the internal clock. In 
Figure 2-2, both PHI1 and PHI2 of the 82380 internal 
clock are shown. 


RESET \ 


T30-RESET Hold Time 
T31-RESET Setup Time 
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Figure 2-3. RESET Timing 


—T33 MIN. 


CPURST 


T33-CPU Reset from CLK2 
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Figure 2-4. CPURST Timing 
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In the 82380, whether it is in the Master or Slave 
Mode, the shortest time unit of bus activity is a bus 
state. A bus state, which is also referred as a 
‘T-state’, is defined as one 82380 PHI2 clock period 
(i.e., two CLK2 periods). Recall in Table 2-2, there 
are six different types of bus cycles in the 82380 as 
defined by the M/IO#, D/C# and W/R# signals. 
Each of these bus cycles is composed of two or 
more bus states. The length of a bus cycle depends 
on when the READY # input is asserted (i.e., driven 
LOW). 


2.3.1 ADDRESS PIPELINING 


The 82380 supports Address Pipelining as an option 
in both the Master and Slave Mode. This feature typ- 
ically allows a memory or peripheral device to oper- 
ate with one less wait state than would otherwise be 
required. This is possible because during a pipelined 
cycle, the address and bus cycle definition of the 
next cycle will be generated by the bus master while 
waiting for the end of the current cycle to be ac- 
knowledged. The pipelined bus is especially well 
suited for interleaved memory environment. For 16 
MHz interleaved memory designs with 100 ns ac- 
cess time DRAMs, zero wait state memory accesses 
can be achieved when pipelined addressing is se- 
lected. 


In the Master Mode, the 82380 is capable of initiat- 
ing, on a cycle-by-cycle basis, either a pipelined or 
non-pipelined access depending upon the state of 
the NA# input. If a pipelined cycle is requested (indi- 
cated by NA# being driven LOW), the 82380 will 
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drive the address and bus cycle definition of the next 
cycle as soon as there is an internal bus request 
pending. 


In the Slave Mode, the 82380 is constantly monitor- 
ing the ADS# and READY # signals on the proces- 
sor local bus to determine if the current bus cycle is 
a pipelined cycle. If a pipelined cycle is detected, the 
82380 will request one less wait state from the proc- 
essor if the Wait State Generator feature is selected. 
On the other hand, during an 82380 internal register 
access in a pipelined cycle, it will make use of the 
advance address and bus cycle information. In all 
cases, Address Pipelining will result in a savings of 
one wait state. | 


2.3.2 MASTER MODE BUS TIMING 


When the 82380 is in the Master Mode, it will be in 
one of six bus states. Figure 2-5 shows the complete 
bus state diagram of the Master Mode, including 
pipelined address states. As seen in the figure, the 
82380 state diagram is very similar to that of the 
80386. The major difference is that in the 82380, 
there is no Hold state. Also, in the 82380, the condi- 
tions for some state transitions depend upon wheth- 
er it is the end of a DMA process”. 


NOTE: 
*The term ‘end of a DMA process’ is loosely de- 
fined here. It depends on the DMA modes of oper- 
ation as well as the state of the EOP# and DREQ 
inputs. This is explained in detail in section 3—DMA 
Controller. 
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The 82380 will enter the idle state, Ti, upon RESET 
and whenever the internal address is not available at 
the end of a DMA cycle or at the end of a DMA 
process. When address pipelining is not used (NA# 
is not asserted), a new bus cycle always begins with 
state T1. During T1, address and bus cycle definition 
signals will be driven on the bus. T1 is always fol- 
lowed by T2. 


If a bus cycle is not acknowledged (with READY #) 
during T2 and NA# is negated, T2 will be repeated. 
When the end of the bus cycle is acknowledged dur- 
ing T2, the following state will be T1 of the next bus 
cycle (if the internal address latch is loaded and if 
this is not the end of the DMA process). Otherwise, 
the Ti state will be entered. Therefore, if the memory 
or peripheral accessed is fast enough to respond 
within the first T2, the fastest non-pipelined cycle will 
take one T1 and one 12 state. 


READY# Asserted. [Not ADAV + End of DMA] 
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Use of the address pipelining feature allows the 
82380 to enter three additional bus states: T1P, 
T2P, and T2i. T1P is the first bus state of a pipelined 
bus cycle. T2P follows T1P (or T2) if NA# is assert- 
ed when sampled. The 82380 will drive the bus with 


_ the address and bus cycle definition signals of the 


next cycle during T2P. From the state diagram, it can 
be seen that after an idle state Ti, the first bus cycle 
must begin with T1, and is therefore a non-pipelined 
bus cycle. The next bus cycle can be pipelined if 
NA# is asserted and the previous bus cycle ended 
in a T2P state. Once the 82380 is in a pipelined 
cycle and provided that NA# is asserted in subse- 
quent cycles, the 82380 will be switching between 
T1P and T2P states. If the end of the current bus 
cycle is not acknowledged by the READY # input, 
the 82380 will extend the cycle by adding T2P 
states. The fastest pipelined cycle will consist of one 
T1P and one T2P state. 


NA# Negated 


READY# Negoated. 


ADAV. 


READY# Asserted. 
Not End of DMA 


READY# Negated. 


Not ADAV 


NA# Negated 


READY# Negated. 
NA# Asserted. 
Not End of DMA 


NA# Asserted. 
[End of DMA + Not ADAV ] 


ADAV. READY# Asserted 


READY# Asserted. [Not ADAV + End of DMA] 


Not ADAV. READY# Negated 


NOTE: 
ADAV—Internal Address Available 
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Figure 2-5. Master Mode State Diagram 
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The 82380 will enter state T2i when NA# is assert- 
ed and when one of the following. two conditions 
occurs. The first condition is when the 82380 is in 
state T2. T2i will be entered if READY # is not as- 
serted and there is no next address available. This 
situation is similar to a wait state. The 82380 will stay 
in T2i for as long as this condition exists. The sec- 
ond condition which will cause the 82380 enter T2i is 
when the 82380 is in state T1P. Before going to 


ADDRESS 
AND CONTROL 


DATA 
(READ) 


82380 


state T2P, the 82380 needs to wait in state T2i until 
the next address is available. Also, in both cases, if 
the DMA process is complete, the 82380 will enter 
the T2i state in order to finish the current DMA cycle. 


Figure 2-6 is a timing diagram showing non-pipelined 
bus accesses in the Master Mode. Figure 2-7 shows 
the timing of pipelined accesses in the Master Mode. 


(WRITE) 


NAF XXXXXXXXXKAAKXXAAAAAAAAAR AAD 


READY# XXXXXXXXXXXXKKKA 
| O WAIT STATE 


RX XXX Y v xx 


ECCT OOO, 


AOA 
O WAIT STATE 
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1 WAIT STATE 


Figure 2-6. Non-Pipelined Bus Cycles 
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AXA 
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(WRITE) 
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Figure 2-7. Pipelined Bus Cycles 
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2.3.3 SLAVE MODE BUS TIMING 


Figure 2-8 shows the Slave Mode bus timing in both 


pipelined and non-pipelined cycles when the 82380 


is being accessed. Recall that during Slave Mode, 
the 82380 will constantly monitor the ADS# and 
READY # signals to determine if the next cycle is 
pipelined. In Figure 2-8, the first cycle is non-pipe- 
lined and the second cycle is pipelined. In the pipe- 
lined cycle, the 82380 will start decoding the ad- 


NON=PIPELINED 
CYCLE 


A(2=31) 
BE(O-3)# 
M/lO# 
D/C#, W/R# 


ADS# 


READYO# 
(TWO OR MORE WAIT STATES) 


D(0-31) 
(READ) 


D(0-15) 
(WRITE) 


NOTE: 


a 
intel. 
dress and bus cycle signals one bus state earlier 
than in a non-pipelined cycle. 


The READY # input signal is sampled by the 80386 
host processor to determine the completion of a bus 
cycle. This occurs during the end of every T2 and 
T2P state. Normally, the output of the 82380 Wait 
State Generator, READYO#, is directly connected 
to the READY # input of the 80386 host processor 
and the 82380. In such case, READYO# and 
READY # will be identical (see Wait State Genera- 
tor). 


PIPELINED 
CYCLE 


T2P 


(ONE OR MORE WAIT STATES) 
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NA# is shown here only for timing reference. It is not sampled by the 82380 during Slave Mode. 
When the 82380 registers are accessed, it will take one or more wait states in pipelined and two or more wait states in 


non-pipelined cycle to complete the internal access. 


Figure 2-8. Slave Read/Write Timing 
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3.0 DMA CONTROLLER 


The 82380 DMA Controller is capable of transferring 
data between any combination of memory and/or 
I/O, with any combination (8-, 16-, or 32-bits) of data 
path widths. Bus bandwidth is optimized through the 
use of an internal temporary register which can dis- 
assemble or assemble data to or from either an 
aligned or a non-aligned destination or source. Fig- 


CONTROL/STATUS REGISTERS 


82380 


ure 3-1 is a block diagram of the 82380 DMA Con- 
troller. 


The 82380 has eight channels of DMA. Each chan- 
nel operates independently of the others. Within the 
operation of the individual channels, there are many 
different modes of data transfer available. Many of 
the operating modes can be intermixed to provide a 
very versatile DMA controller. 


CHANNEL REGISTERS 


COMMAND REGISTER I BASE CURRENT | TEMPORARY 
COMMAND REGISTER IL_ [| BYTE COUNT [| BYTE COUNT] REGISTER 


MODE REGISTER I BASE 
REQUESTER 
MODE REGISTER IL ADDRESS 


SOFTWARE REQUEST BASE 
REGISTER TARGET 


MASK REGISTER ADDRESS 


CURRENT 
REQUESTER 
ADDRESS 


CURRENT 
TARGET 
ADDRESS 


CHANNEL O 


STATUS REGISTER CHANNEL 1 (SAME AS CH 0) 
BUS SIZE REGISTER CHANNEL 2 (SAME AS CH 0) 


CHAINING REGISTER CHANNEL 3 (SAME AS CH 0) 


EDACKO 


EDACK PROCESS 


CONTROL 
EDACK2 


EOP# 


a 


CONTROL/STATUS 


(SAME AS 
LOWER GROUP) 


"LOWER" GROUP OF CHANNELS 


"UPPER" GROUP OF CHANNELS 


CHANNEL 4 (SAME AS CH 0 
CHANNEL 5 (SAME AS CH 0) 
CHANNEL 6 (SAME AS CH 0) 


CHANNEL 7 (SAME AS CH 0) 
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Figure 3-1. 82380 DMA Controller Block Diagram 
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3.1 Functional Description 


In describing the operation of the 82380’s DMA Con- 
troller, close attention to terminology is required. Be- 
fore entering the discussion of the function of the 
82380 DMA Controller, the following explanations of 
some of the terminology used herein may be of ben- 
efit. First, a few terms for clarification: 


DMA PROCESS—A DMA process is the execution 
of a programmed DMA task from beginning to end. 
Each DMA process requires initial programming by 
the host 80386 microprocessor. 


BUFFER—A contiguous block of data. 


BUFFER TRANSFER—The action required by the 
DMA to transfer an entire buffer. 


DATA TRANSFER—The DMA action in which a 
group of bytes, words, or double words are moved 
between devices by the DMA Controller. A data 
transfer operation may involve movement of one or 
many bytes. 


BUS CYCLE—Access by the DMA to a single byte, 
word, or double word. 


Each DMA channel consists of three major compo- 
nents. These components are identified by the con- 
tents of programmable registers which define the 
memory or I/O devices being serviced by the DMA. 
They are the Target, the Requester, and the Byte 
Count. They will be defined generically here and in 
greater detail in the DMA register definition section. 


The Requester is the device which requires service 
by the 82380 DMA Controller, and makes the re- 
quest for service. All of the control signals which the 
DMA monitors or generates for specific channels 
are logically related to the Requester. Only the Re- 
quester is considered capable of initiating or termi- 
nating a DMA process. 


The Target is the device with which the Requester 
wishes to communicate. As far as the DMA process 
is concerned, the Target is a slave which is incapa- 
ble of control over the process. 


The direction of data transfer can be either from Re- 
quester to Target or from Target to Requester; i.e., 
each can be either a source or a destination. 


The Requester and Target may each be either |/O 
or memory. Each has an address associated with it 
that can be incremented, decremented, or held con- 
stant. The addresses are stored in the Requester 
Address Registers and Target Address Registers, 
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respectively. These registers have two parts: one 
which contains the current address being used in the 
DMA process (Current Address Register), and one 
which holds the programmed base address (Base 
Address Register). The contents of the Base Regis- 
ters are never changed by the 82380 DMA Control- 
ler. The Current Registers are incremented or decre- 


ménted according to the progress of the DMA pro- 
cess. 


The Byte Count is the component of the DMA pro- 
cess which dictates the amount of data which must 
be transferred. Current and Base Byte Count Regis- 
ters are provided. The Current Byte Count Register 
is decremented once for each byte transferred by 
the DMA process. When the register is decremented 
past zero, the Byte Count is considered ‘expired’ 
and the process is terminated or restarted, depend- 
ing on the mode of operation of the channel. The 
point at which the Byte Count expires is called ‘Ter- 
minal Count’ and several status signals are depen- 
dent on this event. 


Each channel of the 82380 DMA Controller also 
contains a 32-bit Temporary Register for use in as- 
sembling and disassembling non-aligned data. The 
operation of this register is transparent to the user, 
although the contents of it may affect the timing of 
some DMA handshake sequences. Since there is 
data storage available for each channel, the DMA 
Controller can be interrupted without loss of data. 


The 82380 DMA Controller is a slave on the bus until 
a request for DMA service is received via either a 
software request command or a hardware request 
signal. The host processor may access any of the 
control/status or channel registers at any time the 
82380 is a bus slave. Figure 3-2 shows the flow of 
operations that the DMA Controller performs. 


At the time a DMA service request is received, the 
DMA Controller issues a bus hold request to the 
host processor. The 82380 becomes the bus master 
when the host relinquishes the bus by asserting a 
hold acknowledge signal. The channel to be serv- 
iced will be the one with the highest priority at the 
time the DMA Controller becomes the bus master. 
The DMA Controller will remain in control of the bus 
until the hold acknowledge signal is removed, or un- 
til the current DMA transfer is complete. 


While the 82380 DMA Controller has control of the 
bus, it will perform the required data transfer(s). The 
type of transfer, source and destination addresses, 
and amount of data to transfer are programmed in 
the control registers of the DMA channel which re- 
ceived the request for service. 


WAIT FOR DMA 
SERVICE REQUEST | g_JNO REQUEST 


REQUEST PENDING 


ASSERT BUS HOLD 
REQUEST 


BUS HOLD ACKNOWLEDGED 


ARBITRATE 
PENDING REQUESTS 


EXECUTE HIGHEST 
PRIORITY TRANSFER 


DE=ASSERT BUS 
HOLD REQUEST 
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Figure 3-2. Flow of DMA Controller Operation 


W/R# M/lO# ce} ors coe 


TO HOST 
PROCESSOR 
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At completion of the DMA process, the 82380 will 
remove the bus hold request. At this time the 82380 
becomes a slave again, and the host returns to be- 
ing a master. If there are other DMA channels with 
requests pending, the controller will again assert the 
hold request signal and restart the bus arbitration 
and switching process. 


3.2 Interface Signals 


There are fourteen control signals dedicated to the 
DMA process. They include eight DMA Channel Re- 
quests (DREQn), three Encoded DMA Acknowledge 
signals (EDACKn), Processor Hold and Hold Ac- 
knowledge (HOLD, HLDA), and End-Of-Process 
(EOP #). The DREQn inputs and EDACK(0-2) out- 
puts are handshake signals to the devices requiring 
DMA service. The HOLD output and HLDA input are 
handshake signals to the host processor. Figure 3-3 
shows these signals and how they interconnect be- 
tween the 82380 DMA Controller, and the Requester 
and Target devices. 


BUS CONTROL 
END OF PROCESS 


REQUEST 
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Figure 3-3. Requester, Target, and DMA Controller interconnection 
(2-Cycle Configuration) 
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3.2.1 DREQn and EDACK(0-2) 


These signals are the handshake signals between 
the peripheral and the 82380. When the peripheral 
requires DMA service, it asserts the DREQn signal 
of the channel which is programmed to perform the 
service. The 82380 arbitrates the DREQn against 
other pending requests and begins the DMA pro- 
cess after finishing other higher priority processes. 


When the DMA service for the requested channel is 
in progress, the EDACK(0-2) signals represent the 
DMA channel which is accessing the Requester. 
The 3-bit code on the EDACK(0-2) lines indicates 
the number of the channel presently being serviced. 
Table 3-2 shows the encoding of these signals. Note 
that Channel 4 does not have a corresponding hard- 
ware acknowledge. 


The DMA acknowledge (EDACK) signals indicate 
the active channel only during DMA accesses to the 
Requester. During accesses to the Target, 
EDACK(0-2) has the idle code (100). EDACK(0-2) 
can thus be used to select a Requester device dur- 
ing a transfer. 


Table 3-2. EDACK Encoding During 
a DMA Transfer 


Active Channel 


/EDACK2 
0 
0 
0 
0 
1 
1 
1 
1 


--o0--00f 
-o-osenolf 


DREQn can be programmed as either an Asynchro- 
nous or Synchronous input. See section 3.4.1 for de- 
tails on synchronous versus asynchronous operation 
of this pin. 


The EDACKn signals are always active. They either 
indicate ‘no acknowledge’ or they indicate a bus ac- 
cess to the requester. The acknowledge code is ei- 
ther 100, for an idle DMA or during a DMA access to 
the Target, or ‘n’ during a Requester access, where 
n is the binary value representing the channel. A 
simple 3-line to 8-line decoder can be used to pro- 
vide discrete acknowledge signals for the peripher- 
als. 


3.2.2 HOLD and HLDA 


The Hold Request (HOLD) and Hold Acknowledge 
(HLDA) signals are the handshake signals between 
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the DMA Controller and the host processor. HOLD is 
an output from the 82380 and HLDA is an input. 
HOLD is asserted by the DMA Controller when there 
is a pending DMA request, thus requesting the proc- 
essor to give up control of the bus so the DMA pro- 
cess can take place. The 80386 responds by assert- 
ing HLDA when it is ready to relinquish control of the 
bus. 


The 82380 will begin operations on the bus one 
clock cycle after the HLDA signal goes active. For 
this reason, other devices on the bus should be in 
the slave mode when HLDA is active. 


HOLD and HLDA should not be used to gate or se- 
lect peripherals requesting DMA service. This is be- 
cause of the use of DMA-like operations by the 
DRAM Refresh Controller. The Refresh Controller is 
arbitrated with the DMA Controller for control of the 
bus, and refresh cycles have the highest priority. A 
refresh cycle will take place between DMA cycles 
without relinquishing bus control. See section 3.4.3 
for a more detailed discussion of the interaction be- 
tween the DMA Controller and the DRAM Refresh 
Controller. 


3.2.3 EOP # 


EOP # is a bi-directional signal used to indicate the 
end of a DMA process. The 82380 activates this as 
an output during the T2 states of the last Requester 
bus cycle for which a channel is programmed to exe- 
cute. The Requester should respond by either with- 
drawing its DMA request, or interrupting the host 
processor to indicate that the channel needs to be 
programmed with a new buffer. As an input, this sig- 
nal is used to tell the DMA Controller that the periph- 
eral being serviced does not require any more data 
to be transferred. This indicates that the current 
buffer is to be terminated. 


EOP# can be programmed as either an Asynchro- 
nous or a Synchronous input. See section 3.4.1 for 
details on synchronous versus asynchronous opera- 
tion of this pin. 


3.3 Modes of Operation 


The 82380 DMA Controller has many independent 
operating functions. When designing peripheral in- 
terfaces for the 82380 DMA Controller, all of the 
functions or modes must be considered. All of the 
channels are independent of each other (except in 
priority of operation) and can operate in any of the 
modes. Many of the operating modes, though inde- 
pendently programmable, affect the operation of 
other modes. Because of the large number of com- 
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binations possible, each programmable mode is dis- 
cussed here with its affects on the operation of other 
modes. The entire list of possible combinations will 
not be presented. 


Table 3-1 shows the categories of DMA features 
available in the 82380. Each of the five major cate- 
gories is independent of the others. The sub-catego- 
ries are the available modes within the major func- 
tion or mode category. The following sections 
explain each mode or function and its relation to oth- 
er features. 


Table 3-1. DMA Operating Modes 


|. Target/Requester Definition 
a. Data Transfer Direction 
b. Device Type 
c. Increment/Decrement/Hold 
ll. Buffer Processes 
a. Single Buffer Process 
b. Buffer Auto-Initialize Process 
c. Buffer Chaining Process 
lll. Data Transfer/Handshake Modes 
a. Single Transfer Mode 
b. Demand Transfer Mode 
c. Block Transfer Mode 
d. Cascade Mode 
IV. Priority Arbitration 
a. Fixed — 
b. Rotating 
c. Programmable Fixed 
V. Bus Operation | 
a. Fly-By (Single-Cycle)/Two-Cycle 
b. Data Path Width 
c. Read, Write, or Verify Cycles 


3.3.1 TARGET/REQUESTER DEFINITION 


All DMA transfers involve three devices: the DMA 
Controller, the Requester, and the Target. Since the 
devices to be accessed by the DMA Controller vary 
widely, the operating characteristics of the DMA 
Controller must be tailored to the Requester and 
Target devices. 


The Requester can be defined as either the source 
or the destination of the data to be transferred. This 
is done by specifying a Write or a Read transfer, 
respectively. In a Read transfer, the Target is the 
data source and the Requester is the destination for 
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the data. In a Write transfer, the Requester is the 
source and the Target in the destination. 


The Requester and Target addresses can each be 
independently programmed to be incremented, dec- 
remented, or held constant. As an example, the 
82380 is capable of reversing a string or data by 
having a Requester address increment and the Tar- 
get address decrement in a memory-to-memory 
transfer. 


3.3.2 BUFFER TRANSFER PROCESSES 


The 82380 DMA Controller allows three programma- 
ble Buffer Transfer Processes. These processes de- 
fine the logical way in which a buffer of data is ac- 
cessed by the DMA. 


The three Buffer Transfer Processes include the Sin- 
gle Buffer Process, the Buffer Auto-Initialize Pro- 
cess, and the Buffer Chaining Process. These pro- 
cesses require special programming considerations. 
See the DMA Programming section for more details 
on setting up the Buffer Transfer Processes. 


Single Buffer Process 


The Single Buffer Process allows the DMA channel 
to transfer only one buffer of data. When the buffer 
has been completely transferred (Current Byte 
Count decremented past zero or EOP# input ac- 
tive), the DMA process ends and the channel be- 
comes idle. In order for that channel to be used 
again, it must be reprogrammed. 


The single Buffer Process is usually used when the 
amount of data to be transferred is known exactly, 
and it is also known that there is not likely to be any 
data to follow before the operating system can 
reprogram the channel. 


Buffer Auto-Initialize Process 


The Buffer Auto-Initialize Process allows multiple 
groups of data to be transferred to or from a single 
buffer. This process does not require reprogram- 
ming. The Current Registers are automatically repro- 
grammed from the Base Registers when the current 
process is terminated, either by an expired Byte 
Count or by an external EOP# signal. The data 
transferred will always be between the same Target 
and Requester. 


The auto-initialization/process-execution cycle is re- 


peated, with a HOLD/HLDA re-arbitration, until the 
channel is either disabled or re-programmed. 
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Buffer Chaining Process 


The Buffer Chaining Process is useful for transfer- 
ring large quantities of data into non-contiguous 
buffer areas. In this process, a single channel is 
used to process data from several buffers, while 
having to program the channel only once. Each new 
buffer is programmed in a pipelined operation that 
provides the new buffer information while the old 
buffer is being processed. The chain is created by 
loading new buffer information while the 82380 DMA 
Controller is processing the Current Buffer. When 
the Current Buffer expires, the 82380 DMA Control- 
ler automatically restarts the channel using the new 
buffer information. 


Loading the new buffer information is done by an 
interrupt routine which is requested by the 82380. 
Interrupt Request 1 (IRQ1) is tied internally to the 
82380 DMA Controller for this purpose. IRQ1 is gen- 
erated by the 82380 when the new buffer informa- 
tion is loaded into the channel’s Current Registers, 
leaving the Base Registers ‘empty’. The interrupt 
service routine loads new buffer information into the 
Base Registers. The host processor is required to 
load the information for another buffer before the 
current Byte Count expires. The process repeats un- 
til the host programs the channel back to single buff- 
er operation, or until the channel runs out of buffers. 


The channel runs out of buffers when the Current 
Buffer expires and the Base Registers have not yet 
been loaded with new buffer information. When this 
occurs, the channel must be reprogrammed. 


If an external EOP # is encountered while executing 
a Buffer Chaining Process, the current buffer is con- 
sidered expired and the new buffer information is 
loaded into the Current Registers. If the Base Regis- 
ters are ‘empty’, the chain is terminated. 


The channel uses the Base Target Address Register 
as an indicator of whether or not the Base Registers 
are full. When the most significant byte of the Base 
Target Register is loaded, the channel considers all 
of the Base Registers loaded, and removes the in- 
terrupt request. This requires that the other Base 
Registers (Base Requester Address, Last Byte 
Count) must be loaded before the Base Target Ad- 
dress Register. The reason for implementing the re- 
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loading process this way is that, for most applica- 
tions, the Byte Count and the Requester will not 
change from one buffer to the next, and therefore do 
not need to be reprogrammed. The details of pro- 
gramming the channel for the Buffer Chaining Pro- 


cess can be found in the section of DMA program- 
ming. 


3.3.3 DATA TRANSFER MODES 


Three Data Transfer modes are available in the 
82380 DMA Controller. They are the Single Transfer, 
Block Transfer, and Demand Transfer Modes. 
These transfer modes can be used in conjunction 
with any one of three Buffer Transfer modes: Single 
Buffer, Auto-Initialized Buffer, and Buffer Chaining. 
Any Data Transfer Modes can be used under any of 
the Buffer Transfer Modes. These modes are inde- 
pendently available for all DMA channels. 


Different devices being serviced by the DMA Con- 
troller require different handshaking sequences for 
data transfers to take place. Three handshaking 
modes are available on the 82380, giving the de- 
signer the opportunity to use the DMA Controller as 
efficiently as possible. The speed at which data can 
be presented or read by a device can affect the way 
a DMA controller uses the host’s bus, thereby affect- 
ing not only data throughput during the DMA pro- 
cess, but also affecting the host’s performance by 
limiting its access to the bus. 


Single Transfer Mode 


In the Single Transfer Mode, one data transfer to or 
from the Requester is performed by the DMA Con- 
troller at a time. The DREQn input is arbitrated and 
the HOLD/HLDA sequence is executed for each 
transfer. Transfers continue in this manner until the 
Byte Count expires, or until EOP # is sampled active. 
If the DREQn input is held active continuously, the 
entire DREQ-HOLD-HLDA-DACK sequence is re- 
peated over and over until the programmed number 
of bytes has been transferred. Bus control is re- 
leased to the host between each transfer. Figure 3-4 
shows the logical flow of events which make up a 
buffer transfer using the Single Transfer Mode. Re- 
fer to section 3.4 for an explanation of the bus con- 
trol arbitration procedure. 
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The Single Transfer Mode is used for devices which 
require complete handshake cycles with each data 


INITIALIZE BUFFER access. Data is transferred to or from the Requester 


WAIT FOR DREQn 


only when the Requester is ready to perform the 
transfer. Each transfer requires the entire DREQ- 
HOLD-HLDA-DACK handshake cycle. Figure 3-5 


OR SOFTWARE REQUEST shows the timing of the Single Transfer Mode cy- 


EXECUTE 
ONE REQUESTER 
TRANSFER 


END OF BUFFER 


cles. 


Block Transfer Mode 


In the Block Transfer Mode, the DMA process is ini- 
tiated by a DMA request and continues until the Byte 
count expires, or until EOP # is activated by the Re- 
quester. The DREQn signal need only be held active 
until the first Requester access. Only a refresh cycle 
will interrupt the block transfer process. 


290128-19 Figure 3-6 illustrates the operation of the DMA dur- 
ing the Block Transfer Mode. Figure 3-7 shows the 


Figure 3-4. Buffer Transfer in timing of the handshake signals during Block Mode 
Single Transfer Mode Transfers. 
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Figure 3-5. DMA Single Transfer Mode 
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Demand Transfer Mode 


The Demand Transfer Mode provides the most flex- 


ible handshaking procedures during the DMA pro- 
cess. A Demand Transfer is initiated by a DMA re- 
quest. The process continues until the Byte Count 
expires, or an external EOP # is encountered. If the 
device being serviced (Requester) desires, it can in- 


TRANSFER DATA UNTIL terrupt the DMA process by de-activating the 
EOP OR TC DREQn line. Action is taken on the condition of 


DREQn during Requester accesses only. The ac- 


END OF BUFFER cess during which DREQn is sampled inactive is the 


290128-21 last Requester access which will.be performed dur- 

ing the current transfer. Figure 3-8 shows the flow of 

Figure 3-6. Buffer Transfer in events during the transfer of a buffer in the Demand 
Block Transfer Mode Mode. , 
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Figure 3-7. Block Mode Transfers 
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Figure 3-8. Buffer Transfer in 
Demand Transfer Mode 


When the DREQn line goes inactive, the DMA con- 
troller will complete the current transfer, including 
any necessary accesses to the Target, and relin- 


quish control of the bus to the host. The current pro- | 


cess information is saved (byte count, Requester 
and Target addresses, and Temporary Register). 
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The Requester can restart the transfer process by 
reasserting DREQn. The 82380 will arbitrate the re- 
quest with other pending requests and begin the 
process where it left off. Figure 3-9 shows the timing 
of handshake signals during Demand Transfer Mode 
operation. 


Using the Demand Transfer Mode allows peripherals 
to access memory in small, irregular bursts without 
wasting bus control time. The 82380 is designed to 
give the best possible bus control latency in the De- 
mand Transfer Mode. Bus control latency is defined 
here as the time from the last active bus cycle of the 
previous bus master to the first active bus cycle of 
the new bus master. The 82380 DMA Controller will 
perform its first bus access cycle two bus states af- 
ter HLDA goes active. In the typical configuration, 
bus control is returned to the host one bus state 
after the DREQn goes inactive. 


There are two cases where there may be more than 
one bus state of bus control latency at the end of a 
transfer. The first is at the end of an Auto-Initialize 
process, and the second is at the end of a process 
where the source is the Requester and Two-Cycle 
transfers are used. 


When a Buffer Auto-Initialize Process is complete, 
the 82380 requires seven bus states to reload the 
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Figure 3-9. Demand Mode Transfers 
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Current Registers from the Base Registers of the 
Auto-Initialized channel. The reloading is done while 
the 82380 is still the bus master so that it is prepared 
to service the channel immediately after relinquish- 
ing the bus, if necessary. 


In the case where the Requester is the source, and 
Two-Cycle transfers are being used, there are two 
extra idle states at the end of the transfer process. 
This occurs due to housekeeping in the DMA’s inter- 
nal pipeline. These two idle states are present only 
after the very last Requester access, before the 
DMA Controller de-activates the HOLD signal. 


3.3.4 CHANNEL PRIORITY ARBITRATION 


DMA channel priority can be programmed into one 
of two arbitration methods: Fixed or Rotating. The 
four lower DMA channels and the four upper DMA 
channels operate as if they were two separate DMA 
controllers operating in cascade. The lower group of 
four channels (0-3) is always prioritized between 
channels 7 and 4 of the upper group of channels (4- 
7). Figure 3-10 shows a pictorial representation of 
the priority grouping. 


The priority can thus be set up as rotating for one 
group of channels and fixed for the other, or any 
other combination. While in Fixed Priority, the pro- 
grammer can also specify which channel has the 
lowest priority. 


PHANTOM 


290128-25 
Figure 3-10. DMA Priority Grouping 


The 82380 DMA Controller defaults to Fixed Priority. 
Channel 0 has the highest priority, then 1, 2, 3, 4, 5, 
6, 7. Channel 7 has the lowest priority. Any time the 
DMA Controller arbitrates DMA requests, the re- 
questing channel with the highest priority will be 
serviced next. 


Fixed Priority can be entered into at any time by a 
software command. The priority levels in effect 
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after the mode switch are determined by the current 
setting of the Programmable Priority. 


Programmable Priority is available for fixing the prior- 
ity of the DMA channels within a group to levels oth- 
er than the default. Through a software command, 
the channel to have the lowest priority in a group 
can be specified. Each of the two groups of four 
channels can have the priority fixed in this way. The 
other channels in the group will follow the natural 
Fixed Priority sequence. This mode affects only the 
priority levels while operating with Fixed Priority. 


For example, if channel 2 is programmed to have the 
lowest priority in its group, channel 3 has the highest 
priority. In descending order, the other channels 
would have the following priority: (3, 0, 1, 2), 4, 5, 6, 
7 (channel 2 lowest, channel 3 highest). If the upper 
group were programmed to have channel 5 as the 
lowest priority channel, the priority would be (again, 
highest to lowest): 6, 7, (3, 0, 1, 2), 4, 5. Figure 3-11 
shows this example pictorially. The lower group is 
always prioritized as a fifth channel of the upper 
group (between channels 4 and 7). 


High Priority 


CHANNEL 6 
CHANNEL 7 
PHANTOM 


| 
Low Priority 
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CHANNEL 4 
CHANNEL 5 


Figure 3-11. Example of Programmed Priority 


The DMA Controller will only accept Programmable 
Priority commands while the addressed group is op- 
erating in Fixed Priority. Switching from Fixed to Ro- 
tating Priority preserves the current priority levels. 
Switching from Rotating to Fixed Priority returns the 
priority levels to those which were last programmed 
by use of Programmable Priority. 


Rotating Priority allows the devices using DMA to 
share the system bus more evenly. An individual 
channel does not retain highest priority after being 
serviced, priority is passed to the next highest priori- 
ty channel in the group. The channel which was 
most recently serviced inherits the lowest priority. 
This rotation occurs each time a channel is serviced. 
Figure 3-12 shows the sequence of events as priori- 
ty is passed between channels. Note that the lower 
group rotates within the upper group, and that serv- 
icing a channel within the lower group causes rota- 
tion within the group as well as rotation of the upper 
group. 
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fo} 1}2{/3] | 415 | 6| 7 | —defautt (highest to lowest) 


DREQ2 and DREQ6—process channel 2 


f4/5]6| 7) Pero | 4 —channel 2 drops to lowest priority within group. 


Lower group drops to lowest priority within upper group. 
2(Double Rotation) 


DREQ6 (still) and DREQ7—process channel 6 


Slo) 7). 41 5/6. —channel 6 drops to lowest priority within group 


DREQ7 (still) and DREQO—process channel 7 


elo ban) 2 -4}5]6] 7) —channel 7 drops to lowest priority within group 


DREQO (still) and DREQ1—process channel 0 


4}5/}6]7. 1{2]/3]0 —channel 0 drops to lowest priority within group (Double Rotation) 


DREQ1 (still)\—process channel 1 


'4{5}6 | 7. Psryrisi —channel 1 drops to lowest priority within group 


Figure 3-12. Rotating Channel Priority. Lower and Upper 
groups are programmed for the Rotating Priority Mode. 
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3.3.5 COMBINING PRIORITY MODES ity modes between the two groups of channels: 
Fixed Priority only (default), Fixed Priority upper 
Since the DMA Controller operates as two four- group/Rotating Priority lower group, Rotating Priority 


channel controllers in cascade, the overall priority upper group/Fixed Priority lower group, and Rotating 
scheme of all eight channels can take on a variety of Priority only. Figure 3-13 illustrates the operation of 
forms. There are four possible combinations of prior- the two combined priority methods. 
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CASE 2 0-3 Rotating Priority, 4-7 Fixed Priority 
Figure 3-13. Combining Priority Modes 
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3.3.6 BUS OPERATION 


Data may be transferred by the DMA Controller us- 
ing two different bus cycle operations: Fly-By (one- 
cycle) and Two-Cycle. These bus handshake meth- 
ods are selectable independently for each channel 
through a command register. Device data path 
widths are independently programmable for both 
Target and Requester. Also selectable through soft- 
ware is the direction of data transfer. All of these 
parameters affect the operation of the 82380 ona 
bus-cycle by bus-cycle basis. 


3.3.6.1 Fly-By Transfers | 


The Fly-By Transfer Mode is the fastest and most 
efficient way to use the 82380 DMA Controller to 
transfer data. In this method of transfer, the data is 
written to the destination device at the same time it 
is read from the source. Only one bus cycle is used 
to accomplish the transfer. : 


In the Fly-By Mode, the DMA acknowledge signal is 
used to select the Requester. The DMA Controller 
simultaneously places the address of the Target on 
the address bus. The state of M/IO# and W/R# 
during the Fly-By transfer cycle indicate the type of 
Target and whether the target is being written to or 
read from. The Target’s Bus Size is used as an in- 
crementer for the Byte Count. The Requester ad- 
dress registers are ignored during Fly-By transfers. 


Note that memory-to-memory transfers cannot be 
done using the Fly-By Mode. Only one memory or 
1/O address is generated by the DMA Controller at a 
time during Fly-By transfers. Only one of the devices 
being accessed can be selected by an address. 
Also, the Fly-By method of data transfer limits the 
hardware to accesses of devices with the same data 
bus width. The Temporary Registers are not affect- 
ed in the Fly-By Mode. 


Fly-By transfers also require that the data paths of 
the Target and Requester be directly connected. 
This requires that successive Fly-By accesses be to 
doubleword boundaries, or that the Requester be 
capable of switching its connections to the data bus. 


3.3.6.2 Two-Cycle Transfers 


Two-Cycle transfers can also be performed by the 
82380 DMA Controller. These transfers require at 
least two bus cycles to execute. The data being 
transferred is read into the DMA Controller’s Tempo- 
rary Register during the first bus cycle(s). The sec- 
ond bus cycle is used to write the data from the 
Temporary Register to the destination. 


82380 


If the addresses of the data being transferred are 
not word or doubleword aligned, the 82380 will rec- 
ognize the situation and read and write the data in 
groups of bytes, placing them always at the proper 
destination. This process of collecting the desired 
bytes and putting them together is called ‘byte as- 
sembly’. The reverse process (reading from aligned 
locations and writing to non-aligned locations) is 
called ‘byte disassembly’. 


The assembly/disassembly process takes place 
transparent to the software, but can only be done 
while using the Two-Cycle transfer method. The 
82380 will always perform the assembly/disassem- 
bly process as necessary for the current data trans- 
fer. Any data path widths for either the Requester or 
Target can be used in the Two-Cycle Mode. This is 
very convenient for interfacing existing 8- and 16-bit 
peripherals to the 80386’s 32-bit bus. 


The 82380 DMA Controller always attempts to fill 
the Temporary Register from the source before writ- 
ing any data to the destination. If the process is ter- 
minated before the Temporary Register is filled (TC 
or EOP #), the 82380 will write the partial data to the 
destination. If a process is temporarily suspended 
(such as when DREQn is de-activated during a de- 
mand transfer), the contents of a partially filled Tem- 
porary Register will be stored within the 82380 until 
the process is restarted. 


For example, if the source is specified as an 8-bit 
device and the destination as a 32-bit device, there 
will be four reads as necessary from the 8-bit source 
to fill the Temporary Register. Then the 82380 will 
write the 32-bit contents to the destination. This cy- 
cle will repeat until the process is terminated or sus- 
pended. 


Note that for a Single-Cycle transfer mode of opera- 
tion (see section 3.3.3), the internal circuitry of the 
DMA Controller actually executes single transfers by 
removing the DREQ from the internal arbitration. 
Thus single transfers from an 8-bit requester to a 32- 
bit target will consist of four complete and indepen- 
dent 8-bit requester cycles, between which bus con- 
trol is released and re-requested. Finally, the 32-bit 
data will be transferred to the target device from the 
temporary register before the fifth requester cycle. 


With Two-Cycle transfers, the devices that the 
82380 accesses can reside at any address within 
1/O or memory space. The device must be able to 
decode the byte-enables (BEn#). Also, if the device 
cannot accept data in byte quantities, the program- 
mer must take care not to allow the DMA Controller 
to access the device on any address other than the 
device boundary. 
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3.3.6.3 Data Path Width and Data Transfer Rate 
Considerations 


The number of bus cycles used to transfer a single 
‘word’ of data is affected by whether the Two-Cycle 
or the Fly-By (Single-Cycle) transfer method is used. 


The number of bus cycles used to transfer data di- 
rectly affects the data transfer rate. Inefficient use of 
bus cycles will decrease the effective data transfer 
rate that can be obtained. Generally, the data trans- 
fer rate is halved by using Two-Cycle transfers in- 
stead of Fly-By transfers. 


The choice of data path widths of both Target and 
Requester affects the data transfer rate also. During 
each bus cycle, the largest pieces of data possible 
should be transferred. 


The data path width of the devices to be accessed 
must be programmed into the DMA controller. The 
82380 defaults after reset to 8-bit-to-8-bit data trans- 
fers, but the Target and Requester can have differ- 
ent data path widths, independent of each other and 
independent of the other channels. Since this is a 
software programmable function, more discussion of 
the uses of this feature are found in the section on 
programming. 


3.3.6.4 Read, Write, and Verify Cycles 


Three different bus cycle types may be used in a 
data transfer. They are the Read, Write, and Verify 
cycles. These cycle types dictate the way in which 
the 82380 operates on the data to be transferred. 


A Read Cycle transfers data from the Target to the 
Requester. A Write Cycle transfers data from the 
Requester to the target. In a Fly-By transfer, the ad- 
dress and bus status signals indicate the access 
(read or write) to the Target; the access to the Re- 
quester is assumed to be the opposite. 


The Verify Cycle is used to perform a data read only. 
No write access is indicated or assumed in a Verify 
Cycle. The Verify Cycle is useful for validating block 
fill operations. An external comparator must be pro- 
vided to do any comparisons on the data read. 


3.4 Bus Arbitration and Handshaking 


Figure 3-14 shows the flow of events in the DMA 
request arbitration process. The arbitration se- 
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quence starts when the Requester asserts a DREQn 
(or DMA service is requested by software). Figure 
3-15 shows the timing of the sequence of events 
following a DMA request. This sequence.is executed 
for each channel that is activated. The DREQn sig- 
nal can be replaced by a software DMA channel re- 
quest with no change in the sequence. 


WAIT FOR DREQn OR SOFTWARE REQUEST 
REQUESTER ASSERTS DREQn 


82380 ASSERTS HOLD REQUEST 


80386 ASSERTS HOLD ACKNOWLEDGE 


82380 ARBITRATES PENDING REQUESTS 


82380 PERFORMS HIGHEST PRIORITY 
TRANSFER (SEE DATA TRANSFER MODES) 


82380 DE=ASSERTS HOLD REQUEST 
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Figure 3-14. Bus Arbitration and DMA Sequence 


After the Requester asserts the service request, the 
82380 will request control of the bus via the HOLD 
signal. The 82380 will always assert the HOLD sig- 
nal one bus state after the service request is assert- 
ed. The 80386 responds by asserting the HLDA sig- 
nal, thus releasing control of the bus to the 82380 
DMA Controller. 


Priority of pending DMA service requests is arbitrat- 
ed during the first state after HLDA is asserted by 
the 80386. The next state will be the beginning of 
the first transfer access of the highest priority pro- 
cess. 
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When the 82380 DMA Controller is finished with its 
current bus activity, it returns control of the bus to 
the host processor. This is done by driving the 
HOLD signal inactive. The 82380 does not drive any 
address or data bus signals after HOLD goes low. It 
enters the Slave Mode until another DMA process is 
requested. The processor acknowledges that it has 
regained control of the bus by forcing the HLDA sig- 
nal inactive. Note that the 82380’s DMA Controller 
will not re-request control of the bus until the entire 
HOLD/HLDA handshake sequence is complete. 


The 82380 DMA Controller will terminate a current 
DMA process for one of three reasons: expired byte 
count, end-of-process command (EOP # activated) 
from a peripheral, or de-activated DMA request sig- 
nal. In each case, the controller will de-assert HOLD 
immediately after completing the data transfer in 
progress. These three methods of process termina- 
tion are illustrated in Figures 3-16, 3-19, and 3-18, 
respectively. 
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An expired byte count indicates that the current pro- 
cess is complete as programmed and the channel 
has no further transfers to process. The channel 
must be restarted according to the currently pro- 
grammed Buffer Transfer Mode, or reprogrammed 
completely, including a new Buffer Transfer Mode. 


If the peripheral activates the EOP # signal, it is indi- 
cating that it will not accept or deliver any more data 
for the current buffer. The 82380 DMA Controller 
considers this as a completion of the channel’s cur- 
rent process and interprets the condition the same 
way as if the byte count expired. 


The action taken by the 82380 DMA Controller in 
response to a de-activated DREQn signal depends 
on the Data Transfer Mode of the channel. In the 
Demand Mode, data transfers will také place as long 
as the DREQn is active and the byte count has not 
expired. In the Block Mode, the controller will com- 
plete the entire block transfer without relinquishing 
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Channel priority resolution takes place during the bus state before HLDA is asserted, alleen the DMA Controller to 


respond to HLDA without extra idle bus states. 


Figure 3-15. Beginning of a DMA process 
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the bus, even if DREQn goes inactive before the 
transfer is complete. In the Single Mode, the control- 
ler will execute single data transfers, relinquishing 
the bus between each transfer, as long as DREQn is 
active. 


Normal termination of a DMA process due to expira- 
tion of the byte count (Terminal Count-TC) is shown 


Single 
or Chaining- 
Base Empty 


Buffer Process: 


Event 


Terminal Count 
EOP # Input 


Results 

Current Registers 
Channel Mask 

EOP # Output 
Terminal Count Status 
Software Request 
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in Figure 3-16. The condition of DREQn is ignored 
until after the process is terminated. If the channel is 
programmed to auto-initialize, HOLD will be held ac- 


tive for an additional seven clock cycles while the 
auto-initialization takes place. 


Table 3-3 shows the DMA channel activity due to 
EOP# or Byte Count expiring (Terminal Count). 


Auto- 
Initialize 


Chaining- 
Base Loaded 


HLDA 
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Figure 3-16. Termination of a DMA Process Due to Expiration of Current Byte Count 
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The 82380 always relinquishes control of the bus 
between channel services. This allows the hardware 
designer the flexibility to externally arbitrate bus hold 
requests, if desired. If another DMA request is pend- 
ing when a higher priority channel service is com- 
pleted, the 82380 will relinquish the bus until the 
hold acknowledge is inactive. One bus state after 
the HLDA signal goes inactive, the 82380 will assert 
HOLD again. This is illustrated in Figure 3-17. 


3.4.1 SYNCHRONOUS AND ASYNCHRONOUS 
SAMPLING OF DREQn AND EOP# 


As an indicator that a DMA service is to be started, 
DREQn is always sampled asynchronously. It is 
sampled at the beginning of a bus state and acted 
upon at the end of the state. Figure 3-15 illustrates 
the start of a DMA process due to a DREQn input. 


The DREQn and EOP # inputs can be programmed 
to be sampled either synchronously or asynchro- 
nously to signal the end of a transfer. 


The synchronous mode affords the Requester one 
bus state of extra time to react to an access. This 
means the Requester can terminate a process on 
the current access, without losing any data. The 
asynchronous mode requires that the input signal be 
presented prior to the beginning of the last state of 
the Requester access. 
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The timing relationships of the DREQn and EOP# 
signals to the termination of a DMA transfer are 
shown in Figures 3-18 and 3-19. Figure 3-18 shows 
the termination of a DMA transfer due to inactive 
DREQn. Figure 3-19 shows the termination of a 
DMA process due to an active EOP # input. 


In the Synchronous Mode, DREQn and EOP# are 
sampled at the end of the last state of every Re- 
quester data transfer cycle. If EOP# is active or 
DREQn is inactive at this time, the 82380 recognizes 
this access to the Requester as the last transfer. At 
this point, the 82380 completes the transfer in prog- 
ress, if necessary, and returns bus control to the 
host. | 


In the asynchronous mode, the inputs are sampled 
at the beginning of every state of a Requester ac- 
cess. The 82380 waits until the end of the state to 
act on the input. 


DREQn and EOP# are sampled at the latest possi- 
ble time when the 82380 can determine if another 
transfer is required. In the Synchronous Mode, 
DREQn and EOP # are sampled on the trailing edge 
of the last bus state before another data access cy- 
cle begins. The Asynchronous Mode requires that 
the signals be valid one clock cycle earlier. 
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Figure 3-17. Switching between Active DMA Channels 
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Figure 3-18. Termination of a DMA Process Due to De-Asserting DREQn 
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Figure 3-19. Termination of a DMA Process Due to an External EOP # 
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While in the Pipeline Mode, if the NA# signal is sam- 
pled active during a transfer, the end of the state 


where NA# was sampled active is when the 82380 
decides whether to commit to another transfer. The 


device must de-assert DREQn or assert EOP # be-. 


fore NA# is asserted, otherwise the 82380 will com- 
mit to another, possibly undesired, transfer. 


Synchronous DREQn and EOP# sampling allows 
the peripheral to prevent the next transfer from oc- 
curring by de-activating DREQn or asserting EOP # 
during the current Requester access, before the 
82380 DMA Controller commits itself to another 
transfer. The DMA Controller will not perform the 
next transfer if it has not already begun the bus cy- 
cle. Asynchronous sampling allows less stringent 
timing requirements than the Synchronous Mode, 
but requires that the DREQn signal be valid at the 
beginning of the next to last bus state of the current 
Requester access. 


Using the Asynchronous Mode with zero wait states 
can be very difficult. Since the addresses and con- 
trol signals are driven by the 82380 near half-way 
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through the first bus state of a transfer, and the 
Asynchronous Mode requires that DREQn be active 
before the end of the state, the peripheral being ac- 
cessed is required to present DREQn only a few 
nanoseconds after the control information is avail- 
able. This means that the peripheral’s control logic 
must be extremely fast (practically non-causal). An 
alternative is the Synchronous Mode. 


3.4.2 ARBITRATION OF CASCADED MASTER 
REQUESTS 


The Cascade Mode allows another DMA-type de- 
vice to share the bus by arbitrating its bus accesses 
with the 82380’s. Seven of the eight DMA channels 
(O-3 and 5-7) can be connected to a cascaded de- 
vice. The cascaded device requests bus control 
through the DREQn line of the channel which is pro- 
grammed to operate in Cascade Mode. Bus hold ac- 
knowledge is signaled to the cascaded device 
through the EDACK lines. When the EDACK lines 
are active with the code for the requested cascade 
channel, the bus is available to the cascaded master 
device. 
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MASTER n 


HOLD REQUEST 


290128-33 


Figure 3-20. Cascaded Bus Master 
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A Cascade cycle begins the same way a regular 
DMA cycle begins. The requesting bus master as- 
serts the DREQn line on the 82380. This bus control 
request arbitrated as any other DMA request would 
be. If any channel receives a DMA request, the 
82380 requests control of the bus. When the host 
acknowledges that it has released bus control, the 
82380 acknowledges to the requesting master that it 
may access the bus. The 82380 enters an idle state 
until the new master relinquishes control. 


A cascade cycle will be terminated by one of two 
events: DREQn going inactive, or HLDA going inac- 
tive. The normal way to terminate the cascade cycle 


a : 
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is for the cascaded master to drop the DREQn sig- 


nal. Figure 3-21 shows the two cascade cycle termi- 
nation sequences. 


The Refresh Controller may interrupt the cascaded 
master to perform a refresh cycle. If this occurs, the 
82380 DMA Controller will de-assert the EDACK sig- 
nal (hold acknowledge to cascaded master) and wait 
for the cascaded master to remove its hold request. 
When the 82380 regains bus control, it will perform 
the refresh cycle in its normal fashion. After the re- 
fresh cycle has been completed, and if the cascad- 
ed device has re-asserted its request, the 82380 will 
return control to the cascaded master which was in- 
terrupted. 


HLDA \ 


Cascade cycle termination by DREQn inactive 
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HOLD \ 


Cascade cycle termination by HLDA inactive 
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Figure 3-21. Cascade Cycle Termination 
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The 82380 assumes that it is the only device moni- 
toring the HLDA signal. If the system designer 
wishes to place other devices on the bus as bus 
masters, the HLDA from the processor must be in- 
tercepted before presenting it to the 82380. Using 


the Cascade capability of the 82380 DMA Controller 
offers a much better solution. 


3.4.3 ARBITRATION OF REFRESH REQUESTS 


The arbitration of refresh requests by the DRAM Re- 
fresh Controller is slightly different from normal DMA 
channel request arbitration. The 82380 DRAM Re- 
fresh Controller always has the highest priority of 
any DMA process. It also can interrupt a process in 
progress. Two types of processes in progress may 
be encountered: normal DMA, and bus master cas- 
cade. 


In the event of a refresh request during a normal 
DMA process, the DMA Controller will complete the 
data transfer in progress and then execute the re- 
fresh cycle before continuing with the current DMA 
process. The priority of the interrupted process is 
not lost. If the data transfer cycle interrupted by the 
Refresh Controller is the last of a DMA process, the 
refresh cycle will always be executed before control 
of the bus is transferred back to the host. 


When the Refresh Controller request occurs during 
a cascade cycle, the Refresh Controller must be as- 
sured that the cascaded master device has relin- 
quished control of the bus before it can execute the 
refresh cycle. To do this, the DMA Controller drops 
the EDACK signal to the cascaded master and waits 
for the corresponding DREQn input to go inactive. 
By dropping the DREQn signal, the cascaded mas- 
ter relinquishes the bus. The Refresh Controller then 
performs the refresh cycle. Control of the bus is re- 
turned to the cascaded master if DREQn returns to 
an active state before the end of the refresh cycle, 
otherwise control is passed to the processor and the 
cascaded master loses its priority. 


3.5 DMA Controller Register Overview 


The 82380 DMA Controller contains 44 registers 
which are accessable to the host processor. Twen- 
ty-four of these registers contain the device ad- 
dresses and data counts for the individual DMA 
channels (three per channel). The remaining regis- 
ters are control and status registers for initiating and 
monitoring the operation of the 82380 DMA Control- 
ler. Table 3-4 lists the DMA Controller’s registers 
and their accessability. 
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Register Name Access 


Control/Status Register—One Each Per 
Group 


Command Register | 
Command Register II 
Mode Register | 

Mode Register II 

Software Request Register 
Mask Set-Reset Register 
Mask Read-Write Register 


Write Only 
Write Only 
Write Only 
Write Only 
Read/Write 
Write Only 
Read/Write 
Read Only 
Write Only 
Read/Write 


Channel Registers—One Each Per Channel 


Base Target Address Write Only 
Current Target Address Read Only 
Base Requester Address Write Only 
Current Requester Address Read Only 
Base Byte Count Write Only 
Current Byte Count Read Only 


Table 3-4. DMA Controller Registers 


Status Register 
Bus Size Register 
Chaining Register 


3.5.1 CONTROL/STATUS REGISTERS 


The following registers are available to the host 
processor for programming the 82380 DMA Control- 
ler into its various modes and for checking the oper- 
ating status of the DMA processes. Each set of four 
DMA channels has one of each of these registers 
associated with it. 


Command Register | 


Enables or disables the DMA channels as a group. 
Sets the Priority Mode (Fixed or Rotating) of the 
group. This write-only register is cleared by a hard- 
ware reset, defaulting to all channels enabled and 
Fixed Priority Mode. 


Command Register II 


Sets the sampling mode of the DREQn and EOP# 
inputs. Also sets the lowest priority channel for the 
group in the Fixed Priority Mode. The functions pro- 
grammed through Command Register || default after 
a hardware reset to: asynchronous DREQn and 
EOP #, and channels 3 and 7 lowest priority. 


Mode Register | 
Mode Register | is identical in function to the Mode 


register of the 8237A. It programs the following func- 
tions for an individually selected channel: 
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Type of Transfer—read, write, verify 
Auto—lInitialize—enable or disable 

Target Address Count—increment or 
decrement 

Data Transfer Mode—demand, single, block, 
cascade 


Mode Register | functions default to the following 
after reset: verify transfer, Auto-Initialize disabled, In- 
crement Target address, Demand Mode. 


Mode Register II 


Programs the following functions for an individually 
selected channel: 


Target Address Hold—enable or disable 
Requester Address Count—increment or 
decrement 

Requester Address Hold—enable or disable 
Target Device Type—I/O or Memory 
Requester Device Type—l/O or Memory 
Transfer Cycles—Two-Cycle or Fly-By 


Mode Register I! functions are defined as follows 
after a hardware reset: Disable Target Address Hold, 
Increment Requester Address, Target (and Re- 
quester) in memory, Fly-By Transfer Cycles. Note: 
Requester Device Type ignored in Fly-By Transfers. 


Software Request Register 


The DMA Controller can respond to service requests 
which are initiated by software. Each channel has an 
internal request status bit associated with it. The 
host processor can write to this register to set or 
reset the request bit of a selected channel. 


The status of the group’s software DMA service re- 
quests can be read from this register as well. Each 
request bit is cleared upon Terminal Count or exter- 
nal EOP #. 


The software DMA requests are non-maskable and 
subject to priority arbitration with all other software 
and hardware requests. The entire register is 
cleared by a hardware reset. 


Mask Registers 


Each channel has associated with it a mask bit 
which can be set/reset to disable/enable that chan- 
nel. Two methods are available for setting and clear- 
ing the mask bits. The Mask Set/Reset Register is a 
write-only register which allows the host to select an 
individual channel and either set or reset the mask 
bit for that channel only. The Mask Read/Write Reg- 
ister is available for reading the mask bit status and 
for writing mask bits in groups of four. 
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The mask bits of a group may be cleared in one step 
by executing the Clear Mask Command. See the 
DMA Programming section for details. A hardware 
reset sets all of the channel mask bits, disabling all 
channels. 


Status Register 


The Status register is a read-only register which con- 
tains the Terminal Count (TC) and Service Request 
status for a group. Four bits indicate the TC status 
and four bits indicate the hardware request status 
for the four channels in the group. The TC bits are 
set when the Byte Count expires, or when an exter- 
nal EOP# is asserted. These bits are cleared by 
reading from the Status Register. The Service Re- 
quest bit for a channel indicates when there is a 
hardware DMA request (DREQn) asserted for that 
channel. When the request has been removed, the 
bit is cleared. 


Bus Size Register 


This write-only register is used to define the bus size 
of the Target and Requester of a selected channel. 
The bus sizes programmed will be used to dictate 
the sizes of the data paths accessed when the DMA 
channel is active. The values programmed into this 
register affect the operation of the Temporary Regis- 
ter. Any byte-assembly required to make the trans- 
fers using the specified data path widths will be done 
in the Temporary Register. The Bus Size register of 
the Target is used as an increment/decrement value 
for the Byte Counter and Target Address when in 
the Fly-By Mode. Upon reset, all channels default to 
8-bit Targets and 8-bit Requesters. 


Chaining Register 


As a command or write register, the Chaining regis- 
ter is used to enable or disable the Chaining Mode 
for a selected channel. Chaining can either be dis- 
abled or enabled for an individual channel, indepen- 
dently of the Chaining Mode status of other chan- 
nels. After a hardware reset, all channels default to 
Chaining disabled. 


When read by the host, the Chaining Register pro- 
vides the status of the Chaining Interrupt of each of 
the channels. These interrupt status bits are cleared 
when the new buffer information has been loaded. 


3.5.2 CHANNEL REGISTERS 


Each channel has three individually programmable 
registers necessary for the DMA process; they are 
the Base Byte Count, Base Target Address, and 
Base Requester Address registers. The 24-bit Base 
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Byte Count register contains the number of bytes to 
be transferred by the channel. The 32-bit Base Tar- 
get Address Register contains the beginning ad- 
dress (memory or I/O) of the Target device. The 32- 
bit Base Requester Address register contains the 
base address (memory or I/O) of the device which is 
to request DMA service. 


Three more registers for each DMA channel exist 
within the DMA Controller which are directly related 
to the registers mentioned above. These registers 
contain the current status of the DMA process. They 
are the Current Byte Count register, the Current Tay- 
get Address, and the Current Requester Address: It 
is these registers which are manipulated (increment- 
ed, decremented, or held constant) by the 82380 
DMA Controller during the DMA process. The Cur- 
rent registers are loaded from the Base registers. 


The Base registers are loaded when the host proc- 
essor writes to the respective channel register ad- 
dresses. Depending on the mode in which the chan- 
nel is operating, the Current registers are typically 
loaded in the same operation. Reading from the 
channel register addresses yields the contents of 
the corresponding Current register. 


To maintain compatibility with software which ac- 
cesses an 82374, a Byte Pointer Flip-Flop is used to 
control access to the upper and lower bytes of some 
words of the Channel Registers. These words are 
accessed as byte pairs at single port addresses. The 
Byte Pointer Flip-Flop acts as a one-bit pointer 
which is toggled each time a qualifying Channel 
Register byte is accessed. It always points to the 
next logical byte to be accessed of a pair of bytes. 


The Channel registers are arranged as pairs of 
words, each pair with its own port address. Address- 
ing the port with the Byte Pointer Flip-Flop reset ac- 
cesses the least significant byte of the pair. The 
most significant byte is accessed when the Byte 
Pointer is set. 


For compatibility with existing 8237A designs, there 
is one exception to the above statements about the 
Byte Pointer Flip-Flop. The third byte (bits 16-23) of 
the Target Address is accessed through its own port 
address. The Byte Pointer Flip-Flop is not affected 
by any accesses to this byte. 


The upper eight bits of the Byte Count Register are 
cleared when the least significant byte of the regis- 
ter is loaded. This provides compatibility with soft- 
ware which accesses an 8237A. The 8237A has 
16-bit Byte Count Registers. 
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3.5.3 TEMPORARY REGISTERS 


Each channel has a 32-bit Temporary Register used 
for temporary data storage during two-cycle DMA 
transfers. It is this register in which any necessary 
byte assembly and disassembly of non-aligned data 
is performed. Figure 3-22 shows how a block of data 
will be moved between memory locations with differ- 
ent boundaries. Note that the order of the data does 
not change. 


SOURCE DESTINATION 
20H 50H 
21H 51H 
22H 52H 
23H 53H 
24H 54H 
25H 55H 
26H 56H 
27H 57H 

58H 
59H 
5AH 


Target = source = 00000020H 
Requester = destination = 00000053H 
Byte Count = 000006H 
Figure 3-22. Transfer of Data between Memory 
Locations with Different Boundaries. This will be 


the result, independent of data path width. 


If the destination is the Requester and an early pro- 
cess termination has been indicated by the EOP # 
signal or DREQn inactive in the Demand Mode, the 
Temporary Register is not affected. If data remains 
in the Temporary Register due to differences in data 
path widths of the Target and Requester, it will not 
be transferred or otherwise lost, but will be stored for 
later transfer. 


If the destination is the Target and the EOP # signal 
is sensed active during the Requester access of a 
transfer, the DMA Controller will complete the trans- 
fer by sending to the Target whatever information is 
in the Temporary Register at the time of process 
termination. This implies that the Target could be 
accessed with partial data. For this reason it is ad- 
visable to have an I/O device designated as a Re- 
quester, unless it is capable of handling partial data 
transfers. 
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3.6 DMA Controller Programming 


Programming a DMA Channel to perform a needed 
DMA function is in general a four step process. First 
the global attributes of the DMA Controller are pro- 
grammed via the two Command Registers. These 
global attributes include: priority levels, channel 
group enables, priority mode, and DREQn/EOP # in- 
put sampling. 


The second step involves setting the operating 
modes of the particular channel. The Mode Regis- 
ters are used to define the type of transfer and the 
handshaking modes. The Bus Size Register and 
Chaining Register may also need to be programmed 
in this step. 


The third step is setting up the channel is to load the 
Base Registers in accordance with the needs of the 
operating modes chosen in step two. The Current 
Registers are automatically loaded from the Base 
Registers, if required by the Buffer Transfer Mode in 
effect. The information loaded and the order in 
which it is loaded depends on the operating mode. A 
channel used for cascading, for example, needs no 
buffer information and this step can be skipped en- 
tirely. 


The last step is to enable the newly programmed 
channel using one of the Mask Registers. The chan- 
nel is then available to perform the desired data 
transfer. The status of the channel can be observed 
at any time through the Status Register, Mask Reg- 
ister, Chaining Register, and Software Request reg- 
ister. 


Once the channel is programmed and enabled, the 
DMA process may be initiated in one of two ways, 
either by a hardware DMA request (DREQn) or a 
software request (Software Request Register). 


Once programmed to a particular Process/Mode 
configuration, the channel will operate in that config- 
uration until programmed otherwise. For this reason, 
restarting a channel after the current buffer expires 
does not require complete reprogramming of the 
channel. Only those parameters which have 
changed need to be reprogrammed. The Byte Count 
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Register is always changed and must be repro- 
grammed. A Target or Requester Address Register 
which is incremented or decremented should be re- 
programmed also. 


3.6.1 BUFFER PROCESSES 


The Buffer Process is determined by the Auto-Initial- 
ize bit of Mode Register | and the Chaining Register. 
lf Auto-Initialize is enabled, Chaining should not be 
used. 


* 
3.6.1.1 Single Buffer Process 


The Single Buffer Process is programmed by dis- 
abling Chaining via the Chaining Register and pro- 
gramming Mode Register | for non-Auto-Initialize. 


3.6.1.2 Buffer Auto-Initialize Process 


Setting the Auto-Initialize bit in Mode Register | is all 
that is necessary to place the channel in this mode. 
Buffer Auto-Initialize must not be enabled simulta- 
neous to enabling the Buffer Chaining Mode as this 
will have unpredictable results. 


Once the Base Registers are loaded, the channel is 
ready to be enabled. The channel will reload its Cur- 
rent Registers from the Base Registers each time 
the Current Buffer expires, either by an expired Byte 
Count or an external EOP #. 


3.6.1.3 Buffer Chaining Process 


The Buffer Chaining Process is entered into from the 
Single Buffer Process. The Mode Registers should 
be programmed first, with all of the Transfer Modes 
defined as if the channel were to operate in the Sin- 
gle Buffer Process. The channel’s Base and Current 
Registers are then loaded. When the channel has 
been set up in this way, and the chaining interrupt 
service routine is in place, the Chaining Process can 
be entered by programming the Chaining Register. 
Figure 3.23 illustrates the Buffer Chaining Process. 


An interrupt (IRQ1) will be generated immediately af- 
ter the Chaining Process is entered, as the channel 


& 
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then perceives the Base Registers as empty and in 
need of reloading. It is important to have the inter- 
rupt service routine in place at the time the Chaining 
Process is entered into. The interrupt request is re- 


moved when the most significant byte of the Base 
Target Address is loaded. 


The interrupt will occur again when the first buffer 
expires and the Current Registers are loaded from 
the Base Registers. The cycle continues until the 
Chaining Process is disabled, or the host fails to re- 
spond to IRQ1 before the Current Buffer expires. 


INSTALL IRQ1 INTERRUPT SERVICE ROUTINE 
SET THE CHANNEL TO NON=CHAINING PROCESS 
PROGRAM THE MODE REGISTERS 
LOAD BASE REGISTERS FOR FIRST BUFFER 


SET THE CHANNEL TO CHAINING PROCESS 


(IRQ1 WILL BE ACTIVATED) 


ENABLE INTERRUPT 


(IRQ1 WILL NEED SERVICE = 
LOAD BASE REGISTERS) 


ENABLE THE CHANNEL 


FROM THIS POINT, THE HOST CAN PERFORM ANOTHER 
TASK. THE INTERRUPT SERVICE ROUTINE LEFT BEHIND 
WILL MAINTAIN THE CHANNEL. 
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Figure 3-23. Flow of Events in the 
Buffer Chaining Process 
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Exiting the Chaining Process can be done by reset- 
ting the Chaining Mode Register. If an interrupt is — 
pending for the channel when the Chaining Register 
is reset, the interrupt request will be removed. The 
Chaining Process can be temporarily disabled by 
setting the channel’s Mask bit in the Mask Register. 


The interrupt service routine for IRQ1 has the re- 
sponsibility of reloading the Base Register as neces- 
sary. It should check the status of the channel to 
determine the cause of channel expiration, etc. It 
should also have access to operating system infor- 
mation regarding the channel, if any exists. The 
IRQ1 service routine should be capable of determin- 
ing whether the chain should be continued or termi- 
nated and act on that information. 


3.6.2 DATA TRANSFER MODES 


The Data Transfer Modes are selected via Mode 
Register |. The Demand, Single, and Block Modes 
are selected by bits D6 and D7. The individual trans- 
fer type (Fly-By vs Two-Cycle, Read-Write-Verify, 
and |/O vs Memory) is programmed through both of 
the Mode registers. 


3.6.3 CASCADED BUS MASTERS 


The Cascade Mode is set by writing ones to D7 and 
D6 of Mode Register |. When a channel is pro- 
grammed to operate in the Cascade Mode, all of the 
other modes associated with Mode Registers | and II 
are ignored. The priority and DREQn/EOP# defini- 
tions of the Command Registers will have the same 
effect on the channel’s operation as any other 
mode. 


3.6.4 SOFTWARE COMMANDS 


There are five port addresses which, when written 
to, command certain operations to be performed by 
the 82380 DMA Controller. The data written to these 
locations is not of consequence, writing to the loca- 
tion is all that is necessary to command the 82380 to 
perform the indicated function. Following are de- 
scriptions of the command function. 
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Clear Byte Pointer Flip-Flop—location OOOCH 


Resets the Byte Pointer Flip-Flop. This command 
should be performed at the beginning of any access 
to the channel registers in order to be assured of 
beginning at a predictable place in the register pro- 
gramming sequence. 


Master Clear—location 0O0OODH 


All DMA functions are set to their default states. This 
command is the equivalent of a hardware reset to 
the DMA Controller. Functions other than those in 
the DMA Controller section of the 82380 are not af- 
fected by this command. 


Clear Mask 


Register —Channels 0-3—location 0OOOEH 


Channels 4—7—location OOCEH 


Channel Registers 


Channel Register Name 


Channel 0 Target Address 


Byte Count 


Requester Address 


Channel 1 Target Address 


Byte Count 


Requester Address 
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This command simultaneously clears the Mask Bits 


of all channels in the addressed group, enabling all 
of the channels in the group. 


Clear TC Interrupt Request—location 001EH 


This command resets the Terminal Count Interrupt 
Request Flip-Flop. It is provided to allow the pro- 
gram which made a software DMA request to ac- 
knowledge that it has responded to the expiration of 
the requested channel(s). 


3.7 Register Definitions 


The following diagrams outline the bit definitions and 
functions of the 82380 DMA Controller’s Status and 
Control Registers. The function and programming of 
the registers is covered in the previous section on 
DMA Controller Programming. An entry of ‘X’ as a bit 
value indicates “don’t care.” 


(Read Current, Write Base) 


Address Byte Bits 
(Hex) Pointer Accessed 


oO 


1 
X 
0 
0 
; 
0 
0 
, 
0 
, 
0 
1 
Xx 
0 
0 
, 
0 
0 
, 
0 
, 
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(Read Current, Write Base) 
Register Name Address Byte Bits 
(Hex) Pointer Accessed 


Channel Registers 
Channel 


Channel 2 Target Address 


Byte Count 


Requester Address 


Channel 3 Target Address 


Byte Count 


Requester Address 


Channel 4 Target Address 


Byte Count 


Requester Address 


Channel 5 Target Address 


Byte Count 


Requester Address 


0 
1 
Xx 
0 
0 
1 
0 
0 
1 
0 
1 
0 
1 
Xx 
0 
0 
1 
0 
0 
1 
0 
1 
0 
1 
Xx 
0: 
0 
1 
0 
0 
1 
0 
1 
0 
1 
Xx 
0 
0 
1 
0 
0 
1 
0 
1 
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(Read Current, Write Base) 
Register Name Address Byte 
(Hex) Pointer 


Channel Registers 
Channel 


Channel 6 Target Address 


Byte Count 


Requester Address 


Channel 7 Target Address 


Byte Count 


Requester Address 


=—-oOoO}-0O00- 0O0O x + 0o0/,(-? 0O0O+?00?00xXK +O 


Command Register | (Write Only) 


Port Address—Channels 0-—3—0008H 
Channels 4-—7—00C8H 


Di = DO 


GROUP MASK 
0 =ENABLE CHANNELS 
1 =DISABLE CHANNELS 
PRIORITY 
0 = FIXED PRIORITY 
1 = ROTATING PRIORITY 


Bits 
Accessed 
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Command Register II (Write Only) 


Port Addresses—Channels 0—3—-001AH 
Channels 4—7—OO0DAH 


D1 DO 


popfofofofm] rn] es] os| 


DREQn SAMPLING 

EOP# SAMPLING 
0 = ASYNCHRONOUS 
1 = SYNCHRONOUS 


LOW PRIORITY LEVEL SET 
OO=CHANNEL  0(4) LOWEST 
O1=CHANNEL  1(5) LOWEST 
10=CHANNEL  2(6) LOWEST 
11= CHANNEL  3(7) LOWEST 
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Mode Register | (Write Only) 


Port Addresses—Channels 0-—3—000BH 
Channels 4—7—O00CBH 


CHANNEL SELECT 
00 = CHANNEL 
01 = CHANNEL 
10 = CHANNEL 
11 = CHANNEL 


TRANSFER TYPE 
00 = VERIFY 
01 = WRITE 
10 = READ 


11 =ILLEGAL 
XX IF IN CASCADE MODE 


AUTO=INITIALIZE 
O=DISABLE, 1 = ENABLE 


TARGET ICR EMENT /DECEEMENT. 
O =INCREMENT TARGET 
1 = DECREMENT TARGET * 
X IF TARGET HOLD ENABLED 


DATA Meee tye MODE 
00 = DEMAND MODE 


01= SINGLE TRANSFER MODE 
10 =BLOCK MODE 


11 =CASCADE MODE 
290128-39 


* Target and Requester DECREMENT is allowed only for byte transfers. 


Mode Register II (Write Only) 


Port Addresses—Channels 0-—3—001BH 
Channels 4—-7—O0DBH 


D7 D6 DS D4 D3 D2 D1 


eT=[ol~[e[mpalo. 
Las CHANNEL SELECT 


SEE MODE REGISTER I 


TARGET HOLD 
O = INCREMENT/DECREMENT 
1 =HOLD 


REQUESTER INCREMENT 
O = INCREMENT 
1 = DECREMENT * 


X IF REQUESTER HOLD ENABLED 


tao HOLD 
= INCREMENT/DECREMENT 


2 = HOLD 


TARGET DEVICE TYPE 
0 = MEMORY 
1 =INPUT/OUTPUT 


REQUESTER DEVICE TYPE 
0 = MEMORY 
1 = INPUT/OUTPUT 


TRANSFER CYCLES 
O=ON NE-CYCLE (FLY=BY) 
1 =TWO=CYCLE 
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* Target and Requester DECREMENT is allowed only for byte transfers. ;' 
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Software Request Register (Read/Write) 


Port Addresses—Channels 0—3—0009H 
Channels 4—7—00C9H 


Write Format: Software DMA Service Request 


D7 D6 D5 D4 D3 D2 D1 DO 
ESE EES RAED 


CHANNEL SELECT 
SEE MODE REGISTER I 


REQUEST SERVICE 
O = REMOVE REQUEST 


1 =ASSERT REQUEST 
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Read Format: Software Requests Pending 


D7 D6 DS D4 D3 D2 DI DO 1 =REQUEST PENDING 
x | x | x [ x [srs] sro] sri] sro 
CHANNEL 0(4) REQUEST 
CHANNEL 1 (5) REQUEST 


CHANNEL 2(6) REQUEST 


CHANNEL 3(7) REQUEST 
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Mask Set/Reset Register Individual Channel Mask (Write Only) 


Port Addresses—Channels 0-—3—000AH 
Channels 4—7—O0CAH 


CHANNEL SELECT 
SEE MODE REGISTER I 


MASK SET BIT 
O =CLEAR MASK (ENABLE) 


1 = SET MASK (DISABLE) 
290128-43 
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Mask Read/Write Register Group Channel Mask (Read/Write) 


Port Addresses—Channels 0—3—O00FH 
Channels 4—7—O0OCFH 


DO 


CHANNEL 0 (4) MASK BIT 


CHANNEL 1 (5) MASK BIT 
CHANNEL 2(6) MASK BIT 
CHANNEL 3(7) MASK BIT 


MASK BIT =0 —CHANNEL ENABLE 
= 1 —CHANNEL DISABLE 
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Status Register Channel Process Status (Read Only) 


Port Addresses—Channels 0—3—0008H 
Channels 4—7—00C8H 


a 


CHANNEL 0(4) EXPIRED 1=EXPIRED 
CHANNEL 1 (5) EXPIRED 
CHANNEL 2(6) EXPIRED 
CHANNEL 3(7) EXPIRED 


CHANNEL 0(4) REQUEST 1= REQUEST 
CHANNEL 1(5) REQUEST — PENDING 
CHANNEL 2(6) REQUEST 


CHANNEL 3(7) REQUEST 
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Bus Size Register Set Data Path Width (Write Only) 


‘Port Addresses—Channels 0-3—0018H 
Channels 4-—7—00D8H 


CHANNEL SELECT 
SEE MODE REGISTER I 


TARGET BUS SIZE 
REQUESTER BUS. SIZE 
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Bus Size Encoding: 
00 = Reserved by Intel 10 = 16-bit Bus 
01 = 32-bit Bus 11 = 8-bit Bus 
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Chaining Register (Read/Write) 


Port Addresses—Channels 0-—3—0019H 
Channels 4—7—00D9H 


- Write Format: Set Chaining Mode 


D7 D6 ODS D4 D3 D2 


DO 


ESRI KARA REESE 


Read Format: Channel Interrupt Status 


D7 D6 DS D4 DS OD2 


CHANNEL SELECT 
SEE MODE REGISTER LI 


CHAINING ENABLE BIT 
0 = DISABLE CHAINING MODE 


= ENA HAINING MOD 
1 =ENABLE C 3 290128-47 


DO 
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3.8 8237A Compatibility 


The register arrangement of the 82380 DMA Con- 
troller is a superset of the 8237A DMA Controller. 
Functionally the 82380 DMA Controller is very differ- 
ent from the 8237A. Most of the functions of the 
8237A are performed also by the 82380. The follow- 
ing discussion points out the differences between 
the 8237A and the 82380. 


The 8237A is limited to transfers between I/O and 
memory only (except in one special case, where two 
channels can be used to perform memory-to-memo- 
ry transfers). The 82380 DMA Controller can transfer 
between any combination of memory and I/O. Sev- 
eral other features of the 8237A are enhanced or 
expanded in the 82380 and other features are add- 
ed. 


The 8237A is an 8-bit only DMA device. For pro- 
gramming compatibility, all of the 8-bit registers are 
preserved in the 82380. The 82380 is programmed 
via 8-bit registers. The address registers in the 
82380 are 32-bit registers in order to support the 
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CHANNEL 0(4) BASE EMPTY 
CHANNEL 1 (5) BASE EMPTY 
CHANNEL 2(6) BASE EMPTY 


CHANNEL 3(7) BASE EMPTY 
290128-48 


80386’s 32-bit bus. The Byte Count Registers are 
24-bit registers, allowing support of larger data 
blocks than possible with the 8237A. 


All of the 8237A’s operating modes are supported 
by the 82380 (except the cumbersome two-channel 
memory-to-memory transfer). The 82380 performs 
memory-to-memory transfers using only one chan- 
nel. The 82380 has the added features of buffer 
pipelining (Buffer Chaining Process), programmable 
priority levels, and Byte Assembly. 


The 82380 also adds the feature of address regis- 
ters for both destination and source. These address- 
es may be incremented, decremented, or held con- 
stant, as required by the application of the individual 
channel. This allows any combination of destination 
and source device. 


Each DMA channel has associated with it a Target 
and a Requester. In the 8237A, the Target is the 
device which can be accessed by the address regis- 
ter, the Requester is the device which is accessed 
by the DMA Acknowledge signals and must be an 
I/O device. 
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4.0 PROGRAMMABLE INTERRUPT 
CONTROLLER (PIC) 


4.1 Functional Description 


The 82380 Programmable Interrupt Controller (PIC) 
consists of three enhanced 82C59A Interrupt Con- 
tollers. These three controllers together provide 15 
external and 5 internal interrupt request inputs. Each 
external request input can be cascaded with an ad- 
ditional 82C59A slave collector. This scheme allows 
the 82380 to support a maximum of 120 (15 x 8) 
external interrupt request inputs. 


Following one or more interrupt requests, the 82380 
PIC issues an interrupt signal to the 80386. When 
the 80386 host processor responds with an interrupt 
acknowledge signal, the PIC will arbitrate between 
the pending interrupt requests and place the inter- 
rupt vector associated with the highest priority pend- 
ing request on the data bus. 


The major enhancement in.the 82380 PIC over the 
82C59A is that each of the interrupt request inputs 


IRQ16# 
IRQ17# 
IRQ18# 
IRQ19# 
IRQ204 
IRQ21# 
IRQ22# 
IRQ23#4 


TOUTO# (IRQ8¥) 
DREQ4/IRQ9# 


IRQ15¢ 


Voc TOUT3# (IRQO#) 
CHAINING (IRQ1#) 
Rep ICW2 (IRQ 1.54) 


(IRQ2#) 


TOUT2#/IRO34 


WEAK PULL-UP SW Req TC (IRQ4#) 


NOT USED 
NOT USED 


DEFAULT (IRQ7#) 


NOTE: 
Masking IRQ1.5# also masks IRQ2# 
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can be individually programmed with its own inter- 
rupt vector, allowing more flexibility in interrupt vec- 
tor mapping. 


4.1.1 INTERNAL BLOCK DIAGRAM 


The block diagram of the 82380 Programmable In- 
terrupt Controller is shown in Figure 4-1. Internally, 
the PIC consists of three 82C59A banks: A, B and C. 
The three banks are cascaded to one another: C is 
cascaded to B, B is cascaded to A.- The INT output 
of Bank A is used externally to interrupt the 80386. 


Bank A has nine interrupt request inputs (two are 
unused), and Banks B and C have eight interrupt 
request inputs. Of the fifteen external interrupt re- 
quest inputs, two are shared by other functions. Spe- 
cifically, the Interrupt Request 3 input (IRQ3#) can 
be used as the Timer 2 output (TOUT2#). This pin 
can be used in three different ways: IRQ3# input 
only, TOUT2# output only, or using TOUT2# to 
generate an IRQ3# interrupt request. Also, the In- 
terrupt Request 9 input (IRQ 9#) can be used as 
DMA Request 4 input (DREQ4). Typically, only 
IRQ9# or DREQ4 can be used at a time. 


INTERRUPT 
BANK 
C 


NOON PRWN OO 


INTERRUPT 
BANK 
B 


0 
1 

2 
5 
4 
5 
6 
7 


5 
INTERRUPT 
BANK INT 
A (OUTPUT) 


n= 6 


NOMS W 
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Figure 4-1. Interrupt Controller Block Diagram 
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4.1.2 INTERRUPT CONTROLLER BANKS 


All three banks are identical, with the exception of 
the IRQ1.5 on Bank A. Therefore, only one bank will 
be discussed. In the 82380 PIC, all external requests 
can be cascaded into and each interrupt controller 
bank behaves like a master. As compared to the 
82C59A, the enhancements in the banks are: 


— All interrupt vectors are individually programma- 
ble. (In the 82C59A, the vectors must be pro- 
grammed in eight consecutive interrupt vector lo- 
cations.) 


‘Intel. 


— The cascade address is provided on the Data 
Bus (DO-D7). (In the 82C59A, three dedicated 
control signals (CASO, CAS1, CAS2) are used for 
master/slave cascading.) 


The block diagram of a bank is shown in Figure 4-2. 
As can be seen from this figure, the bank consists of 
six major blocks: the Interrupt Request Register 
(IRR), the In-Service Register (ISR), the Interrupt 
Mask Register (IMR), the Priority Resolver (PR), the 
Vector Register (VR), and the Control Logic. The 
functional description of each block follows. 


INT. MASK REG. 


INTERRUPT 
TO HOST 


PRIORITY 
RESOLVER 
& 
CONTROL 
LOGIC 


DATA (0-7) DATA (0-7) 


INDIVIDUALLY PROGRAMMABLE 
VECTOR BANK 


82380 ENHANCEMENT OVER THE 82C59A 
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Figure 4-2. Interrupt Bank Block Diagram 
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INTERRUPT REQUEST (IRR) AND IN-SERVICE 
REGISTER (ISR) 


The interrupts at the Interrupt Request (IRQ) input 
lines are handled by two registers in cascade, the 
Interrupt Request Register (IRR) and the In-Service 
Register (ISR). The IRR is used to store all interrupt 
levels which are requesting service; and the ISR is 
used to store all interrupt levels which are being 
serviced. 


PRIORITY RESOLVER (PR) 


This logic block determines the priorities of the bits 
set in the IRR. The highest priority is selected and 
strobed into the corresponding bit of the ISR during 
an Interrupt Acknowledge cycle. 


INTERRUPT MASK REGISTER (IMR) 


The IMR stores the bits which mask the interrupt 
lines to be masked (disabled). The IMR operates on 
the IRR. Masking of a higher priority input will not 
affect the interrupt request lines of lower priority. 


VECTOR REGISTERS (VR) 


This block contains a set of Vector Registers, one 
for each interrupt request line, to store the pre-pro- 
grammed interrupt vector number. The correspond- 
ing vector number will be driven onto the Data Bus 
of the 82380 during the Interrupt Acknowledge cy- 
Cle. 


CONTROL LOGIC 


The Control Logic coordinates the overall operations 
of the other internal blocks within the same bank. 
This logic will drive the Interrupt Output signal (INT) 
HIGH when one or more unmasked interrupt inputs 
are active (LOW). The INT output signal goes direct- 
ly to the 80386 (in Bank A) or to another bank to 
which this bank is cascaded (see Figure 4-1). Also, 
this logic will recognize an Interrupt Acknowledge 
cycle (via M/IO#, D/C# and W/R# signals). During 
this bus cycle, the Control Logic will enable the cor- 
responding Vector Register to drive the interrupt 
vector onto the Data Bus. 


In Bank A, the Control Logic is also responsible for 
handling the special |CW2 interrupt request input 
(IRQ1.5#). 
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4.2 Interface Signals 


4.2.1 INTERRUPT INPUTS 


There are 15 external Interrupt Request inputs and 5 
internal Interrupt Requests. The external request in- 
puts are: IRQ3#, IRQ9#, IRQ11# to IRQ23#. They 
are shown in bold arrows in Figure 4-1. All IRQ in- 
puts are active LOW and they can be programmed 


‘(via a control bit in the Initialization Command Word 


1 (ICW1)) to be either edge-triggered or level-trig- 
gered. In order to be recognized as a valid interrupt 
request, the interrupt input must be active (LOW) un- 
til the first INTA# cycle (see Bus Functional De- 
scription). 


Note that all 15 external Interrupt Request inputs 
have weak internal pull-up resistors. 


As mentioned earlier, an 82C59A can be cascaded 
to each external interrupt input to expand the inter- 
rupt capacity to a maximum of 120 levels. Also, two 
of the interrupt inputs are dual functions: IRQ3# can 
be used as Timer 2 output (TOUT2#) and IRQ9# 
can be used as DREQ4 input. IRQ3# is a bidirec- 
tional dual function pin. This interrupt request input is 
wired-OR with the output of Timer 2 (TOUT2#). If 
only IRQ3# function is to be used, Timer 2 should 
be programmed so that OUT2 is LOW. Note that 


_ TOUT2# can also be used to generate an interrupt 


request to IRQ3# input. 


The five internal interrupt requests serve special 
system functions. They are shown in Table 4-1. The 
following paragraphs describe these interrupts. 


Table 4-1. 82380 Internal Interrupt Requests 


Interrupt Request Interrupt Source 


IRQ0 # 


Timer 3 Output (TOUT3 #) 
Timer 0 Output (TOUTO #) 
DMA Chaining Request 
DMA Terminal Count 
ICW2 Written 


IRQ8# 
IRQ1 # 
IRQ4# 
IRQ1.5# 


TIMER 0 AND TIMER 3 INTERRUPT REQUESTS 
[IRQ0 #] 


IRQ8# and IRQO# interrupt requests are initiated 
by the output of Timers 0 and 3, respectively. Each 
of these requests is generated by an edge-detector 
flip-flop. The flip-flops are activated by the following 
conditions: / 
Set— Rising edge of timer output (TOUT); 


Clear— Interrupt acknowledge for this request; 
OR Request is masked (disabled); OR 
Hardware Reset. 
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CHAINING AND TERMINAL COUNT INTERRUPTS 
[IRQ1 #¥] 


These interrupt requests are generated by the 
82380 DMA Controller. The chaining request 
(IRQ1#) indicates that the DMA Base Register is 
not loaded. The Terminal Count request (IRQ4 #) in- 
dicates that a software DMA request was cleared. 


ICW2 INTERRUPT REQUEST [IRQ1.5#] 


Whenever an Initialization Control Word 2 (ICW2) is 
written to a Bank, a special |CW2 interrupt request is 
generated. The interrupt will be cleared when the 
newly programmed |CW2 Register is read. This in- 
terrupt request is in Bank A at level 1.5. This inter- 
rupt request is internally ORed with the Cascaded 
Request from Bank B and is always assigned a high- 
er priority than the Cascaded Request. 


This special interrupt is provided to support compati- 
bility with the original 82C59A. A detailed description 
of this interrupt is discussed in the Programming 
section. 

DEFAULT INTERRUPT [IRQ7 #] 


During an Interrupt Acknowledge cycle, if there is no 
active pending request, the PIC will automatically 


PREVIOUS INTERRUPT ACKNOWLEDGE 
CYCLE CYCLE1 (5 WAIT STATES) 


T2 TL.) V2. Ave te | Be re. Te 
CLK 
M/lO# 
D/c# XXXX) 


ete Ba A 


Ti 


AAAS 
ie ra aaa 
DO - D7 


NOTE: 


IDLE 
(4 BUS STATES) 


XOX 


aaaudanane 
AXA 


= M 
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generate a default vector. This vector corresponds 
to the IRQ7# vector in Bank A. 


4.2.2 INTERRUPT OUTPUT (INT) 


The INT output pin is taken directly from bank A. 
This signal should be tied to the Maskable Interrupt 
Request (INTR) of the 80386. When this signal is 
active (HIGH), it indicates that one or more internal/ 
external interrupt requests are pending. The 80386 
is expected to respond with an interrupt acknowl- 
edge cycle. 


4.3 Bus Functional Description 


The INT output of bank A will be activated as a result 
of any unmasked interrupt request. This may be a 
non-cascaded or cascaded request. After the PIC 
has driven the INT signal HIGH, 80386 will respond 
by performing two interrupt acknowledge cycles. 
The timing diagram in Figure 4-3 shows a typical in- 
terrupt acknowledge process between the 82380 
and the 80386 CPU. 


INTERRUPT ACKNOWLEDGE 
CYCLE2 (5 WAIT STATES) 


12.4 72.) 12 | fre: 112 
V/V 
Keuaae AXX 


Ti Ti 11 


SEE NOTE 
| | 
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What is actually driven on the Data Bus depends on if the current interrupt request is a Slave Request. 


INTA Cycle 1 
NON-SLAVE REQUEST OOH 
Slave Address 


SLAVE REQUEST 


*Slave will place a vector at this time. 


INTA Cycle 2 
Vector 
High Impedance* 


Figure 4-3. Interrupt Acknowledge Cycle 
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After activating the INT signal, the 82380 monitors 
the status lines (M/IO#, D/C#, W/R#) and waits 
for the 80386 to initiate the first interrupt acknowl- 
edge cycle. In the 80386 environment, two succes- 
sive interrupt acknowledge cycles (INTA) marked by 
M/IO# = LOW, D/C# = LOW, and W/R# = 
LOW are performed. During the first INTA cycle, the 
PIC will determine the highest priority request. As- 
suming this interrupt input has no external Slave 
Controller cascaded to it, the 82380 will drive the 
Data Bus with OOH in the first INTA cycle. During the 
second INTA cycle, the 82380 PIC will drive the 
Data Bus with the corresponding preprogrammed in- 
terrupt vector. 


If the PIC determines (from the |CW3) that this inter- 
rupt input has an external Slave Controller cascaded 
to it, it will drive the Data Bus with the specific Slave 
Cascade Address (instead of 00H) during the first 
INTA cycle. This Slave Cascade Address is the pre- 
programmed content in the corresponding Vector 
Register. This means that no Slave Address should 
be chosen to be OOH. Note that the Slave Address 
and Interrupt Vector are different interpretations of 
the same thing. They are both the contents of the 
programmable Vector Register. During the second 
INTA cycle, the Data Bus will be floated so that the 
external Slave Controller can drive its interrupt vec- 
tor on the bus. Since the Slave Interrupt Controller 
resides on the system bus, bus transceiver enable 
and direction control logic must take this into consid- 
eration. 


In order to have a successful interrupt service, the 
interrupt request input must be held active (LOW) 
until the beginning of the first interrupt acknowledge 
cycle. If there is no pending interrupt request when 
the first INTA cycle is generated, the PIC will gener- 
ate a default vector, which is the IRQ7 vector (bank 
A level 7). 


According to the Bus Cycle definition of the 80386, 
there will be four Bus Idle States between the two 
interrupt acknowledge cycles. These idle bus cycles 
will be initiated by the 80386. Also, during each inter- 
rupt acknowledge cycle, the internal Wait State Gen- 
erator of the 82380 will automatically generate the 
required number of wait states for internal delays. 


4.4 Mode of Operation 


A variety of modes and commands are available for 
controlling the 82380 PIC. All of them are program- 
mable; that is, they may be changed dynamically un- 
der software control. In fact, each bank can be pro- 
grammed individually to operate in different modes. 
With these modes and commands, many possible 
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configurations are conceivable, giving the user 
enough versatility for almost any interrupt controlled 
application. 


This section is not intended to show how the 82380 
PIC can be programmed. Rather, it describes the 
operation in different modes. 


4.4.1 END-OF-INTERRUPT 


Upon completion of an interrupt service routine, the 
interrupted bank needs to be notified so its ISR can 
be updated. This allows the PIC to keep track of 
which interrupt levels are in the process of being 
serviced and their relative priorities. Three different 
End-Of-Interrupt (EOI) formats are available. They 
are: Non-Specific EO! Command, Specific EO! Com- 
mand, and Automatic EOI Mode. Selection of which 
EOI to use is dependent upon the interrupt opera- 
tions the user wishes to perform. 


lf the 82380 is NOT programmed in the Automatic 
EOI Mode, an EOI command must be issued by the 
80386 to the specific 82380 PIC Controller Bank. 
Also, if this controller bank is cascaded to another 
internal bank, an EOI command must also be sent to 
the bank to which this bank is cascaded. For exam- 
ple, if an interrupt request of Bank C in the 82380 
PIC is serviced, an EOI should be written into Bank 
C, Bank B and Bank A. If the request comes from an 
external interrupt controller cascaded to Bank C, 
then an EOI should be written into the external con- 
troller as well. 


NON-SPECIFIC EOI COMMAND 


A Non-Specific EO! command sent from the 80386 
lets the 82380 PIC bank know when a service rou- 
tine has been completed, without specification of its 
exact interrupt level. The respective interrupt bank 
automatically determines the interrupt level and re- 
sets the correct bit in the ISR. 


To take advantage of the Non-Specific EOI, the in- 
terrupt bank must be in a mode of operation in which 
it can predetermine its in-service routine levels. For 
this reason, the Non-Specific EO| command should 
only be used when the most recent level acknowl- 
edged and serviced is always the highest priority lev- 
el (i.e., in the Fully Nested Mode structure to be de- 
scribed below). When the interrupt bank receives a 
Non-Specific EOI command, it simply resets the 
highest priority ISR bit to indicate that the highest 
priority routine in service is finished. 


Special consideration should be taken when decid- 


ing to use the Non-Specific EO| command. Here are 
two operating conditions in which it is best NOT 
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used since the Fully Nested Mode structure will be 
destroyed: 


— Using the Set Priority command within an inter- 
rupt service routine. 


— Using a Special Mask Mode. 


These conditions are covered in more detail in their 
own sections, but are listed here for reference. 


SPECIFIC EO! COMMAND 


Unlike a Non-Specific EO| command which automat- 
ically resets the highest priority ISR bit, a Specific 
EOI command specifies an exact ISR bit to be reset. 
Any one of the IRQ levels of an interrupt bank can 
be specified in the command. 


The Specific EOI command is needed to reset the 
ISR bit of a completed service routine whenever the 
interrupt bank is not able to automatically determine 
it. The Specific EO! command can be used in all 
conditions of operation, including those that prohibit 
Non-Specific EOI! command usage mentioned 
above. 


AUTOMATIC EO! MODE 


When programmed in the Automatic EO! Mode, the 
80386 no longer needs to issue a command to notify 
the interrupt bank it has completed an interrupt rou- 
tine. The interrupt bank accomplishes this by per- 
forming a Non-Specific EO! automatically at the end 
of the second INTA cycle. 


Special consideration should be taken when decid- 
ing to use the Automatic EOI Mode because it may 
disturb the Fully Nested Mode structure. In the Auto- 
matic EOI Mode, the ISR bit of a routine in service is 
reset right after it is acknowledged, thus leaving no 
designation in the ISR that a service routine is being 
executed. If any interrupt request within the same 
bank occurs during this time and interrupts are en- 
abled, it will get serviced regardless of its priority. 
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Therefore, when using this mode, the 80386 should 
keep its interrupt request input disabled during exe- 
cution of a service routine. By doing this, higher pri- 
ority interrupt levels will be serviced only after the 
completion of a routine in service. This guideline re- 
stores the Fully Nested Mode structure. However, in 
this scheme, a routine in service cannot be interrupt- 
ed since the host’s interrupt request input is dis- 
abled. 


4.4.2 INTERRUPT PRIORITIES 


The 82380 PIC provides various methods for arrang- 
ing the interrupt priorities of the interrupt request in- 
puts to suit different applications. The following sub- 
sections explain these methods in detail. 


4.4.2.1 Fully Nested Mode 


The Fully Nested Mode of operation is a general pur- 
pose priority mode. This mode supports a multi-level 
interrupt structure in which all of the Interrupt Re- 
quest (IRQ) inputs within one bank are arranged 
from highest to lowest. 


Unless otherwise programmed, the Fully Nested 
Mode is entered by default upon initialization. At this 
time, |IRQ0# is assigned the highest priority (priority 
= 0) and IRQ7# the lowest (priority = 7). This de- 
fault priority can be changed, as will be explained 
later in the Rotating Priority Mode. 


When an interrupt is acknowledged, the highest pri- 
ority request is determined from the Interrupt Re- 
quest Register (IRR) and its vector is placed on the 
bus. In addition, the corresponding bit in the In-Serv- 
ice Register (ISR) is set to designate the routine in 
service. This ISR bit will remain set until the 80386 
issues an End Of Interrupt (EOI) command immedi- 
ately before returning from the service routine; or 
alternately, if the Automatic End Of Interrupt (AEOl) 
bit is set, the ISR bit will be reset at the end of the 
second INTA cycle. 
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While the ISR bit is set, all further interrupts of the 
same or lower priority are inhibited. Higher level in- 
terrupts can still generate an interrupt, which will be 
acknowledged only if the 80386 internal interrupt en- 


able flip-flop has been re-enabled (through software 
inside the current service routine). 


4.4.2.2 Automatic Rotation—Equal Priority 
Devices 


Automatic rotation of priorities serves in applications 
where the interrupting devices are of equal priority 
within an interrupt bank. In this kind of environment, 
once a device is serviced, all other equal priority pe- 
ripherals should be given a chance to be serviced 
before the original device is serviced again. This is 
accomplished by automatically assigning a device 
the lowest priority after being serviced. Thus, in the 
worst case, the device would have to wait until all 
other peripherals connected to the same bank are 
serviced before it is serviced again. 


There are two methods of accomplishing automatic 
rotation. One is used in conjunction with the Non- 
Specific EO] command and the other is used with 
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the Automatic EOI mode. These two methods are 
discussed below. 


ROTATE ON NON-SPECIFIC EOI COMMAND 


When the Rotate On Non-Specific EO! command is 
issued, the highest ISR bit is reset as in a normal 
Non-Specific EOI command. However, after it is re- 
set, the corresponding Interrupt Request (IRQ) level 
is assigned the lowest priority. Other IRQ priorities 
rotate to conform to the Fully Nested Mode based 
on the newly assigned low priority. 


Figure 4-4 shows how the Rotate On Non-Specific 
EOI command affects the interrupt priorities. As- 
sume the IRQ priorities were assigned with IRQO the 
highest and IRQ7 the lowest. IRQ6 and IRQ4 are 
already in service but neither is completed. Being 
the higher priority routine, IRQ4 is necessarily the 
routine being executed. During the IRQ4 routine, a 
rotate on Non-Specific EOI command is executed. 
When this happens, Bit 4 in the ISR is reset. IRQ4 
then becomes the lowest priority and IRQ5 becomes 
the highest. 
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Figure 4-4. Rotate On Non-Specific EOl Command 
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ROTATE ON AUTOMATIC EO! MODE 


The Rotate On Automatic EOI Mode works much 
like the Rotate On Non-Specific EO!| Command. The 
main difference is that priority rotation is done auto- 
matically after the second INTA cycle of an interrupt 
request. To enter or exit this mode, a Rotate-On-Au- 
tomatic-EOI Set Command and Rotate-On-Automat- 
ic-EOI Clear Command is provided. After this mode 
is entered, no other commands are needed as in the 
normal Automatic EOI Mode. However, it must be 
noted again that when using any form of the Auto- 
matic EOI Mode, special consideration should be 
taken. The guideline presented in the Automatic EO! 
Mode also applies here. 


4.4.2.3 Specific Rotation—Specific Priority 


Specific rotation gives the user versatile capabilities 
in interrupt controlled operations. It serves in those 
applications in which a specific device’s interrupt pri- 
ority must be altered. As opposed to Automatic Ro- 
tation which will automatically set priorities after 
each interrupt request is serviced, specific rotation is 
completely user controlled. That is, the user selects 
which interrupt level is to receive the lowest or the 
highest priority. This can be done during the main 
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program or within interrupt routines. Two specific ro- 
tation commands are available to the user: Set Prior- 


ity Command and Rotate On Specific EO! Com- 
mand. 


SET PRIORITY COMMAND 


The Set Priority Command allows the programmer to 
assign an IRQ level the lowest priority. All other in- 
terrupt levels will conform to the Fully Nested Mode 
based on the newly assigned low priority. 


ROTATE ON SPECIFIC EO! COMMAND 


The Rotate On Specific EO! Command is literally a 
combination of the Set Priority Command and the 
Specific EO! Command. Like the Set Priority Com- 
mand, a specified IRQ level is assigned lowest priori- 
ty. Like the Specific EO| Command, a specified level 
will be reset in the ISR. Thus, this command accom- 
plishes both tasks in one single command. 


4.4.2.4 Interrupt Priority Mode Summary 


In order to simplify understanding the many modes 
of interrupt priority, Table 4-2 is provided to bring out 
their summary of operations. 


Table 4-2. interrupt Priority Mode Summary 


Fully-Nested Mode IRQO #-Highest Priority 
IRQ7 #-Lowest Priority 


Automatic Rotation Interrupt level just serviced 
(Equal Priority Devices) |is the lowest priority. Other 
priorities rotate to conform 
to Fully-Nested Mode. 


User specifies the lowest 
priority level. Other priorities 
rotate to conform to Fully- 

Nested Mode. 


Specific Rotation 
(Specific Priority 
Devices) 
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Effect On Priority After EOI 
Non-Specific/Automatic 


No change in priority. Not Applicable. 
Highest ISR bit is reset. 


Highest ISR bit is reset and the 
corresponding level becomes the 
lowest priority. 


Interrupt Operation 
Priority Mode Summary 


Not Applicable. 


Not Applicable. 


As described under 
‘Operation Summary’. 
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4.4.3 INTERRUPT MASKING 
VIA INTERRUPT MASK REGISTER 


Each bank in the 82380 PIC has an Interrupt Mask 
Register (IMR) which enhances interrupt control ca- 
pabilities. This IMR allows individual IRQ masking. 
When an IRQ is masked, its interrupt request is dis- 
abled until it is utmasked. Each bit in the 8-bit IMR 
disables one interrupt channel if it is set (HIGH). Bit 
0 masks IRQO, Bit 1 masks IRQ1 and so forth. 
Masking an IRQ channel will only disable the corre- 
sponding channel and does not affect the others op- 
erations. 


The IMR acts only on the output of the IRR. That is, 
if an interrupt occurs while its IMR bit is set, this 
request is not ‘forgotten’. Even with an IRQ input 
masked, it is still possible to set the IRR. Therefore, 
when the IMR bit is reset, an interrupt request to the 
80386 will then be generated, providing that the IRQ 
request remains active. If the IRQ request is re- 
moved before the IMR is reset, the Default Interrupt 
Vector (Bank A, level 7) will be generated during the 
interrupt acknowledge cycle. 


SPECIAL MASK MODE 


In the Fully Nested Mode, all IRQ levels of lower 
priority than the routine in service are inhibited. How- 
ever, in some applications, it may be desirable to let 
a lower priority interrupt request to interrupt the rou- 
tine in service. One method to achieve this is by 
using the Special Mask Mode. Working in conjunc- 
tion with the IMR, the Special Mask Mode enables 
interrupts from all levels except the level in service. 
This is usually done inside an interrupt service rou- 
tine by masking the level that is in service and then 
issuing the Special Mask Mode Command. Once the 
Special Mask Mode is enabled, it remains in effect 
until it is disabled. 


DATA BUS 


(FROM BUS CONTROLLER) 
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4.4.4 EDGE OR LEVEL INTERRUPT 
TRIGGERING . 


Each bank in the 82380 PIC can be programmed 
independently for either edge or level sensing for the 
interrupt request signals. Recall that all IRQ inputs 
are active LOW. Therefore, in the edge triggered 
mode, an active edge is defined as an input tran- 
sition from an inactive (HIGH) to active (LOW) state. 
The interrupt input may remain active without gener- 
ating another interrupt. During level triggered mode, 
an interrupt request will be recognized by an active 
(LOW) input, and there is no need for edge detec- 
tion. However, the interrupt request must be re- 
moved before the EOI Command is issued, or the 
80386 must be disabled to prevent a second false 
interrupt from occurring. 


In either modes, the interrupt request input must be 
active (LOW) during the first INTA cycle in order to 
be recognized. Otherwise, the Default Interrupt Vec- 
tor will be generated at level 7 of Bank A. 


4.4.5 INTERRUPT CASCADING 


As mentioned previously, the 82380 allows for exter- 
nal Slave interrupt controllers to be cascaded to any 
of its external interrupt request pins. The 82380 PIC 
indicates that a external Slave Controller is to be 
serviced by putting the contents of the Vector Regis- 
ter associated with the particular request on the 
80386 Data Bus during the first INTA cycle (instead 
of OOH during a non-slave service). The external log- 
ic should latch the vector on the Data Bus using the 
INTA status signals and use it to select the external 
Slave Controller to be serviced (see Figure 4-5). The 
selected Slave will then respond to the second INTA 
cycle and place its vector on the Data Bus. This 
method requires that if external Slave Controllers 
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Figure 4-5. Slave Cascade Address Capturing 
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are used in the system, no vector should be pro- 
grammed to OOH. 


Since the external Slave Cascade Address is provid- 
ed on the Data Bus during INTA cycle 1, an external 
latch is required to capture this address for the Slave 
Controller. A simple scheme is depicted in Figure 
4-5. 


4.4.5.1 Special Fully Nested Mode 


This mode will be used where cascading is em- 
ployed and the priority is to be conserved within 
each Slave Controller. The Special Fully Nested 
Mode is similar to the ‘regular’ Fully Nested Mode 
with the following exceptions: — 


— When an interrupt request from a Slave Control- 
ler is in service, this Slave Controller is not 
locked out from the Master’s priority logic. Fur- 
ther interrupt requests from the higher priority 
logic within the Slave Controller will be recog- 
nized by the 82380 PIC and will initiate interrupts 
to the 80386. In comparing to the ‘regular’ Fully 
Nested Mode, the Slave Controller is masked out 
when its request is in service and no higher re- 
quests from the same Slave Controller can be 
serviced. 


— Before exiting the interrupt service routine, the 
software has to check whether the interrupt serv- 
iced was the only request from the Slave Con- 
troller. This is done by sending a Non-Specific 
EOI Command to the Slave Controller and then 
reading its In Service Register. If there are no 
requests in the Slave Controller, a Non-Specific 


EOI can be sent to the corresponding 82380 PIC 


bank also. Otherwise, no EOI should be sent. 


4.4.6 READING INTERRUPT STATUS 


The 82380 PIC provides several ways to read differ- 
ent status of each interrupt bank for more flexible 
interrupt control operations. These include polling 
the highest priority pending interrupt request and 
reading the contents of different interrupt status reg- 
isters. 


4.4.6.1 Poll Command 


The 82380 PIC supports status polling operations 
with the Poll Command. In a Poll Command, the 
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pending interrupt request with the highest priority 
can be determined. To use this command, the INT 
output is not used, or the 80386 interrupt is disabled. 


Service to devices is achieved by software using the 
Poll Command. 


This mode is useful if there is a routine command 
common to several levels so that the INTA se- 
quence is not needed. Another application is to use 
the Poll Command to expand the number of priority 
levels. 


Notice that the ICW2 mechanism is not supported 
for the Poll Command. However, if the Poll Com- 
mand is used, the programmable Vector Registers 
are of no concern since no INTA cycle will be gener- 
ated. 


4.4.6.2 Reading Interrupt Registers 


The contents of each interrupt register (IRR, ISR, 
and IMR) can be read to update the user’s program 
on the present status of the 82380 PIC. This can be 
a versatile tool in the decision making process of a 
service routine, giving the user more control over 
interrupt operations. 


The reading of the IRR and ISR contents can be 
performed via the Operation Control Word 3 by us- 
ing a Read Status Register Command and the con- 
tent of IMR can be read via a simple read operation 
of the register itself. 


4.5 Register Set Overview 


Each bank of the 82380 PIC consists of a set of 8-bit 
registers to control its operations. The address map 
of all the registers is shown in Table 4-3. Since all 
three register sets are identical in functions, only 
one set will be described. 


Functionally, each register set can be divided into 
five groups. They are: the four Initialization Com- 
mand Words (ICW’s), the three Operation Control 
Words (OCW’s), the Poll/Interrupt Request/In-Serv- 
ice Register, the Interrupt Mask Register, and the 
Vector Registers. A description of each group fol- 
lows. 
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Table 4-3. Interrupt Controller Register Address Map 


Write 
Read 


Write 

Read 

Read 

Read/Write 
Read/Write 
Read/Write 
Read/Write 
Read/Write 
Read/Write 
Read/Write 
Read/Write 


Write 
Read 


Write 

Read 

Read 

Read/Write 
Read/Write 
Read/Write 
Read/Write 
Read/Write 
Read/Write 
Read/Write 
Read/Write 


Write 
Read 


Write 

Read 

Read 

Read/Write 
Read/Write 
Read/Write 
Read/Write 
Read/Write 
Read/Write 
Read/Write 
Read/Write 


Bank B ICW1, OCW2, or OCW3 

Bank B Poll, Request or In-Service 
Status Register 

Bank B ICW2, ICW3, ICW4, OCW1 

Bank B Mask Register 

Bank B ICW2 

IRQ8 Vector Register 

IRQ9 Vector Register 

Reserved 

IRQ11 Vector Register 

IRQ12 Vector Register 

IRQ13 Vector Register 

IRQ14 Vector Register 

IRQ15 Vector Register 


Bank C ICW1, OCW2, or OCW3 

Bank C Poll, Request or In-Service 
Status Register 

Bank C ICW2, ICW3, ICW4, OCW1 

Bank C Mask Register 

Bank C ICW2 

IRQ16 Vector Register 

IRQ17 Vector Register 

IRQ18 Vector Register 

IRQ19 Vector Register 

IRQ20 Vector Register 

IRQ21 Vector Register 

IRQ22 Vector Register 

IRQ23 Vector Register 


Bank A ICW1, OCW2, or OCW3 

Bank A Poll, Request or In-Service 
Status Register 

Bank A ICW2, ICW3, ICW4, OCW1 

Bank A Mask Register 

Bank ICW2 

IRQO Vector Register 

IRQ1 Vector Register 

IRQ1.5 Vector Register 

IRQ3 Vector Register 

IRQ4 Vector Register 

Reserved 

Reserved 

IRQ7 Vector Register 
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4.5.1 INITIALIZATION COMMAND WORDS (ICW) 


Before normal operation can begin, the 82380 PIC 
must be brought to a known state. There are four 
8-bit Initialization Command Words in each interrupt 
bank to setup the necessary conditions and modes 
for proper operation. Except for the second common 
word (ICW2) which is a read/write register, the other 
three are write-only registers. Without going into de- 
tail of the bit definitions of the command words, the 
following subsections give a brief description of what 
functions each command word controls. 


ICW1 


The ICW1 has three major functions. They are: 


— To select between the two IRQ input triggering 
modes (edge-or level-triggered); 


— To designate whether or not the interrupt bank is 
to be used alone or in the cascade mode. If the 
cascade mode is desired, the interrupt bank will 
accept ICW3 for further cascade mode program- 
ming. Otherwise, no ICW3 will be accepted; 


— To determine whether or not ICW4 will be issued; 
that is, if any of the ICW4 operations are to be 
used. 


ICW2 


ICW2 is provided for compatibility with the 82C59A 
~ only. Its contents do not affect the operation of the 
interrupt bank in any way. Whenever the ICW2 of 
any of the three banks is written into, an interrupt is 
generated from Bank A at level 1.5. The interrupt 
request will be cleared after the ICW2 register has 
been read by the 80386. The user is expected to 
program the corresponding vector register or to use 
it as an indicator that an attempt was made to alter 
the contents. Note that each ICW2 register has dif- 
ferent addresses for read and write operations. 


ICW3 


The interrupt bank will only accept an ICW3 if pro- 
grammed in the external cascade mode (as indicat- 
ed in ICW1). ICW3 is used for specific programming 
within the cascade mode. The bits in ICW3 indicate 
which interrupt request inputs have a Slave cascad- 
ed to them. This will subsequently affect the inter- 
rupt vector generation during the interrupt acknowl- 
edge cycles as described previously. 


ICW4 
The ICW4 is accepted only if it was selected in 


ICW1. This command word register serves two func- 
tions: 
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— To select either the Automatic EOI mode or soft- 
ware EOI! mode; 


— To select if the Special Nested mode is to be 
used in conjunction with the cascade mode. 


4.5.2 OPERATION CONTROL WORDS (OCW) 


Once initialized by the ICW’s, the interrupt banks will 
be operating in the Fully Nested Mode by default 
and they are ready to accept interrupt requests. 
However, the operations of each interrupt bank can 
be further controlled or modified by the use of 
OCW’s. Three OCW’s are available for programming 
various modes and commands. Note that all OCW’s 
are 8-bit write-only registers. 


The modes and operations controlled by the OCW’s 
are: 


— Fully Nested Mode; 

— Rotating Priority Mode; 
— Special Mask Mode; 

— Poll Mode; 

— EOI Commands; 

— Read Status Commands. 


OCW1 


OCW1 is used solely for masking operations. It pro- 
vides a direct link to the Interrupt Mask Register 
(IMR). The 80386 can write to this OCW register to 
enable or disable the interrupt inputs. Reading the 
pre-programmed mask can be done via the Interrupt 
Mask Register which will be discussed shortly. 


OCW2 


OCW2 is used to select End-Of-Interrupt, Automatic 
Priority Rotation, and Specific Priority Rotation oper- 
ations. Associated commands and modes of these 
operations are selected using the different combina- 
tions of bits in OCW2. 


Specifically, the OCW2 is used to: 


— Designate an interrupt level (0-7) to be used to 
reset a specific ISR bit or to set a specific priori- 
ty. This function can be enabled or disabled; 


— Select which software EOI command (if any) is to 
be executed (i.e., Non-Specific or Specific EOI); 


— Enable one of the priority rotation operations 
(i.e., Rotate On Non-Specific EOI, Rotate On Au- 
tomatic EOI, or Rotate on Specific EOl). 


OCW3 


There are three main categories of operation that 
OCWS3 controls. That are summarized as follows: 


| 
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— To select and execute the Read Status Register 


Commands, either reading the Interrupt Request 
Register (IRR) or the In-Service Register (ISR); 


— To issue the Poll Command. The Poll Command 
will override a Read Register Command if both 
functions are enabled simultaneously; 


— To set or reset the Special Mask Mode. 


4.5.3 POLL/INTERRUPT REQUEST/IN-SERVICE 
STATUS REGISTER 


As the name implies, this 8-bit read-only register has 
multiple functions. Depending on the command is- 
sued in the OCW3, the content of this register re- 
flects the result of the command executed. For a 
Poll Command, the register read contains the binary 
code of the highest priority level requesting service 
(if any). For a Read IRR Command, the register con- 
tent will show the current pending interrupt re- 
quest(s). Finally, for a Read ISR Command, this reg- 
ister will specify all interrupt levels which are being 
serviced. , 


4.5.4 INTERRUPT MASK REGISTER (IMR) 


This is a read-only 8-bit register which, when read, 


will specify all.interrupt levels within the same bank 


that are masked. 


4.5.5 VECTOR REGISTER (VR) 


Each interrupt request input has an 8-bit read/write 
programmable vector register associated with it. The 
registers should be programmed to contain the inter- 
rupt vector for the corresponding request. The con- 
tents of the Vector Register will be placed on the 
Data Bus during the INTA cycles as described previ- 
ously. 


4.6 Programming 


Programming the 82380 PIC is accomplished by us- 
ing two types of command words: ICW’s and 
OCW’s. All modes and commands explained in the 
previous sections are programmable using the 
ICW’s and OCW’s. The ICW’s are issued from the 
80386 in a sequential format and are used to setup 
the banks in the 82380 PIC in an initial state of oper- 
ation. The OCW’s are issued as needed to vary and 
control the 82380 PIC’s operations. 


Both ICW’s and OCW’s are sent by the 80386 to the 
interrupt banks via the Data Bus. Each bank distin- 
guishes between the different ICW’s and OCW’s by 
the I/O address map, the sequence they are issued 
(ICW’s only), and by some dedicated bits among the 
ICW’s and OCW’s. 


82380 


All three interrupt banks are programmed in a similar 
way. Therefore, only a single bank will be described. 


4.6.1 INITIALIZATION (ICW) 


Before normal operation can begin, each bank must 
be initialized by programming a sequence of two to 
four bytes written into the ICW’s. 


Figure 4-6 shows the initialization flow for an inter- 
rupt bank. Both ICW1 and |CW2 must be issued for 
any form of operation. However, ICW3 and ICW4 are 
used only if designated in ICW1. Once initialized, if 
any programming changes within the ICW’s are to 
be made, the entire ICW sequence must be repro- 
grammed, not just an individual ICW. 


Note that although the ICW2’s in the 82380 PIC do 
not affect the Bank’s operation, they still must be 
programmed in order to preserve the compatibility 
with the 82C59A. The contents programmed are not 
relevant to the overall operations of the interrupt 
banks. Also, whenever one of the three ICW2’s is 
programmed, an interrupt level 1.5 in Bank A will be 
generated. This interrupt request will be cleared 
upon reading of the ICW2 registers. Since the three 
ICW2’s share the same interrupt level and the sys- 
tem may not know the origin of the interrupt, all three 
ICW2’s must be read. 


However, it is not necessary to provide an interrupt 
service routine for the |CW2 interrupt. One way to 
avoid this is as follows. At the beginning of the initial- 
ization of the interrupt banks, the 80386 interrupt 
should be disabled. After each ICW2 register write 
operation is performed during the initialization, the 


‘corresponding I|CW2 register is read. This read oper- 


ation will clear the interrupt request of the 82380. At 
the end of the initialization, the 80386 interrupt is re- 
enabled. With this method, the 80386 will not detect 
the ICW2 interrupt request, thus eliminating the need 
of an interrupt service routine. 


Certain internal setup conditions occur automatically 
within the interrupt bank after the first ICW (ICW1) 
has been issued. They are: 


— The edge sensitive circuit is reset, which means 
that following initialization, an interrupt request 
input must make a HIGH-to-LOW transition to 
generate an interrupt; 


— The Interrupt Mask Register (IMR) is cleared; 
that is, all interrupt inputs are enabled; 


— IRQ7 input of each bank is assigned priority 7 
(lowest); 


— Special Mask Mode is cleared and Status Read 
is set to IRR; 


— If no ICW4 is needed, then no Automatic-EO! is 
selected. 
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(ICW2 INTERRUPT GENERATED) 


(TO SET BIT 'D2’ FOR INTERNAL CASCADE 
BANK, OR EXTERNAL CASCADE MODE.) 


NO (IC4 =0) 


YES (iC4 = 1) 


READ 1CW2 REGISTERS FOR ALL BANKS, 
AFTER ALL BANKS ARE INITIALIZED. 


ENABLE INTERRUPT 


READY TO ACCEPT 
INTERRUPT REQUESTS 


*ICW2 vector address must be programmed now. 
Other vector addresses may be programmed via ICW2 interrupt service routine. 
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Figure 4-6. Initialization Sequence 


4.6.2 VECTOR REGISTERS (VR) 


Each interrupt request input has a separate Vector 
Register. These Vector Registers are used to store 
the pre-programmed vector number corresponding 
to their interrupt sources. In order to guarantee prop- 
er interrupt handling, all Vector Registers must be 
programmed with the predefined vector numbers. 
Since an interrupt request will be generated whenev- 
er an ICW2 is written during the initialization se- 
quence, it is important that the Vector Register of 
IRQ1.5 in Bank A should be initialized and the inter- 
rupt service routine of this vector is set up before the 
ICW’s are written. 


1-528 


4.6.3 OPERATION CONTROL WORDS (OCW) 


After the ICW’s are programmed, the operations of 
each interrupt controller bank can be changed by 
writing into the OCW’s as explained before. There is 
no special programming sequence required for the 
OCW’s. Any OCW may be written at any time in or- 
der to change the mode of or to perform certain op- 
erations on the interrupt banks. 


4.6.3.1 Read Status and Poll Commands (OCW3) 


Since the reading of IRR and ISR status as well as 
the result of a Poll Command are available on the 


co 
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same read-only Status Register, a special Read 
Status/Poll Command must be issued before the 
Poll/Interrupt Request/In-Service Status Register is 
read. This command can be specified by writing the 
required control word into OCW3. As mentioned ear- 
lier, if both the Poll Command and the Status Read 
Command are enabled simultaneously, the Poll 
Command will override the Status Read. That is, af- 
ter the command execution, the Status Register will 
contain the result of the Poll Command. 


Note that for reading IRR and ISR, there is no need 
to issue a Read Status Command to the OCW3 ev- 
ery time the IRR or ISR is to be read. Once a Read 


4.7 Register Bit Definition 


INITIALIZATION COMMAND WORD 1 (iICW1) 


INITIALIZATION COMMAND WORD 2 (iCW2) 


07 | v6 } os | v4 | os | 02 | ot | oo} 
fk eos EP 


D7 D6 DS D4 D3 D2 D1 DO 
ee ee 
O= EDGE TRIGGERED 
1— LEVEL TRIGGERED 


82380 


Status Command is received by the interrupt bank, it 
‘remembers’ which register is selected. However, 
this is not true when the Poll Command is used. 


In the Poll Command, after the OCW3 is written, the 
82380 PIC treats the next read to the Status Regis- 
ter ‘as an interrupt acknowledge. This will set the ap- 
propriate IS bit if there is a request and read the 
priority level. Interrupt Request input status remains 
unchanged from the Poll Command to the Status 
Read. 


In addition to the above read commands, the Inter- 
rupt Mask Register (IMR) can also be read. When 
read, this register reflects the contents of the pre- 
programmed OCW1 which contains information on 
which interrupt request(s) is(are) currently disabled. 


O= NO ICW4 NEEDED 
1— ICW4 NEEDED 


O= EXTERNAL CASCADE 
(ICW3 NEEDED) 
1 = NO EXTERNAL CASCADE 


(ICW3 NOT NEEDED) 
290128-56 


CONTENT IS NOT RELEVANT TO THE ACTUAL 
OPERATION OF THE BANK BUT CAN BE READ 
BY THE INTERRUPT SERVICE ROUTINE TO 

DETERMINE WHERE THE INTERRUPT VECTORS 


OF EACH BANK START. 


290128-—57 
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INITIALIZATION COMMAND WORD 3 (ICW3) 
ICW3 for Bank A: 


Di DO 


O=-NO SLAVE CASCADED TO BANK A 
1 = THERE IS A SLAVE CASCADED TO 
TOUT2#/IRQ3¥# PIN 
i 290128-B4 


ICW3 for Bank B: 


Di DO 


O=-NO CASCADED REQUEST TO IRQn 
1 - THERE IS A CASCADED REQUEST 
CONNECTED TO IRQn (i.e. THE 
CORRESPONDING INTERRUPT 
REQUEST INPUTS) 
290128-B5 


ICW3 for Bank C: 


DO 


O=-NO CASCADED REQUEST TO IRQn 
1- THERE IS A CASCADED REQUEST 


CONNECTED TO IR 
ai 290128-B6 


INITIALIZATION COMMAND WORD 4 (ICW4) 


D7 D6 D5 D4 D3 D2 ODI ODO 


O=NORMAL EOI 
1 = AUTOMATIC EOI 


O=NOT SPECIAL FULLY NESTED MODE 
1 =SPECIAL FULLY NESTED MODE 
290128-58 


OPERATION CONTROL WORD 1 (OCW1) 


DO 


Mi=1 MASK SET (INTERRUPT DISABLE) 
Mi=0O MASK RESET (INTERRUPT ENABLE) 
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OPERATION CONTROL WORD 2 (OCW2) 


D6 


DS D4 D3 D2 D1 DO 
Ce Se ee ee 


INTERRUPT LEVEL 


NON=SPECIFIC EO! COMMAND TO BE ACTED UPON 


SPECIFIC EO| COMMAND (L2=LO USED) 
ROTATE ON NON-SPECIFIC EOI 

ROTATE ON AUTO=EO! MODE (SET) 
ROTATE ON AUTO=EOI MODE (CLEAR) 
ROTATE ON SPECIFIC EO! (L2=LO USED) 
SET PRIORITY (L2=LO USED) 

NO OPERATION 


our Gana oo 
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OPERATION CONTROL WORD 3 (OCW3) 


ESMM SMM 
NO ACTION 
NO ACTION 1- POLL COMMAND 
RESET SPECIAL MASK 0O= NO POLL COMMAND 


SET SPECIAL MASK 


NO ACTION 
NO ACTION 
READ IR REG. (STATUS) 
READ IS REG. (STATUS) 


== OO 
=-O-O0f 
=-=00%8% 


-O-—-9O 
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ESMM—Enable Special Mask Mode. When this bit is set to 1, it enables the SMM bit to set or reset the Special Mask 
Mode. When this bit is set to 0, SMM bit becomes don’t care. 


SMM—Special Mask Mode. If ESMM = 1 and SMM = 1, the interrupt controller bank will enter Special Mask Mode. If 
ESMM = 1 and SMM = 0, the bank will revert to normal mask mode. When ESMM = 0, SMM has no effect. 


Poll/Interrupt Request/In-Service Status Register 
POLL COMMAND STATUS 


D7 D6 DS D4 ODS OD2 Di DO 
xt xp x] x [ve] we 
ae ee! 
BINARY CODE OF 


THE HIGHEST PRIORITY 
LEVEL REQUESTING 


O=-NO PENDING INTERRUPT 
1 = PENDING INTERRUPT 
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INTERRUPT REQUEST STATUS 


D7 D6 D5 D4 DS D2 Ot obO- 
Cd 
IF IRQ BIT IS: O— NO REQUEST 


1 — REQUEST PENDING 
290128-63 


NOTE: 

Although all Interrupt Request inputs are active LOW, the internal logical will invert the state of the pins so that when 
there is a pending interrupt request at the input, the corresponding IRQ bit will be set to HIGH in the Interrupt Request 
Status register. 


IN-SERVICE STATUS VECTOR REGISTER (VR) 


D7 


D6 DS D4 D3 D2 Di DO 
Liss | 184 | iss | ts2 | ist | iso 


IF IS, BIT IS: O= NOT IN@=SERVICE 
1 — REQUEST IS IN=SERVICE 


290128-64 


8-BIT VECTOR NUMBER 
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4.8 Register Operational Summary 


For ease of reference, Table 4-4 gives a summary of the different operating modes and commands with their 
corresponding registers. 


Table 4-4 Register Operational Summary 


Operational Command 
Description Words 


Fully Nested Mode OCW-Default 


EOI 


Non-specific EO!| Command OCW2 

Specific EOl Command OCW2 SL, EOI, 
LO-L2 

Automatic EOI Mode ICW1, ICW4 IC4, AEOI 


Rotate On Non-Specific OCW2 EOI 


EOI Command 

Rotate On Automatic OCW2 Fi, ob, EDI 
EOI Mode 

Set Priority Command OCW2 LO-L2 

Rotate On Specific OCW2 R, SL, EOI 
EOI Command 


Interrupt Mask Register OCW1 MO-M7 
Special Mask Mode OCW3 ESMM, SMM 
Level Triggered Mode ICW1 LTIM 
Edge Triggered Mode ICW1 LTIM 
Read Register Command, IRR OCW3 RR, RIS 
Read Register Command, ISR OCW3 RR, RIS 
Red IMR IMR MO-M7 
Poll Command OCW3 P 
Special Fully Nested Mode ICW2, ICW4 IC4, SFNM 
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5.0 PROGRAMMABLE INTERVAL 
TIMER | 


5.1 Functional Description 


The 82380 contains four independently Programma- 
ble Interval Timers: Timer 0-3. All four timers are 
functionally compatible to the Intel 82C54. The first 
three timers (Timer 0-2) have specific functions. 
The fourth timer, Timer 3, is a general purpose timer. 
Table 5-1 depicts the functions of each timer. A brief 
description of each timer’s function follows. 


Table 5-1. Programmable 
Interval Timer Functions 


IRQ8 Event Based 

IRQ8 Generator 

Gen. Purpose/DRAM 
Refresh Req. 
TOUT2#/IRQ3# | Gen. Purpose/Speaker 
Out/IRQ3# 

Gen. Purpose/IRQO 


Generator 


TOUT1/REF # 


TOUT3 # 


DATA BUFFER 
eer a & OUNTER 0 


8=-BIT 
INTERNAL BUS | - mee 


CONTROL 
WORD 
REGISTER | 


CONTROL 
WORD 
REGISTER Il 


82380 


TIMER 0— Event Based IRQ8 Generator 


Timer 0 is intended to be used as an Event Counter. 
The output of this timer will generate an Interrupt 
Request 8 (IRQ8) upon a rising edge of the timer 
output (TOUTO). Typically, this timer is used to im- 
plement a time-of-day clock or system tick. The Tim- 
er O output is not available as an external signal. 


TIMER 1— General Purpose/DRAM Refresh 
Request 


The output of Timer 1, TOUT1, can be used as a 
general purpose timer or as a DRAM Refresh Re- 
quest signal. The rising edge of this output creates a 
DRAM refresh request to the 82380 DRAM Refresh 
Controller. Upon reset, the Refresh Request func- 
tion is disabled, and the output pin is the Timer 1 
output. 


TIMER 2—General Purpose/Speaker Out/IRQ3 # 


The Timer 2 output, TOUT2#, could be used to sup- 
port tone generation to an external speaker. This pin 
is a bidirectional signal. When used as an input, a 
logic LOW asserted at this pin will generate an Inter- 
rupt Register 3 (IRQ3#) (see Programmable Inter- 
rupt Controller). 


IRQB 
(INTERNAL) 


ry EDGE 
DETECTOR BANK B 


x EDGE 
DETECTOR 


REFRESH | 
CONTROLLER 


REF# 


TOUT1 /REF# 


REF ENABLE 
OPEN COLLECTOR (INTERNAL) 


Ve e TOUT2#/IRQ3# 


TO IRQ3¥ (INTERNAL) 
BANK A 


f EDGE IRQO 


DETECTOR (INTERNAL) 


BANK A 


TOUT3# 
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Figure 5-1. Block Diagram of Programmable Interval Timer 
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TIMER 3—General Purpose/Interrupt Request 0 
Generator 


The output of Timer 3 is fed to an edge detector and 
generates an Interrupt Request 0 (IRQO) in the 
82380. The inverted output of this timer (TOUT3 #) 
is also available as an external signal for general 
purpose use. 


5.1.1 INTERNAL ARCHITECTURE 


The functional block diagram of the Programmable 
Interval Timer section is shown in Figure 5-1. Follow- 
ing is a description of each block. 


DATA BUFFER & READ/WRITE LOGIC 


This part of the Programmable Interval Timer is used 
to interface the four timers to the 82380 internal bus. 
The Data Buffer is for transferring commands and 
data between the 8-bit internal bus and the timers. 


intel. 


The Read/Write Logic accepts inputs from the inter- 
nal bus and generates signals to control other func- 


— tional blocks within the timer section. 


CONTROL WORD REGISTERS | & Il 


The Control Word Registers are write-only registers. 
They are used to control the operating modes of the 
timers. Control Word Register | controls Timers 0, 1 
and 2, and Control Word Register II controls Timer 
3. Detailed description of the Control Word Regis- 
ters will be included in the Register Set Overview 
section. 


COUNTER 0, COUNTER 1, 
COUNTER 2, COUNTER 3 


Counters 0, 1, 2, and 3 are the major parts of Timers 
0, 1, 2, and 3, respectively. These four functional 
blocks are identical in operation, so only a single 
counter will be described. The internal block dia- 
gram of one counter is shown in Figure 5-2. 


INTERNAL BUS 


CONTROL 
WORD 
REGISTER 
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Figure 5-2. Internal Block Diagram of A Counter 
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The four counters share a common clock input 
(CLKIN), but otherwise are fully independent. Each 


counter is programmable to operate in a different 
Mode. 


Although the Control Word Register is shown in the 
Figure 5-2, it is not part of the counter itself. Its pro- 
grammed contents are used to control the opera- 
tions of the counters. 


The Status Register, when latched, contains the cur- 
rent contents of the Control Word Register and 
status of the output and Null Count Flag (see Read 
Back Command). 


The Counting Element (CE) is the actual counter. It 
is a 16-bit presettable synchronous down counter. 


The Output Latches (OL) contain two 8-bit latches 
(OLM and OLL). Normally, these latches ‘follow’ the 
content of the CE. OLM contains the most signifi- 
cant byte of the counter and OLL contains the least 
significant byte. If the Counter Latch Command is 
sent to the counter, OL will latch the present count 
until read by the 80386 and then return to follow the 
CE. One latch at a time is enabled by the timer’s 
Control Logic to drive the internal bus. This is how 
the 16-bit Counter communicates over the 8-bit in- 
ternal bus. Note that CE cannot be read. Whenever 
the count is read, it is one of the OL’s that is being 
read. 


When a new count is written into the counter, the 
value will be stored in the Count Registers (CR), and 
transferred to CE. The transferring of the contents 
from CR’s to CE is defined as ‘loading’ of the coun- 
ter. The Count Register contains two 8-bit registers: 
CRM (which contains the most significant byte) and 
CRL (which contains the least significant byte). Simi- 
lar to the OL’s, the Control Logic allows one register 
at a time to be loaded from the 8-bit internal bus. 
However, both bytes are transferred from the CR’s 
to the CE simultaneously. Both CR’s are cleared 
when the Counter is programmed. This way, if the 
Counter has been programmed for one byte count 
(either the most significant or the least significant 
byte only), the other byte will be zero. Note that CE 
cannot be written into directly. Whenever a count is 
written, it is the CR that is being written. 


As shown in the diagram, the Control Logic consists 
of three signals: CLKIN, GATE, and OUT. CLKIN 
and GATE will be discussed in detail in the section 
that follows. OUT is the internal output of the coun- 
ter. The external outputs of some timers (TOUT) are 
the inverted version of OUT (see TOUT1, TOUT2#, 
TOUT3#). The state of OUT depends on the mode 
of operation of the timer. 


82380 


5.2 Interface Signals 


5.2.1 CLKIN 


CLKIN is an input signal used by all four timers for 
internal timing reference. This signal can be inde- 
pendent of the 82380 system clock, CLK2. In the 
following discussion, each ‘CLK Pulse’ is defined as 
the time period between a rising edge and a falling 
edge, in that order, of CLKIN. 


During the rising edge of CLKIN, the state of GATE 
is sampled. All new counts are loaded and counters 
are decremented on the falling edge of CLKIN. 


Please note that there are restrictions on the CLKIN 
signal during WRITE cycles to the 82380 timer unit. 
Refer to the appendix of this data manual for details 
on this issue. 


5.2.2 TOUT1, TOUT2#, TOUT3# 


TOUT1, TOUT2# and TOUT3# are the external 
output signals of Timer 1, Timer 2 and Timer 3, re- 
spectively. TOUT2# and TOUT3# are the inverted 
signals of their respective counter outputs, OUT. 
There is no external output for Timer 0. 


If Timer 2 is to be used as a tone generator of a 
speaker, external buffering must be used to provide 
sufficient drive capability. 


The Outputs of Timer 2 and 3 are dual function pins. 
The output pin of Timer 2 (TOUT2#/IRQ3#), which 
is a bidirectional open-collector signal, can also be 
used as interrupt request input. When the interrupt 
function is enabled (through the Programmable In- 
terrupt Controller), a LOW on this input will generate 
an Interrupt Request 3# to the 82380 Programma- 
ble Interrupt Controller. This pin has a weak internal 
pull-up resistor. To use the IRQ3# function, Timer 2 
should be programmed so that OUT2 is LOW. Addi- 
tionally, OUT3 of Timer 3 is connected to an edge 
detector which will generate an Interrupt Request 0 
(IRQO) to the 82380 after the rising edge of OUT3 
(see Figure 5-1). 


5.2.3 GATE 


GATE is not an externally controllable signal. Rath- 
er, it can be software controlled with the Internal 
Control Port. The state of GATE is always sampled 
on the rising edge of CLKIN. Depending on the 
mode of operation, GATE is used to enable/disable 
counting or trigger the start of an operation. 


For Timer 0 and 1, GATE is always enabled (HIGH). 
For Timer 2 and 3, GATE is connected to Bit 0 and 
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6, respectively, of an Internal Control Port (at ad- 
dress 61H) of the 82380. After a hardware reset, the 
state of GATE of Timer 2 and 3 is disabled (LOW). 


5.3 Modes of Operation 


Each timer can be independently programmed to 
operate in one of six different modes. Timers are 
programmed by writing a Control Word into the con- 
trol Word Register followed by an Initial Count (see 
Programming). 


The following are defined for use in describing the 
different modes of operation. 


CLK Pulse—A rising edge, then a falling edge, in 
that order of CLKIN. 

Trigger—A rising edge of a timer’s GATE input. 
Timer/Counter Loading—The transfer of a count 
from Count Register (CR) to Count Element (CE). 


Note that figures 5-3 through 5-8 show the logical 
outputs of the timer units, OUT,. This signal polarity 
does not reflect that of the TOUT, signals. See the 
first paragraph of Section 5.2.2. 


5.3.1 MODE 0—INTERRUPT ON TERMINAL 
COUNT 


Mode 0 is typically used for event counting. After the 
Control Word is written, OUT is initially LOW, and will 
remain LOW until the counter reaches zero. OUT 
then goes HIGH and remains HIGH until a new 
count or a new Mode 0 Control Word is written into 
the counter. 


In this mode, GATE = HIGH enables counting; 
GATE = LOW disables counting. However, GATE 
has no effect on OUT. 


After the Control Word and initial count are written to 


a timer, the initial count will be loaded on the next 
CLK pulse. This CLK pulse does not decrement the 
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count, so for an initial count of N, OUT does not go 
HIGH until N + 1 CLK pulses after the initial count is 
written. 


lf a new count is written to the timer, it will be loaded 
on the next CLK pulse and counting will continue 
from the new count. If a two-byte count is written, 
the following happens: 


1. Writing the first byte disables counting, OUT is set 
LOW immediately (i.e., no CLK pulse required). 


2. Writing the second byte allows the new count to 
be loaded on the next CLK pulse. 


This allows the counting sequence to be synchroniz- — 
ed by software. Again, OUT does not go HIGH until 
N + 1 CLK pulses after the new count of N is writ- 
ten. 


If an initial count is written while GATE is LOW, the 
counter will be loaded on the next CLK pulse. When 
GATE goes HIGH, OUT will go HIGH N CLK pulses 
later; no CLK pulse is needed to load the counter as 
this has already been done. 


5.3.2 MODE 1—GATE RETRIGGERABLE 
ONE-SHOT 


In this mode, OUT will be initially HIGH. OUT will go 
LOW on the CLK pulse following a trigger to start the 
one-shot operation. The OUT signal will then remain 
LOW until the timer reaches zero. At this point, OUT 
will stay HIGH until the next trigger comes in. Since 
the state of GATE signals of Timer 0 and 1 are inter- 
nally set to HIGH. 


After writing the Control Word and initial count, the 
timer is considered ‘armed’. A trigger results in load- 
ing the timer and setting OUT LOW on the next CLK 
pulse. Therefore, an initial count of N will result in a 
one-shot pulse width of N CLK cycles. Note that this 
one-shot operation is retriggerable; i.e., OUT will re- 
main LOW for N CLK pulses after every trigger. The 
one-shot operation can be repeated without rewrit- 
ing the same count into the timer. 


lf a new count is written to the timer during a one- 
shot operation, the current one-shot pulse width will 
not be affected until the timer is retriggered. This is 
because loading of the new count to CE will occur 
only when the one-shot is triggered. 
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CW=10 LSB=4 


meri, <a 


GATE es ee a 


OUT 
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CW=10 LSB=3 


GATE | 
OUT 
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NOTES: 
The following conventions apply to all mode timing diagrams. 


1. Counters are programmed for binary (not BCD) counting and for reading/writing least significant byte (LSB) only. 


2. The counter is always selected (CS always low). 
3. CW stands for “Control Word”; CW = 10 means a control word of 10, Hex is written to the counter. 
4. LSB stands for “least significant byte” of count. 
5. Numbers below diagrams are count values. 
The lower number is the least significant byte. 
The upper number is the most significant byte. Since the counter is programmed to read/write LSB only, the 
most significant byte cannot be read. 
N stands for an undefined count. 
Vertical lines show transitions between count values. 


Figure 5-3. Mode 0 
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CW=12 LSB=3 
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Figure 5-4. Mode 1 


5.3.3 MODE 2—RATE GENERATOR 


This mode is a divide-by-N counter. It is typically 
used to generate a Real Time Clock interrupt. OUT 
will initially be HIGH. When the initial count has dec- 
remented to 1, OUT goes LOW for one CLK pulse, 
then OUT goes HIGH again. Then the timer reloads 
the initial count and the process is repeated. In other 
words, this mode is periodic since the same se- 
quence is repeated itself indefinitely. For an initial 
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count of N, the sequence repeats every N CLK cy- 
cles. 


Similar to Mode 0, GATE = HIGH enables counting, 
where GATE = LOW disables counting. If GATE 
goes LOW during an output pulse (LOW), OUT is set 
HIGH immediately. A trigger (rising edge on GATE) 
will reload the timer with the initial count on the next 
CLK pulse. Then, OUT will go LOW (for one CLK 
pulse) N CLK pulses after the new trigger. Thus, 
GATE can be used to synchronize the timer. 


CW=14 LSB=3 


82380 


o1o0160 | @ 1a |] @-7 6 
Sa ae ce oe eee aes ee 


CW=14 LSB=3 


CW=14 LSB=4 


NOTE: 
A GATE transition should not occur one clock prior to terminal count. 


Figure 5-5. Mode 2 


After writing a Control Word and initial count, the 
timer will be loaded on the next CLK pulse. OUT 
goes LOW (for the CLK pulse) N CLK pulses after 
the initial count is written. This is another way the 
timer may be synchronized by software. 


Writing a new count while counting does not affect 
the current counting sequence because the new 
count will not be loaded until the end of the current 
counting cycle. If a trigger is received after writing a 
new count but before the end of the current period, 
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the timer will be loaded with the new count on the 
next CLK pulse after the trigger, and counting will 
continue with the new count. 


5.3.4 MODE 3—SQUARE WAVE GENERATOR 

Mode 3 is typically used for Baud Rate generation. 
Functionally, this mode is similar to Mode 2 except 
for the duty cycle of OUT. In this mode, OUT will be 


initially HIGH. When half of the initial count has ex- 
pired, OUT goes low for the remainder of the count. 


f 


1-539 


82380 


The counting sequence will be repeated, thus this 
mode is also periodic. Note that an initial count of N 
results in a square wave with a period of N CLK 
pulses. 


The GATE input can be used to synchronize the tim- 
er. GATE = HIGH enables counting; GATE = LOW 
disables counting. If GATE goes LOW while OUT is 
LOW, OUT is set HIGH immediately (i.e., no CLK 
pulse is required). A trigger reloads the timer with the 
initial count on the next CLK pulse. 


After writing a Control Word and initial count, the 
timer will be loaded on the next CLK pulse. This al- 
lows the timer to be synchronized by software. 


Writing a new count while counting does not affect 
the current counting sequence. If a trigger is re- 
ceived after writing a new count but before the end 
of the current half-cycle of the square wave, the tim- 
er will be loaded with the new count on the next CLK 
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pulse and counting will continue from the new count. 


Otherwise, the new count will be loaded at the end 
of the current half-cycle. 


There is a slight difference in operation depending 
on whether the initial count is EVEN or ODD. The 
following description is to show exactly how this 
mode is implemented. 


EVEN COUNTS: 


OUT is initially HIGH. The initial count is loaded on 
one CLK pulse and is decremented by two on suc- 
ceeding CLK pulses. When the count expires (decre- 
mented to.2), OUT changes to LOW and the timer is 
reloaded with the initial count. The above process is 
repeated indefinitely. 


ODD COUNTS: 


OUT is initially HIGH. The initial count minus one 
(which is an even number) is loaded on one CLK 


CW=16 LSB=4 


We i hae, ee ee ee 


GATE 
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NOTE: 
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Figure 5-6. Mode 3 


290128-71 


1-540 


intel. 


pulse and is decremented by two on succeeding 
CLK pulses. One CLK pulse after the count expires 
(decremented to 2), OUT goes LOW and the timer is 
loaded with the initial count minus one again. Suc- 
ceeding CLK pulses decrement the count by two. 
When the count expires, OUT goes HIGH immedi- 
ately and the timer is reloaded with the initial count 
minus one. The above process is repeated indefi- 
nitely. So for ODD counts, OUT will be HIGH for (N 
+ 1)/2 counts and LOW for (N — 1)/2 counts. 


5.3.5 MODE 4—INITIAL COUNT TRIGGERED 
STROBE 


This mode allows a strobe pulse to be generated by 
writing an initial count to the timer. Initially, OUT will 


CW=18 LSB=3 
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be HIGH. When a new initial count is written into the 
timer, the counting sequence will begin. When the 
initial count expires (decremented to 1), OUT will go 
LOW for one CLK pulse and then go HIGH again. 


Again, GATE = HIGH enables counting while GATE 
= LOW disables counting. GATE has no effect on 
OUT. 


After writing the Control Word and initial count, the 
timer will be loaded on the next CLK pulse. This CLK 
pulse does not decrement the count, so for an initial 
count of N, OUT does not strobe LOW until N + 1 
CLK pulses after initial count is written. 


lf a new count is written during counting, it will be 
loaded in the next CLK pulse and counting will con- 
tinue from the new count. 
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Figure 5-7. Mode 4 
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If a two-byte count is written, the following will occur: 
1. Writing the first byte has no effect on counting. 


2. Writing the second byte allows the new count to 
be loaded on the next CLK pulse. 


OUT will strobe LOW N + 1 CLK pulses after the 
new count of N is written. Therefore, when the 
strobe pulse will occur after a trigger depends on the 
value of the initial count loaded. 


5.3.6 MODE 5—GATE RETRIGGERABLE 
STROBE 


Mode 5 is very similar to Mode 4 except the count 
sequence is triggered by the GATE signal instead of 


CW=1A LSB=3 


intel. 


by writing an initial count. Initially, OUT will be HIGH. 
Counting is triggered by a rising edge of GATE. 
When the initial count has expired (decremented to 
1), OUT will go LOW for one CLK pulse and then go 
HIGH again. 


After loading the Control Word and initial count, the 
Count Element will not be loaded until the CLK pulse 
after a trigger. This CLK pulse does not decrement 
the count. Therefore, for an initial count of N, OUT 
does not strobe LOW until N + 1 CLK pulses after a 
trigger. 
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Figure 5-8. Mode 5 
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SUMMARY OF GATE OPERATIONS 


GATE LOW or GATE 
ne Going LOW 6 bee se HIGH 


Disable Count No Effect Enable Count 
No Effect 1. Initiate Count No Effect 
2. Reset Output 
After Next Clock 


1. Disable Count Initiate Count 


Enable Count 


2. Sets Output HIGH 
Immediately 

1. Disable Count 

2. Sets Output HIGH 
Immediately 

Disable Count 

No Effect 


The counting sequence is retriggerable. Every trig- 
ger will result in the timer being loaded with the initial 
count on the next CLK pulse. 


If the new count is written during counting, the cur- 
rent counting sequence will not be affected. If a trig- 
ger occurs after the new count is written but before 
the current count expires, the timer will be loaded 
with the new count on the next CLK pulse and a new 
count sequence will start from there. 


5.3.7 OPERATION COMMON TO ALL MODES 


5.3.7.1 GATE 


The GATE input is always sampled on the rising 
edge of CLKIN. In Modes 0, 2, 3 and 4, the GATE 
input is level sensitive. The logic level is sampled on 
the rising edge of CLKIN. In Modes 1, 2, 3 and 5, the 
GATE input is rising edge sensitive. In these modes, 
a rising edge of GATE (trigger) sets an edge sensi- 
tive flip-flop in the timer. The flip-flop is reset imme- 
diately after it is sampled. This way, a trigger will be 
detected no matter when it occurs; i.e., a HIGH logic 
level does not have to be maintained until the next 
rising edge of CLKIN. Note that in Modes 2 and 3, 
the GATE input is both edge and level sensitive. 


5.3.7.2 Counter 


New counts are loaded and counters are decre- 
mented on the falling edge of CLKIN. The largest 
possible initial count is 0. This is equivalent to 2**16 
for binary counting and 10**4 for BCD counting. 


Note that the counter does not stop when it reaches 
zero. In Modes 0, 1, 4, and 5, the counter ‘wraps 


Initiate Count 


No Effect - 
Initiate Count 


Enable Count 


Enable Count 
No Effect 


around’ to the highest count: either FFFF Hex for 
binary counting or 9999 for BCD counting, and con- 
tinues counting. Modes 2 and 3 are periodic. The 
counter reloads itself with the initial count and con- 
tinues counting from there. 


The minimum and maximum initial count in each 
counter depends on the mode of operation. They 
are summarized below. 


5.4 Register Set Overview 


The Programmable Interval Timer module of the 
82380 contains a set of six registers. The port ad- 
dress map of these registers is shown in Table 5-2. 


Table 5-2. Timer Register Port Address Map 


Port Address Description 


40H Counter 0 Register (read/write) 
41H Counter 1 Register (read/write) 
42H Counter 2 Register (read/write) 
43H Control Word Register | 


(Counter 0, 1 & 2) (write-only) 


44H Counter 3 Register (read/write) 
45H Reserved 

46H Reserved 

47H Control Word Register II 


(Counter 3) (write-only) — 
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5.4.1 COUNTER 0, 1, 2, 3 REGISTERS 


These four 8-bit registers are functionally identical. 
They are used to write the initial count value into the 
respective timer. Also, they can be used to read the 
latched count value of a timer. Since they are 8-bit 
registers, reading and writing of the 16-bit initial 
count must follow the count format specified in the 
Control Word Registers; i.e., least significant byte 
only, most significant byte only, or least significant 
byte then most significant byte (see Programming). 


5.4.2 CONTROL WORD REGISTER | & Il 


There are two Control Word Registers associated 
with the Timer section. One of the two registers 
(Control Word Register |) is used to control the oper- 
ations of Counters 0, 1, and 2 and the other (Control 
Word Register II) is for Counter 3. The major func- 
tions of both Control Word Registers are listed be- 
low: 


— Select the timer to be programmed. 


— Define which mode the selected timer is to oper- 
ate in. 


— Define the count sequence; i.e., if the selected 
timer is to count as a Binary Counter or a Binary 
Coded Decimal (BCD) Counter. 


— Select the byte access sequence during timer 
read/write operations; i.e., least significant byte 
only, most significant byte only, or least signifi- 
cant byte first, then most significant byte. 


Also, the Control Word Registers can be pro- 
grammed to perform a Counter Latch Command or a 
Read Back Command which will be described later. 


5.5 Programming 


5.5.1 INITIALIZATION 


Upon power-up or reset, the state of all timers is 
undefined. The mode, count value, and output of all 
timers are random. From this point on, how each 
timer operates is determined solely by how it is pro- 
grammed. Each timer must be programmed before it 
can be used. Since the outputs of some timers can 
generate interrupt signals to the 82380, all timers 
should be initialized to a known state. 


Timers are programmed by writing a Control Word 


into their respective Control Word Registers. Then, 
an Initial Count can be written into the correspond- 
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ing Count Register. In general, the programming pro- 


cedure is very flexible. Only two conventions need to 
be remembered: 


1. For each timer, the Control Word must be written 
before the initial count is written. 


2. The 16-bit initial count must follow the count for- 
mat specified in the Control Word (least signifi- 
cant byte only, most significant byte only, or least 
significant byte first, followed by most significant 


byte). 


Since the two Control Word Registers and the four 
Counter Registers have separate addresses, and 
each timer can be individually selected by the appro- 
priate Control Word Register, no special instruction 
sequence is required. Any programming sequence 
that follows the conventions above is acceptable. 


A new initial count may be written to a timer at any 
time without affecting the timer’s programmed mode 
in any way. Count sequence will be affected as de- 
scribed in the Modes of Operation section. Note that 
the new count must follow the programmed count 
format. 


lf a timer is previously programmed to read/write 
two-byte counts, the following precaution applies. A 
program must not transfer control between writing 
the first and second byte to another routine which 
also writes into the same timer. Otherwise, the 
read/write will result in incorrect count. 


Whenever a Control Word is written to a timer, all 
control logic for that timer(s) is immediately reset 
(i.e., no CLK pulse is required). Also, the corre- 
sponding output pin, TOUT(#), goes to a known ini- 
tial state. 


5.5.2 READ OPERATION 


Three methods are available to read the current 
count as well as the status of each timer. They are: 
Read Counter Registers, Counter Latch Command 
and Read Back Command. Following is a descrip- 
tion of these methods. 


READ COUNTER REGISTERS 


The current count of a timer can be read by perform- 
ing a read operation on the corresponding Counter 
Register. The only restriction of this read operation 
is that the CLKIN of the timers must be inhibited by 
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using external logic. Otherwise, the count may be in 
the process of changing when it is read, giving an 
undefined result. Note that since all four timers are 
sharing the same CLKIN signal, inhibiting CLKIN to 
read a timer will unavoidably disable the other timers 
also. This may prove to be impractical. Therefore, it 
is suggested that either the Counter Latch Com- 
mand or the Read Back Command be used to read 
the current count of a timer. 


Another alternative is to temporarily disable a timer 
before reading its Counter Register by using the 
GATE input. Depending on the mode of operation, 
GATE = LOW will disable the counting operation. 
However, this option is available on Timer 2 and 3 
only, since the GATE signals of the other two timers 
are internally enabled all the time. 


COUNTER LATCH COMMAND 


A Counter Latch Command will be executed when- 
ever a special Control Word is written into a Control 
Word Register. Two bits written into the Control 
Word Register distinguish this command from a ‘reg- 
ular’ Control Word (see Register Bit Definition). Also, 
two other bits in the Control Word will select which 
counter is to be latched. 


Upon execution of this command, the selected 
counter’s Output Latch (OL) latches the count at the 
time the Counter Latch Command is received. This 
count is held in the latch until it is read by the 80386, 
or until the timer is reprogrammed. The count is then 
unlatched automatically and the OL returns to ‘fol- 
lowing’ the Counting Element (CE). This allows read- 
ing the contents of the counters ‘on the fly’ without 
affecting counting in progress. Multiple Counter 
Latch Commands may be used to latch more than 
one counter. Each latched count is held until it is 
read. Counter Latch Commands do not affect the 
programmed mode of the timer in any way. 


If a counter is latched, and at some time later, it is 
latched again before the prior latched count is read, 
the second Counter Latch Command is ignored. The 
count read will then be the count at the time the first 
command was issued. 


In any event, the latched count must be read ac- 
cording to the programmed format. Specifically, if 
the timer is programmed for two-byte counts, two 
bytes must be read. However, the two bytes do not 
have to be read right after the other. Read/write or 
programming operations of other timers may be per- 
formed between them. 
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Another feature of this Counter Latch Command is 
that read and write operations of the same timer 
may be interleaved. For example, if the timer is pro- 
grammed for two-byte counts, the following se- 
quence is valid. 


1. Read least significant byte. 
2. Write new least significant byte. 
3. Read most significant byte. 
4. Write new most significant byte. 


lf a timer is programmed to read/write two-byte 
counts, the following precaution applies. A program 
must not transfer control between reading the first 
and second byte to another routine which also reads 
from that same timer. Otherwise, an incorrect count 
will be read. 


READ BACK COMMAND 


The Read Back Command is another special Com- 
mand Word operation which allows the user to read 
the current count value and/or the status of the se- 
lected timer(s). Like the Counter Latch Command, 
two bits in the Command Word identify this as a 
Read Back Command (see Register Bit Definition). 


The Read Back Command may be used to latch 
multiple counter Output Latches (OL’s) by selecting 
more than one timer within a Command Word. This 
single command is functionally equivalent to several 
Counter Latch Commands, one for each counter to 
be latched. Each counter’s latched count will be 
held until it is read by the 80386 or until the timer is 
reprogrammed. The counter is automatically un- 
latched when read, but other counters remain 
latched until they are read. If multiple Read Back 
commands are issued to the same timer without 
reading the count, all but the first are ignored; i.e., 
the count read will correspond to the very first Read 
Back Command issued. 


As mentioned previously, the Read Back Command 
may also be used to latch status information of the 
selected timer(s). When this function is enabled, the 
status of a timer can be read from the Counter Reg- 
ister after the Read Back Command is issued. The 
status information of a timer includes the following: 


1. Mode of timer: 


This allows the user to check the mode of opera- 
tion of the timer last programmed. 


2. State of TOUT pin of the timer: 


This allows the user to monitor the counter’s out- 
put pin via software, possibly eliminating some 
hardware from a system. 
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3. Null Count/Count available: 


The Null Count Bit in the status byte indicates if 
the last count written to the Count Register (CR) 
has been loaded into the Counting Element (CE). 
The exact time this happens depends on the 
mode of the timer and is described in the Pro- 
gramming section. Until the count is loaded into 
the Counting Element (CE), it cannot be read from 
the timer. If the count is latched or read before 
this occurs, the count value will not reflect the 
new count just written. 


If multiple status latch operations of the timer(s) are 
performed without reading the status, all but the first 
command are ignored; i.e., the status read in will 
correspond to the first Read Back Command issued. 


Both the current count and status of the selected 
timer(s) may be latched simultaneously by enabling 
both functions in a single Read Back Command. 
This is functionally the same as issuing two separate 
Read Back Commands at once. Once again, if multi- 
ple read commands are issued to latch both the 
count and status of a timer, all but the first command 
will be ignored. 
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If both count and status of a timer are latched, the 
first read operation of that timer will return the 
latched status, regardless of which was latched first. 
The next one or two (if two count bytes are to be 
read) read operations return the latched count. Note 
that subsequent read operations on the Counter 
Register will return the unlatched count (like the first 
read method discussed). 


5.6 Register Bit Definitions 
COUNTER 0, 1, 2, 3 REGISTER (READ/WRITE) 


Port Address Description 


Counter 0 Register (read/write) 
Counter 1 Register (read/write) 


Counter 2 Register (read/write) 
Counter 3 Register (read/write) 
Reserved 
Reserved 


LSB OF COUNT BYTE 
MSB OF COUNT BYTE 
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Note that these 8-bit registers are for writing and CONTROL WORD REGISTER II 
reading of one byte of the 16-bit count value, either 
the most significant or the least significant byte. 


CONTROL WORD REGISTER | & Il (WRITE-ONLY) 


Port Address Description 


Control Word Register | 


Counter 0. 1. 2) (writ SELECT COUNTER: 0 = 16=BIT BINARY 
(Counter 0, 1, 2) (write-only) 00 SELECT COUNTER 3 COUNTER 
Control Word Register II 01 RESERVED . 1 = BCD COUNTER 
(Counter 3) (write-only) ge ae hs (4 DECADES) 
FOR COUNTER 3 
MODE: 
CONTROL WORD REGISTER | READ/WRITE: 006 MODE 0 


00 COUNTER LATCH COMMAND 001 MODE 1 
01 READ/WRITE LSB BYTE ONLY X10 MODE 2 
10 READ/WRITE MSB BYTE ONLY X11 MODE 3 
11 READ/WRITE LSB, THEN MSB BYTE 100 MODE 4 

101 MODE 5 
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COUNTER LATCH COMMAND FORMAT 


SELECT COUNTER: pba a ogc (Write to Control Word Register) 


00 SELECT COUNTER 0 COUNTER 
01 SELECT COUNTER 1 1=BCD COUNTER 
10 SELECT COUNTER 2 (4 DECADES) 
11 READ BACK COMMAND 
FOR COUNTER 0=2 
MODE: 
READ/WRITE: 000 MODE 0 
00 COUNTER LATCH COMMAND 001 MODE 1 
01 READ/WRITE LSB BYTE ONLY X10 MODE 2 
10 READ/WRITE MSB BYTE ONLY X11 MODE 3 
11 READ/WRITE LSB, THEN MSB BYTE 100 MODE 4 
: 101 MODE 5 
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00 COUNTER 0 (OR 3) 
01 COUNTER 1 

10 COUNTER 2 

11 READ BACK COMMAND 
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Gate 
Trigger 


SS EN 


Timer 


0 Interrupt on Terminal Count 

1 |NA|NA} ©/} 0 Gate Retriggerable One Shot 
2 Rate Generator 

3 Square Wave Generator 

4 Initial Count Triggered Strobe 
5 |NA|NA}| ©] O Gate Retriggerable Strobe 


® = Must use Port 61 to generate _“ edge. 
NA = Not Applicable 
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READ BACK COMMAND FORMAT 
(Write to Control Word Register) 


O=- LATCH COUNT 
1 = DO NOT LATCH 
COUNT 


O=- COUNTER NOT 
SELECTED 

1 = COUNTER IS 
SELECTED 


~ O= LATCH STATUS 
1=- DO NOT LATCH 


STATUS 


STATUS FORMAT 
(Returned from Read Back Command) 
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DO 


Por pono] en [wo] Tw [wo [oo 


O= OUTPUT 
PIN=0 

1 = OUTPUT 
PIN=1 


6.0 WAIT STATE GENERATOR 


6.1 Functional Description 


The 82380 contains a programmable Wait State 
Generator which can generate a pre-programmed 
number of wait states during both CPU and DMA 
initiated bus cycles. This Wait State Generator is ca- 
pable of generating 1 to 16 wait states in non-pipe- 
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O=- COUNT AVAILABLE 
FOR READING 
1=— NULL COUNT 


COUNTER 
MODE 
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lined mode, and O to 15 wait states in pipelined 
mode. Depending on the bus cycle type and the two 
Wait State Control inputs (WSC 0-1), a pre-pro- 
grammed number of wait states in the selected Wait 
State Register will be generated. 


The Wait State Generator can also be disabled to 
allow the use of devices capable of generating their 
own READY # signals. Figure 6-1 is a block diagram 
of the Wait State Generator. 
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6.2 Interface Signals 


The following describes the interface signals which ~ 


affect the operation of the Wait State Generator. 
The READY #, WSCO and WSC1 signals are inputs. 
READYO# is the ready output signal to the host 
processor. 


6.2.1 READY # 


READY # is an active LOW input signal which indi- | 


cates to the 82380 the completion of a bus cycle. In 
the Master mode (e.g., 82380 initiated DMA trans- 
fer), this signal is monitored to determine whether a 
peripheral or memory needs wait states inserted in 
the current bus cycle. In the Slave mode, it is used 
(together with the ADS# signal) to trace CPU bus 
cycles to determine if the current cycle is pipelined. 


6.2.2 READYO# 


READYO# (Ready Out#) is an active LOW output 
signal and is the output of the Wait State Generator. 
The number of wait states generated depends on 
the WSC(0-1) inputs. Note that special cases are 
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handled for access to the 82380 internal registers 


and for the Refresh cycles. For 82380 internal regis- 


ter access, READYO# will be delayed to take into 
account the command recovery time of the register. 
One or more wait states will be generated in a pipe- 
lined cycle. During refresh, the number of wait states 
will be determined by the preprogrammed value in 
the Refresh Wait State Register. 


In the simplest configuration, READYO# can be 
connected to the READY # input of the 82380 and 
the 80386 CPU. This is, however, not always the 
case. If external circuitry is to control the READY # 
inputs as well, additional logic will be required (see 
Application Issues). 


6.2.3 WSC(0-1) 


These two Wait State Control inputs select one of 
the three pre-programmed 8-bit Wait State Registers 
which determines the number of wait states to be 
generated. The most significant half of the three 
Wait State Registers corresponds to memory ac- 
cesses, the least significant half to |/O accesses. 
The combination WSC(0-1) = 11 disables the Wait 
State Generator. 


INTERNAL WAIT STATE 
REQUIREMENT 


D4 D3 DO 


READYO# 


MEMORY 0 1/0 0 


REGISTER 
SELECT 


MEMORY 1 fO 1 
MEMORY 2 1/0 2 


(RESERVED) REFRESH 


WAIT STATE 
COUNTER 


PROGRAMMABLE WAIT STATE 


REGISTERS 290128-80 


Figure 6-1. Wait State Generator Block Diagram 
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Figure 6-2. Wait States in Non-Pipelined Cycles 


6.3 Bus Function 


6.3.1 WAIT STATES IN NON-PIPELINED CYCLE 


The timing diagram of two typical non-pipelined cy- 
cles with 82380 generated wait states is shown in 
Figure 6-2. In this diagram, it is assumed that the 
internal registers of the 82380 are not addressed. 
During the first T2 state of each bus cycle, the Wait 
State Control and the M/IO# inputs are sampled to 
determine which Wait State Register (if any) is se- 
lected. If the WSC inputs are active (i.e., not both are 
driven HIGH), the pre-programmed number of wait 
states corresponding to the selected Wait State 
Register will be requested. This is done by driving 
the READYO# output HIGH during the end of each 
T2 state. 


The WSC(0-1) inputs need only be valid during the 


very first T2 state of each non-pipelined cycle. As a 
general rule, the WSC inputs are sampled on the 
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rising edge of the next clock (82384 CLK) after the 
last state when ADS# (Address Status) is asserted. 


The number of wait states generated depends on 
the type of bus cycle, and the number of wait states 
requested. The various combinations are discussed 
below. 


1. Access the 82380 internal registers: 2 to 5 wait 
states, depending upon the specific register ad- 
dressed. Some back-to-back sequences to the In- 
terrupt Controller will require 7 wait states. © 


2. Interrupt Acknowledge to the 82380: 5 wait 
states. 


3. Refresh: As programmed in the Refresh Wait 
State Register (see Register Set Overview). Note 
that if WSC(O0-1) = 11, READYO# will stay inac- 
tive. 


4. Other bus cycles: Depending on WSC(0-1) and 
M/lO# inputs, these inputs select a Wait State 
Register in which the number of wait states will be 
equal to the pre-programmed wait state count in 
the register plus 1. The Wait State Register selec- 
tion is defined as follows (Table 6-1). 
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Table 6-1. Wait State Register Selection 


M/lO# —— Register Selected 


WAIT REG 0 (I/O half) 
WAIT REG 1 (I/O half) 
WAIT REG 2 (I/O half) 
WAIT REG 0 (MEM half) 
WAIT REG 1 (MEM half) 
WAIT REG 2 (MEM half) 
Wait State Gen. Disabled 


The Wait State Control signals, WSC(0-1), can be 
generated with the address decode and the Read/ 
Write control signals as shown in Figure 6-3. 


ADDRESS DECODE 
LOGIC WSC (0-1) 
W/R# 
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Figure 6-3. WSC(0-1) Generation 
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Note that during HALT and SHUTDOWN, the num- 
ber of wait states will depend on the WSC(0-1) in- 
puts, which will select the memory half of one of the 
Wait State Registers (see CPU Reset and Shutdown 
Detect). 


6.3.2 WAIT STATES IN PIPELINED CYCLE 


The timing diagram of two typical pipelined cycles 
with 82380 generated wait states is shown in Figure 
6-4. Again, in this diagram, it is assumed that the 
82380 internal registers are not addressed. As de- 
fined in the timing of the 80386 processor, the Ad- 
dress (A 2-31), Byte Enable (BE 0-3), and other 
control signals (M/IO#, ADS#) are asserted one 
T state earlier than in a non-pipelined cycle; i.e., they 
are asserted at T2P. Similar to the non-pipelined 
case, the Wait State Control (WSC) inputs are sam- 
pled in the middle of the state after the last state 
when the ADS# signal is asserted. Therefore, the 
WSC inputs should be asserted during the T1P state 
of each pipelined cycle (which is one T state earlier 
than in the non-pipelined cycle). 


TWO WAIT STATES 
290128-83 


Figure 6-4. Wait State in Pipelined Cycles 
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The number of wait states generated in a pipelined 
cycle is selected in a similar manner as in the non- 
pipelined case discussed in the previous section. 
The only difference here is that the actual number of 
wait states generated will be one less than that of 
the non-pipelined cycle. This is done automatically 
by the Wait State Generator. 


6.3.3 EXTENDING AND EARLY TERMINATING 
BUS CYCLE 


- The 82380 allows external logic to either add wait 
states or cause early termination of a bus cycle by 
controlling the READY # input to the 82380 and the 
host processor. A possible configuration is shown in 
Figure 6-5. — 


The EXT. RDY# (External Ready) signal of Figure 
6-5 allows external devices to cause early termina- 
tion of a bus cycle. When this signal is asserted 
LOW, the output of the circuit will also go LOW 
(even though the READYO# of the 82380 may still 
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be HIGH). This output is fed to the READY # input of 


the 80386 and the 82380 to indicate the completion 
of the current bus cycle. 


Similarly, the EXT. NOT READY (External Not 
Ready) signal is used to delay the READY # input of 
the processor and the 82380. As long as this signal 
is driven HIGH, the output of the circuit will drive the 
READY # input HIGH. This will effectively extend the 
duration of a bus cycle. However, it is important to 
note that if the two-level logic is not fast enough to 
satisfy the READY # setup time, the OR gate should 
be eliminated. Instead, the 82380 Wait State Gener- 
ator can be disabled by driving both WSC(0-1) 
HIGH. In this case, the addressed memory or |/O 
device should activate the external READY # input 
whenever it is ready to terminate the current bus 
cycle. 


Figure 6-6 and 6-7 show the timing relationships of 
the ready signals for the early termination and exten- 
sion of the bus cycles. Section 6.7, Application Is- 
sues, contains a detailed timing analysis of the ex- 
ternal circuit. 


EXTERNAL READY# 
(EARLY TERMINATION) 


EXTERNAL 
NOT READY 


(CYCLE EXTENSION) 


290128-84 


Figure 6-5. External ‘READY’ Control Logic 
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Figure 6-6. Early Termination of Bus Cycle By ‘READY #’ 
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A(2= 31) 
M/lO# 
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ADS# 
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Figure 6-7. Extending Bus Cycle by ‘READY #’ 


Due to the following implications, it should be noted 
that early termination of bus cycles in which 82380 
internal registers are accessed is not recommended. 


1. Erroneous data may be read from or written into 
the addressed register. 


2. The 82380 must be allowed to recover either be- 
fore HLDA (Hold Acknowledge) is asserted or be- 
fore another bus cycle into an 82380 internal reg- 
ister is initiated. 


The recovery time, in bus periods, equals the re- 
maining wait states that were avoided plus 4. 


6.4 Register Set Overview 


Altogether, there are four 8-bit internal registers as- 
sociated with the Wait State Generator. The port ad- 
dress map of these registers is shown below in Ta- 
ble 6-2. A detailed description of each follows. 


Table 6-2. Register Address Map 


72H Wait State Reg 0 (read/write) 
73H Wait State Reg 1 (read/write) 
74H Wait State Reg 2 (read/write) 


75H Ref. Wait State Reg (read/write) 


WAIT STATE REGISTER 0O, 1, 2 


These three 8-bit read/write registers are functional- 
ly identical. They are used to store the pre-pro- 
grammed wait state count. One half of each register 
contains the wait state count for.1/O accesses while 
the other half contains the count for memory ac- 
cesses. The total number of wait states generated 
will depend on the type of bus cycle. For a non-pipe- 
lined cycle, the actual number of wait states request- 
ed is equal to the wait state count plus 1. For a 
pipelined cycle, the number of wait states will be 
equal to the wait state count in the selected register. 
Therefore, the Wait State Generator is capable of 
generating 1 to 16 wait states in non-pipelined 
mode, and 0 to 15 wait states in pipelined mode. 


Note that the minimum wait state count in each reg- 
ister is 0. This is equivalent to 0 wait states for a 
pipelined cycle and 1 wait state for a non-pipelined 
cycle. 


REFRESH WAIT STATE REGISTER 


Similar to the Wait State Registers discussed above, 
this 4-bit register is used to store the number of wait 
states to be generated during the DRAM refresh cy- 
cle. Note that the Refresh Wait State Register is not 
selected by the WSC inputs. It will automatically be 
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chosen whenever a DRAM refresh cycle occurs. If 
the Wait State Generator is disabled during the re- 
fresh cycle (WSC(0-1) = 11), READYO# will stay 
inactive and the Refresh Wait State Register is ig- 
nored. 


6.5 Programming 


Using the Wait State Generator is relatively straight- 
forward. No special programming sequence is re- 
quired. In order to ensure the expected number of 
wait states will be generated when a register is se- 
lected, the registers to be used must be pro- 
grammed after power-up by writing the appropriate 
wait state count into each register. Note that upon 
hardware reset, all Wait State Registers are initial- 
ized with the value FFH, giving the maximum num- 
ber of wait states possible. Also, each register can 
be read to check the wait state count previously 
stored in the register. 


6.6 Register Bit Definition 
WAIT STATE REGISTER 0, 1, 2 


Port Address Description 


72H Wait State Register 0 (read/write) 
73H Wait State Register 1 (read/write) 
74H Wait State Register 2 (read/write) 
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MEMORY WAIT STATE COUNT 
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REFRESH WAIT STATE REGISTER 


Port Address: 75H (Read/Write) 


eS EH AS SS ENS A Es 
(a als Hat 


REFRESH WAIT 
STATE COUNT 


MUST BE ZERO 
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6.7 Application Issues 


6.7.1 EXTERNAL ‘READY’ CONTROL LOGIC 


As mentioned in section 6.3.3, wait state cycles gen- 
erated by the 82380 can be terminated early or ex- 
tended longer by means of additional external logic 
(see Figure 6-5). In order to ensure that the 
READY # input timing requirement of the 80386 and 
the 82380 is satisfied, special care must be taken 


‘when designing this external control logic. This sec- 


tion addresses the design requirements. 


B : 

intel. 

A simplified block diagram of the external logic along 
with the READY # tiiming diagram is shown in Figure 
6-8. The purpose is to determine the maximum delay 


time allowed in the external control logic in order to 
satisfy the READY # setup time. 


First, it will be assumed that the 80386 is running at 
16 MHz (i.e., CLK2 and 32 MHz). Therefore, one bus 
state (two CLK2 periods) will be equivalent to 62.5 
nsec. According to the AC specifications of the 


EXT. READY# 


80386 — 16 


READYO# 


READY# 


PHI1 + PHI2 = 62.5 ns 
Maximum READYO# Valid Delay = 31 ns 
READY # Set-up Time = 21 ns 


0OWN> 


Maximum Ready Control Logic Delay = A — B — C = 11 ns 


Figure 6-8. ‘READY’ Timing Consideration 


82380 


82380, the maximum delay time for valid READYO # 

signal is 31 ns after the rising edge of CLK2 in the 

beginning of T2 (for non-pipelined cycle) or T2P (for 
pipelined cycle). Also, the minimum READY # setup 
time of the 80386 and the 82380 should be 20 ns 

before the rising edge of CLK2 at the beginning of 

the next bus state. This limits the total delay time for 
the external READY# control logic to be 11 ns 

(62.5-31-21) in order to meet the READY# setup 

timing requirement. 


EXT. NOT READY 


290128-89 


1-555 


82380 


7.0 DRAM REFRESH CONTROLLER 


7.1 Functional Description 


The 82380 DRAM Refresh Controller consists of a 
24-bit Refresh Address Counter and Refresh Re- 
quest logic for DRAM refresh operations (see Figure 
7-1). TIMER 1 can be used as a trigger signal to the 
DRAM Refresh Request logic. The Refresh Bus Size 
‘can be programmed to be 8-, 16-, or 32-bit wide. 
Depending on the Refresh Bus Size, the Refresh 
Address Counter will be incremented with the appro- 
priate value after every refresh cycle. The internal 
logic of the 82380 will give the Refresh operation the 
highest priority in the bus control arbitration process. 
Bus control is not released and re-requested if the 
82380 is already a bus master. 


TOUT1 
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7.2 Interface Signals 


7.2.1 TOUT 1/REF # 


The dual function output pin of TIMER 1 (TOUT1/ 
REF #) can be programmed to generate DRAM Re- 
fresh signal. If this feature is enabled, the rising edge 
of TIMER 1 output (TOUT1) will trigger the DRAM 
Refresh Request logic. After some delay for gaining 
access of the bus, the 82380 DRAM Controller will 
generate a DRAM Refresh signal by driving REF # 
output LOW. This signal is cleared after the refresh 
cycle has taken place, or by a hardware reset. 


lf the DRAM Refresh feature is disabled, the 
TOUT1/REF # output pin is simply the TIMER 1 out- 
put. Detailed information of how TIMER 1 operates 
is discussed in section 6—Programmable Interval 
Timer, and will not be repeated here. 


(INTERNAL) DRAM 


EDGE 
DETECTOR 


REFRESH INTERNAL 
CONTROLLER DMA DMA 


OAS CONTROLLER 
ARBITRATION 


24=BiT 
ADDRESS ee 


COUNTER 


TO DMA 
CONTROLLER 


24= BIT (INTERNAL) 


REFRESH 
ADDRESS 


TOUT1 /REF# 


REFRESH ENABLE (INTERNAL) 
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Figure 7-1. DRAM Refresh Controller 
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7.3 Bus Function 


7.3.1 ARBITRATION 


In order to ensure data integrity of the DRAMs, the 
82380 gives the DRAM Refresh signal the highest 
priority in the arbitration logic. It allows DRAM Re- 
fresh to interrupt a DMA in progress in order to per- 
form the DRAM Refresh cycle. The DMA service will 
be resumed after the refresh is done. 


In case of a DRAM Refresh during a DMA process, 
the cascaded device will be requested to get off the 
bus. This is done by deasserting the EDACK signal. 
Once DREQn goes inactive, the 82380 will perform 
the refresh operation. Note that the DMA controller 
does not completely relinquish the system bus dur- 
ing refresh. The Refresh Generator simply ‘steals’ a 
bus cycle between DMA accesses. 


Figure 7-2 shows the timing diagram of a Refresh 
Cycle. Upon expiration of TIMER 1, the 82380 will try 


to take control of the system bus by asserting © 


HOLD. As soon as the 82380 see HLDA go active, 
the DRAM Refresh Cycle will be carried out by acti- 
vating the REF # signal as well as the refresh ad- 
dress and control signals on the system bus (Note 


Tx Tx 


CLK2 


CLK 


KAXXAAAKAAAAAA YG 


HOLD 


HLDA 


A(2=31)* M/lO¥ 
D/C# BE (0-3)# W/R# 


TOUT1 


REF # 


READY# QXXXXXXXAAAAAAAAAAAAAAAAAKAAAAMAMAMMAAAAA AAA 


ADS# XXXXXXXX} 


*NOTE: 
A24-A31 = 1 during Refresh cycle. 
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that REF # will not be active until two CLK periods 
after HLDA is asserted). The address bus will con- 
tain the 24-bit address currently in the Refresh Ad- 
dress Counter. The control signals are driven the 
same way as in a Memory Read cycle. This ‘read’ 
operation is complete when the READY # signal is 
driven LOW. Then, the 82380 will relinquish the bus 
by de-asserting HOLD. Typically, a Refresh Cycle 
without wait states will take five bus states to exe- 
cute. If ‘n’ wait states are added, the Refresh Cycle 
will last for five plus ‘n’ bus states. 


How often the Refresh Generation will initiate a re- 
fresh cycle depends on the frequency of CLKIN as 
well as TIMER1’s programmed mode of operation. 
For this specific application, TIMER1 should be pro- 
grammed to operate in Mode 2 or 3 to generate a 
constant clock rate. See section 6—Programmable 
Interval Timer for more information on programming 
the timer. One DRAM Refresh Cycle will be generat- 
ed each time TIMER 1 expires (when TOUT1 chang- 
es to LOW to HIGH). 


The Wait State Generator can be used to insert wait 
states during a refresh cycle. The 82380 will auto- 
matically insert the desired number of wait states as 
programmed in the Refresh Wait State Register (see 
Wait State Generator). 
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AXXXXX 
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Figure 7-2. 82380 Refresh Cycle 
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7.4 Modes of Operation 


7.4.1 WORD SIZE AND REFRESH ADDRESS 
COUNTER 


The 82380 supports 8-, 16- and 32-bit refresh cycle. 
The bus width during a refresh cycle is programma- 
ble (see Programming). The bus size can be pro- 
grammed via the Refresh Control Register (see Reg- 
ister Overview). If the DRAM bus size is 8-, 16-, or 
32-bits, the Refresh Address Counter will be incre- 
mented by 1, 2, or 4, respectively. 


The Refresh Address Counter is cleared by a hard- 
ware reset. 


7.5 Register Set Overview 


The Refresh Generator has two internal registers to 
control its operation. They are the Refresh Control 
Register and the Refresh Wait State Register. Their 
port address map is shown in Table 7-1 below. 


Port Address 


1CH Refresh Control Reg. (read/write) 
75H Ref. Wait State Reg. (read/write) 


Table 7-1. Register Address Map 


The Refresh Wait State Register is not part of the 
Refresh Generator. It is only used to program the 
number of wait states to be inserted during a refresh 
cycle. This register is discussed in detail in section 7 
(Wait State Generator) and will not be repeated 
here. 


REFRESH CONTROL REGISTER 


This 2-bit register serves two functions. First, it is 
used to enable/disable the DRAM Refresh function 
output. If disabled, the output of TIMER 1 is simply 
used as a general purpose timer. The second func- 
tion of this register is to program the DRAM bus size 
for the refresh operation. The programmed bus size 
also determines how the Refresh Address Counter 
will be incremented after each refresh operation. 


7.6 Programming 


Upon hardware reset, the DRAM Refresh function is 
disabled (the Refresh Control Register is cleared). 
The following programming steps are needed before 
the Refresh Generator can be used. Since the rate 
of refresh cycles depends on how TIMER 1 is pro- 
grammed, this timer must be initialized with the de- 
sired mode of operation as well as the correct re- 
fresh interval (see Programming Interval Timer). 


1-558 


intel. 


Whether or not wait states are to be generated dur- 
ing a refresh cycle, the Refresh Wait State Register 
must also be programmed with the appropriate val- 
ue. Then, the DRAM Refresh feature must be en- 
abled and the DRAM bus width should be defined. 
These can be done in one step by writing the appro- 
priate control word into the Refresh Control Register 
(see Register Bit Definition). After these steps are 
done, the refresh operation will automatically be in- 
voked by the Refresh Generator upon expiration of 
Timer 1. 


In addition to the above programming steps, it 
should be noted that after reset, although the 
TOUT1/REF# becomes the Timer 1 output, the 
state of this pin is undefined. This is because the 
Timer module has not been initialized yet. Therefore, 
if this output is used as a DRAM Refresh signal, this 
pin should be disqualified by external logic until the 
Refresh function is enabled. One simple solution is 
to logically AND this output with HLDA, since HLDA 
should not be active after reset. 


7.7 Register Bit Definition 


REFRESH CONTROL REGISTER 
Port Address: 1CH (Read/Write) 


DARIEN 
AK CS 


00 REF. DISABLE 
01 BUS SIZE=32 
10 BUS SIZE=16 
11 BUS SIZE=8 
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MUST BE ZERO 


8.0 RELOCATION REGISTER AND 
ADDRESS DECODE 


8.1 Relocation Register 


All the integrated peripheral devices in the 82380 
are controlled by a set of internal registers. These 
registers span a total of 256 consecutive address 
locations (although not all the 256 locations are 
used). The 82380 provides a Relocation Register 
which allows the user to map this set of internal reg- 
isters into either the memory or I/O address space. 
The function of the Relocation Register is to define 
the base address of the internal register set of the 
82380 as well as if the registers are to be memory- 
or |/O-mapped. The format of the Relocation Regis- 
ter is depicted in Figure 8-1. 


D7 D6 D5 D4 D3 D2 ODI oO 
A31/1A30/]A29/]A28/] A27/]A26/]A25/1M /10# 
AIS] A14] A13] A127 A1t | A10] AQ 


FOR 1/0 MAPPED: A15—A9 
FOR MEMORY MAPPED: A31=A25 


0-1/0 MAPPED 
1 — MEMORY 
MAPPED 
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Figure 8-1. Relocation Register 


Note that the Relocation Register is part of the inter- 
nal register set of the 82380. It has a port address of 
7FH. Therefore, any time the content of the Reloca- 
tion Register is changed, the physical location of this 
register will also be moved. Upon reset of the 82380, 
the content of the Relocation Register will be 
cleared. This implies that the 82380 will respond to 
its |/O addresses in the range of OOOOH to OOFFH. 


8.1.1 1/O-MAPPED 82380 


As shown in the figure, Bit 0 of the Relocation Regis- 
ter determines whether the 82380 registers are to be 
memory-mapped or |/O-mapped. When Bit 0 is set 
to ‘0’, the 82380 will respond to I/O Addresses. Ad- 
dress signals BEO#-BE3#, A2-A7 will be used to 
select one of the internal registers to be accessed. 
Bit 1 to Bit 7 of the Relocation Register will corre- 
spond to AQ to A15 of the Address bus, respectively. 
Together with A8 implied to be ‘0’, A15 to A8 will be 
fully decoded by the 82380. The following shows 
how the 82380 is mapped into the I/O address 
space. 


Example 
Relocation Register = 11001110 (OCEH) 


82380 will respond to !/O address range from 
OCEOOH to OCEFFH. 


Therefore, this |1/O mapping mechanism allows the 
82380 internal registers to be located on any even, 
‘contiguous, 256 byte boundary of the system I/O 
space. 


Port Address: 7FH (Read/Write) 


8.1.2 MEMORY-MAPPED 82380 


When Bit 0 of the Relocation Register is set to ‘1’, 
the 82380 will respond to memory addresses. Again, 
Address signals BEO#-BE3#, A2-A7 will be used 
to select one of the internal registers to be ac- 
cessed. Bit 1 to Bit 7 of the Relocation Register will 
correspond to A25-A31, respectively. A24 is as- 
sumed to be ‘0’, and A8—A23 are ignored. Consider 
the following example. 


82380 


Example 


Relocation Register = 10100111 (0A7H) 
The 82380 will respond to memory addresses in 
the range of OA6XXXX00H to OA6XXXXFFH 
(where ‘X’ is don’t care). 


This scheme implies that the internal register can be 
located in any even, contiguous, 2**24 byte page of 
the memory space. 


8.2 Address Decoding 


As mentioned previously, the 82380 internal regis- 
ters do not occupy the entire contiguous 256 ad- 
dress locations. Some of the locations are ‘unoccu- | 
pied’. The 82380 always decodes the lower 8 ad- 
dress bits (AO-A7) to determine if any one of its 
registers is being accessed. If the address does not 
correspond to any of its registers, the 82380 will not 
respond. This allows external devices to be located 
within the ‘holes’ in the 82380 address space. Note 
that there are several unused addresses reserved 
for future Intel peripheral devices. 


9.0 CPU RESET AND SHUTDOWN 
DETECT 


The 82380 will activate the CPURST signal to reset 
the host processor when one of the following condi- 
tions occurs: 


— 82380 RESET is active; 


— 82380 detects a 80386 Shutdown cycle (this fea- 
ture can be disabled); 


— CPURST software command is issued to 80386. 


Whenever the CPURST signal is activated, the 
82380 will reset its own internal Slave-Bus state ma- 
chine. 


9.1 Hardware Reset 


Following a hardware reset, the 82380 will assert its 
CPURST output to reset the host processor. This 
output will stay active for as long as the RESET input 
is active. During a hardware reset, the 82380 internal 
registers will be initialized as defined in the corre- 
sponding functional descriptions. 


9.2 Software Reset 


CPURST can be generated by writing the following 
bit pattern into 82380 register location 64H. 


D7 


DO 
BEERS RRE SE hs 2a 


X = Don’t Care 
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The Write operation into this port is considered as 
an 82380 access and the internal Wait State Gener- 
ator will automatically determine the required num- 
ber of wait states. The CPURST will be active follow- 
ing the completion of the Write cycle to this port. 
This signal will last for 80 CLK2 periods. The 82380 
should not be accessed until the CPURST is deacti- 
vated. 


This internal port is Write-Only and the 82380 will 
not respond to a Read operation to this location. 
Also, during a CPU software reset command, the 
82380 will reset its Slave-Bus state machine. How- 
ever, its internal registers remain unchanged. This 
allows the operating system to distinguish a ‘warm’ 
reset by reading any 82380 internal register previ- 
ously programmed for a non-default value. The Diag- 
nostic registers can be used or this purpose (see 
Internal Control and Diagnostic Ports). 


9.3 Shutdown Detect 


The 82380 is constantly monitoring the Bus Cycle 
Definition signals (M/IO#, D/C#, R/W#) and is 
able to detect when the 80386 executes a Shutdown 
bus cycle. Upon detection of a processor shutdown, 
the 82380 will activate the CPURST output for 62 
CLK2 periods to reset the host processor. This sig- 
nal is generated after the Shutdown cycle is termi- 
nated by the READY # signal. 


Although the 82380 Wait State Generator will not 
automatically respond to a Shutdown (or Halt) cycle, 
the Wait State Control inputs (WSCO, WSC1) can be 
used to determine the number of wait states in the 
same manner as other non-82380 bus cycle. 


This Shutdown Detect feature can be enabled or dis- 
abled by writing a control bit in the Internal Control 
Port at address 61H (see Internal Control and Diag- 


Port Address: 61H (Write Only) 


SHUTDOWN 


SHUTDOWN COUNTER 3 
DETECT GATE 
O=— DISABLE O= DISABLE 
1 = ENABLE 1— ENABLE 


? a 
— intel. 
nostic Ports). This feature is disabled upon a hard- 
ware reset of the 82380. As in the case of Software 
Reset, the 82380 will reset its Slave-Bus state ma- 


chine but will not change any of its internal register 
contents. 


10.0 INTERNAL CONTROL AND 
DIAGNOSTIC PORTS 


10.1 Internal Control Port 


The format of the Internal Control Port of the 82380 
is shown in Figure 10.1. This Control Port is used to 
enable/disable the Processor Shutdown Detect 
mechanism as well as controlling the Gate inputs of 
the Timer 2 and 3. Note that this is a Write-Only port. 
Therefore, the 82380 will not respond to a read op- 
eration to this port. Upon hardware reset, this port 
will be cleared; i.e., the Shutdown Detect feature 
and the Gate inputs of Timer 2 and 3 are disabled. 


10.2 Diagnostic Ports 


Two 8-bit read/write Diagnostic Ports are provided 
in the 82380. These are two storage registers and 
have no effect on the operation of the 82380. They 
can be used to store checkpoint data or error codes 
in the power-on sequence and in the diagnostic 
service routines. As mentioned in CPU RESET AND 
SHUTDOWN DETECT section, these Diagnostic 
Ports can be used to distinguish between ‘cold’ and 
‘warm’ reset. Upon hardware reset, both Diagnostic 
Ports are cleared. The address map of these Diag- 
nostic Ports is shown in Figure 10-2. 


en ae a 


Diagnostic Port 1 (Read/Write) 80H 
Diagnostic Port 2 (Read/Write) 88H 


Figure 10-2. Address Map of Diagnostic Ports 


DS D4 D3 D2 Ot 


COUNTER 3 COUNTER 2 
ENABLE/ GATE GATE 
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NOT USED 
O= DISABLE 
1=— ENABLE 
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Figure 10-1. Internal Control Port 
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11.0 INTEL RESERVED I/O PORTS 


There are eleven I/O ports in the 82380 address 
space which are reserved for Intel future peripheral 
device use only. Their address locations are: 2AH, 
3DH, 3EH, 45H, 46H, 76H, 77H, 7DH, 7EH, CCH 
and CDH. These addresses should not be used in 
the system since the 82380 may respond to read/ 
write operations to these locations and bus conten- 


-~ 
— —_ 


EDACK1 BEO# 


o~ 
— 
A3 


~~ -o 
—_ —_ 


Wee EDACK2 ADS# BE3# 


~~ ~~ 
—_ —_ —_ 


DREQ7 HLDA EDACKO EOP# 


-~ ~~ 
— 


J 
NA# DREQ6 


- -o- 
~~ 


—_ 

DREQ2 DREQ4/IRQ9# 

~~ ~~ 
—_ —Z —Z 
IRQ23# IRQ22# DREQO 
oo ~~ ~~ 
— —Z —_ 
IRQ19# IRQ20¢ IRQ21# 
~~ oo oo 
—_ —_ —_ 
IRQ18# IRQI6# IRQI7# 


-o -«~ 
—_ 


—_ — 
IRQI5# IRQ14# IRQ134 


~~ 
—_ —_ 


IRQ11# IRQI2¢ 


READY# 


p -o- ~~ ~~ ~~ 


~~ 
— ~~ ——Z 
CPURST D/C# 
~~ o~ ~~ ~~ 

J ~~ — — ~~ 


—_ —_ 
Vgg TOUT2#/IRQ3# TOUT3# M/lO# TOUTI/REF# D024 D16 


~~ -o~~ ~~ 
J ~_w —_ —_ —_ 


J 
Vec Vss Voc Vss DE DO 


—_ 
D1 


— —_ 
W/R# HOLD READYO# 


82380 


tion may occur if any peripheral is assigned to the 
same address location. 


12.0 MECHANICAL DATA 


12.1 Introduction 


In this section, the physical package and its connec- 
tions are described in detail. 


290128-94 


Figure 12.1. 82380 PGA Pinout—View from TOP side 
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12.2 Pin Assignment 


The 82380 pinout as viewed from the top side of the 
component is shown in Figure 12.1. Its pinout as 
viewed from the pin side of the component is shown 
in Figure 12.2. 
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Vcc and GND connections must be made to multi- 
ple Vcc and Vss (GND) pins. Each Vcc and Vss 
MUST be connected to the appropriate voltage lev- 
el. The circuit board should include Voc and GND 
planes for power distribution and all Voc pins must 
be connected to the appropriate plane. 
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Figure 12.2. 82380 PGA Pinout—View from PIN side 
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Table 12-1. 82380 PGA Pinout—Functional Grouping 


82380 


A7 A8 D31 Pia Vcc Vss 
C7 B9 D30 M14 Vcc A1 Vss 
A11 D29 P1 Voc | P13 Vss 
C11 D28 P2 Vcc N1 Vss 
D12 D27 P14 Voc N2 Vss 
E13 D26 D1 Voc C1 Vss 
F14 D25 C14 Voc A3 Vss 
J13 D24 B1 Voc Bi4 Vss 
B8 D23 A2 Voc A13 Vss 
C9 D22 A4 Voc N14 Vss 
B11 D21 A12 Voc 
B13 A14 Voc P6 IRQ23 # 
N6 IRQ22# 
G14 CLK2 M7 IRQ21 # 
Gi2 D17 L12 D/C# N7 IRQ20 # 
H13 D16 K12 W/R# P7 IRQ19# 
C8 L13 M/IO# P8 IRQ18# 
K2 ADS# M8 IRQ17# 
N4 NA# N8 IRQ16# 
J12 HOLD P9 IRQ15# 
M3 HLDA N9 IRQ14# 
M6 DREQO M9 IRQ13# 
P5 DREQ1 N10 IRQ12# 
N5 DREQ2 P10 IRQ11# 
P4 DREQ3 INT 
M5 DREQ4/IRQ9# 
P3 DREQ5 N11 CLKIN 
M4 DREQ6 K13 TOUT1/REF # 


DREQ7 N13 TOUT2#/IRQ3# 
M13 TOUT3 # 

M11 READY # 

H12 READYO# 

ofl A WSCO 


WSC1 


K3 EOP# 

L3 EDACKO 
M1 EDACK1 
L2 ~ EDACK2 


CPURST 
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12.3 Package Dimensions and 
Mounting 


The 82380 package is a 132-pin ceramic Pin Grid 
Array (PGA). The pins are arranged 0.100 inch (2.54 
mm) center-to-center, in a 14 x 14 matrix, three rows 
around. 


150 (3.807) 
.250 (6.345) 
.350 (8.883) 
450 (11.421) 


| MOXOROLORORORONOIOROLO 
5066000006 


wo }| @) 


.020 (0.508) 
MIN TYP 


.070 (1.777) DIA 
TYP BRAZE PAD 
<—_—_—_—___——_ 1.450 (36.802) 


550 (13.959) 
.650 (16.497) 
— .725 (18.401) 


a 

intel. 
A wide variety of available sockets allow low inser- 
tion force or zero insertion force mountings, and a 
choice of terminals such as soldertail, surface 


mount, or wire wrap. Several applicable sockets are 
listed in Figure 12-4. : ! 


.057 (1.269) 
.725 (18.401) 
.650 (16.497) 
.550 (13.959) 
450 (11.421) 
- 350 (8.883) 
.250 (6.345) 
.150 (3.807) 
050 (1.269) 


.001 (0.025) R 


fff 0 0 ff ee ee nn 


age 
AABBBBVBBVW{*™WB?RASB 
a a 4 4 ae ae ae ae ae ae a 


SWEDGE PIN 
STANDOFF .018 (0.47) 
(4) PLACES DIA TYP 


\ 
‘ 
\ 
\ 
\ 
\ 
S 


r 
4 


.165 (4.189) 


.110 (2.792) 
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Figure 12.3. 132-Pin Ceramic PGA Package Dimensions 
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© Low insertion force (LIF) soldertail 
55274-1 
e Amp tests indicate 50% reduction in insertion 
force compared to machined sockets 
Other socket options 
© Zero insertion force (ZIF) soldertail 
55583-1 
e Zero insertion force (ZIF) Burn-in version 
55573-2 
Amp Incorporated 
(Harrisburg, PA 17105 U.S.A. 
Phone 717-564-0100) 


290128-97 
Cam handle locks in low profile position when substrate is installed 
(handle UP for open and DOWN for closed positions) 


courtesy Amp Incorporated 


Peel-A-Way Mylar and Kapton Peel-A-Way Carrier No. 132; 
Socket Terminal Carriers Kapton Carrier is KS132 Sonica | Lone | eee 
e Low insertion force surface mount Mylar Carrier is MS132 
CS132-37TG Molded Plastic Body KS132 
° Low insertion force soldertail is shown below: 
CS132-01TG 


@ Low insertion force wire-wrap 
CS132-02TG (two level) 
CS132-03TG (three-level) 


© Low insertion force press-fit 
CS132-05TG 


Advanced Interconnections 
(5 Division Street 
Warwick, RI 02818 U.S.A. 
Phone 401-885-0485) 


14x 14x 3ROWS 


290128-98 290128-99 
courtesy Advanced Interconnections 
(Peel-A-Way Terminal Carriers 
U.S. Patent No. 4442938) 


Figure 12-4. Several Socket Options for 132-pin PGA 
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e Low insertion force socket soldertail 
(for production use) 
2XX-6576-00-3308 (new style) 
2XX-6003-00-3302 (older style) 

® Zero insertion force soldertail 


(for test and burn-in use) 
2XX-6568-00-3302 


Textool Products 

Electronic Products Division/3m — 
(1410 West Pioneer Drive 

Irving, Texas 75601 U.S.A. 


Phone 214-259-2676) 


290128-A0 
courtesy Textoll Products/3M 


Figure 12-4. Several Socket Options for 132-pin PGA (Continued) 


12.4 Package Thermal Specification to determine whether the 82380 is within the speci- 
fied operating range. 


The 82380 is specified for operation when case tem- 
perature is within the range of 0°C — 85°C. The case The PGA case temperature should be measured at 


temperature may be measured in any environment, the center of the top surface opposite the pins, as in 
Figure 12.5. 


MEASURE PGA CASE TEMPERATURE 
AT CENTER OF TOP SURFACE 


132=— PIN PGA 


290128-A1 


Figure 12.5. Measuring 82380 PGA Case Temperature 
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6 Case-to-Ambient 
(with unidirectional 
heatsink) 


NOTES: 


directly into board. 

2. 05a = Ojo + Oca. 

3. Oy.cap = 4°C/W (approx.) 

65-pin = 4°C/W (inner pins) (approx.) 
6j.pin = 8°C/W (outer pins) (approx.) 


Thermal siete AO Fare 


Airflow—f3/min | Airflow—f3/min (m3/sec) 


Parameter 100 400 | 600 | 800 
(0.50) (2.03)| (3.04)| (4.06) 
@ Junction-to-Case 
(case measured 
as Fig. 6.4) 
@ Case-to-Ambient |19| 18 17 16 12 10 
(no heatsink) 
@ Case-to-Ambient |16] 15 14 12 
(with omnidirectional , 
heatsink) 
(uae 


1. Table 12-6 applies to 82380 PGA plugged into socket or soldered 


290128-A2 


Figure 12-6. 82380 PGA Package Typical Thermal Characteristics 


13.0 ELECTRICAL DATA 


13.1 Power and Grounding 


The large number of output buffers (address, data 
and control) can cause power surges as multiple 
output buffers drive new signal levels simultaneous- 
ly. The 22 Vcc and Vgs pins of the 82380 each feed 
separate functional units to minimize switching in- 
duced noise effects. All Vcc pins of the 82380 must 
be connected on the circuit board. 


13.2 Power Decoupling 


Liberal decoupling capacitance should be placed 
close to the 82380. The 82380 driving its 32-bit par- 
allel address and data buses at high frequencies can 
cause transient power surges when driving large ca- 
pacitive loads. Low inductance capacitors and inter- 


connects are recommended for the best reliability at 
high frequencies. Low inductance capacitors are 
available specifically for Pin Grid Array packages. 


13.3 Unused Pin Recommendations 


For reliable operation, ALWAYS connect unused in- 
puts to a valid logic level. As is the case with most 
other CMOS processes, a floating input will increase 
the current consumption of the component and give 
an indeterminate state to the component. 


13.4 ICE-386 Support 


The 82380 specifications provide sufficient drive ca- 
pability to support the ICE386. On the pins that are 
generally shared between the 80386 and the 82380, 
the additional loading represented by the ICE386 
was allowed for in the design of the 82380. 
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13.5 Maximum Ratings 


_ Storage Temperature .......... —65°C to + 150°C 
Case temperature Under Bias ... —65°C to + 110°C 
Supply Voltage with Respect 

ok Se ee ts eee —0.5Vio +6.5V 
Voltage on any other Pin ..... —0.5V to Voc + 0.5V 


NOTE: 


Stress above those listed above may cause perma- 
nent damage to the device. This is a stress rating 


13.6 D.C. Specifications 
Tcase = 0°C to 85°C; Voc = 


5V +5%; Vss = OV. 


i 
intel. 
only and functional operation at these or any other 


conditions above those listed in the operational 
sections of this specification is not implied. 


Exposure to absolute maximum rating conditions for 
extended periods may affect device reliability. Al- 
though the 82380 contains protective circuitry to re- 
set damage from static electric discharges, always 
take precautions against high static voltages or elec- 
tric fields. 


Table 13-1. 


[symbol [Parameter 
ie Input Low Voltage 


CLK2 Input Low Voltage 
CLK2 Input High Voltage 


VoL Output Low Voltage 
A2-A31, 
DO-D31 
lo. = 5 mA: All Others 


lo. = 4mA: 


VOH Output High Voltage 
lon = —1 mA: A2-A31, 
DO-D31 
lon = —0.9 mA: All Others 


lu Input Leakage Current for 
all ins except: 
IRQ11#-IRQ23#, 
TOUT2/IRQ3#, EOP #, DREQ4 


Input Leakage Current for 


TOUT2#/IRQ3#, EOP #, DREQ4 + | 


pins: IRQ11#-IRQ23# 


Output Leakage Current 


Supply Current 
(CAP) Capacitance (Input/IO) 


CCLK CLK2 Capacitance 


NOTES: 

1. Minimum value is not 100% tested. 

2. Sampled only. 

3. These pins have internal pullups on them. 


ie ae Input High Voltage LS Be S Voc + 0. 


(Note 1) 


OV<Vin< Mir 


OV<Vin<Voc 
(Note 3) 


0.45<Vout<Vcc 


CLK2 = 32 MHz 
= 40 MHz 
(Note Pa 


0.45 
0.45 


+ 
=a 
on 


rr 
ih 


wen = 1 MHz 
(Note 2) 


Ao) 
a 


4. lcc is specified with inputs driven to CMOS levels. Icc may be higher if driven to TTL levels. 
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13.6 D.C. Specifications (Continued) 
TcaseE = 0°C to 85°C; Voc = 5V +5%; Vssg = OV. 


Table 13-2. 82380-25 D.C. Specifications 


[Parameter in 
Tin | tputtowvotage «dt 
Finn | inputrignvotage «dt 
Tine | Lx2input ow votage | -0a 


CLK2 Input High Voltage 


VOL Output Low Voltage 
lo. = 4mA: Ag-Ag1, Do-D31 
lo. = 5mA: All Others 


VOH Output High Voltage 
loH = —1 MA: A2-Ag1, Do—Da1 
lon = —0.9 mA: All Others 


lu Input Leakage Current 
All Inputs except: IRQ11 #- 
IRQ23 4, EOP #, TOUT2/IRQ3#, 
DREQ4 


Input Leakage Current 
Inputs: IRQ11#-IRQ23#, 
EOP #, TOUT2/IRQ3#, DREQ4 


Output Leakage Current 
Supply Current (CLK2 = 50 MHz) 
C Input Capacitance 
CLK2 Input Capacitance 
NOTES: 


1. Minimum value is not 100% tested. 

2. f¢ = 1 MHz; Sampled only. 

3. These pins have weak internal pullups. They should not be left floating. 

4. Icc is specified with inputs driven to CMOS levels, and outputs driving CMOS loads. Icc may be higher if inputs are driven 
to TTL levels, or if outputs are driving TTL loads. . 


| Max 

oe 

| Voo + 0.3 

oe inet te 
| Voo + 0.3 | 


0.45 V 
0.45 V 


= 
> 


0 < Vin < Voc 
(Note 3) 


7 
sealed 
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13.7 A.C. Specifications 


The A.C. specifications given in the following tables 
consist of output delays and input setup require- 
ments. The A.C. diagram’s purpose is to illustrate 
the clock edges from which the timing parameters 
are measured. The reader should not infer any other 
timing relationships from them. For specific informa- 
tion on timing relationships between signals, refer to 
the appropriate functional section. 


OUTPUTS NOTE 2 | MIN 


BEO#—BE3#, ADS#, 1.5V 1.5V 
7 yer vy ne n A\ \K 


RDYO#, LOCK#, HOLD 


OUTPUTS 
(DO-D31) 


INPUTS 
(NA#) 


INPUTS 
(READY#, HLDA, 
A2=A31, DO-D31) 
IRO,#, ADS# 


LEGEND: 
(Al_maximum output delay spec 
(8|_-minimum output delay spec 
(C_-minimum input setup spec 
(0\_-minimum input hold spec 


NOTES: 
1. Input waveforms have tr < 2.0 ns from 0.8V to 2.0V. 


“Wk Ml 


& 

intel. 
A.C. spec measurement is defined in Figure 13.1. 
Inputs must be driven to the levels shown when A.C. 
specifications are measured. 82380 output delays 
are specified with minimum and maximum limits, 
which are measured as shown. The minimum 82380 
output delay times are hold times for external circuit- 
ry. 82380 input setup and hold times are specified as 
minimums and define the smallest acceptable sam- 
pling window. Within the sampling window, a syn- 
chronous input signal must be stable for correct 
82380 operation. 


VALID 
OUTPUT n+1 


AY 5 Ae 


een aS 


NOTE 1 


Wk" Ml 


290128-B3 


2. Under rated loading (120 pF) 82380 output tr, tf is typically < 4.0 ns from 0.8V to 2.0V. 


Figure 13-1. Drive Levels and Measurement Points for A.C. Specification 
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A.C. SPECIFICATION TABLES 
Functional Operating Range: Vcc = 5V +5%; Tcase = O°C to + 85°C 
Table 13-3. 82380 A.C. Characteristics 


ea 
ca 
aa 
em 


Pouxetowtime | 7 


A (2-31), BE (0-3) #, 
EDACK (0-2) 
Valid Delay 
Float Delay 


A (2-31), BE (0-3) # 
Setup Time 
Hold Time 


W/R#, M/IO#, D/C#, 
Valid Delay 
Float Delay 
Setup Time 
Hold Time 


ADS # Valid Delay 
Float Delay 
Setup Time 

Hold Time 


Slave Mode— 
D(O-31) Read 

Valid Delay 
Float Delay 


CL = 120 pF 
(Note 1) 


CL = 75 pF 
(Note 1) 


CL = 120 pF 
(Note 1) 


Slave Mode— 
D(O-31) Write 

Setup Time 
Hold Time 


31 
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A.C. SPECIFICATION TABLES (Continued) 
Functional Operating Range: Vcc = 5V +5%; Tcase = 0°C to + 85°C. 


Table 13-3. 82380 A.C. Characteristics (Continued) 


82380-16 82380-20 
Parameter 


| Min | Max 
Master Mode— 
4 


D(O-31) Write 
6 


Valid Delay 
Float Delay 


CL = 120 pF 
(Note 1) 


CL = 25 pF 
CL = 100 pF 


Synch. EOP 


Asynch. EOP 


CL = 75 pF 
oa 


Master Mode— 

D(O-31) Read 
Setup Time 
Hold Time 


—, 
—_ 


= 

t26 READY # Setup Time 

t27 Hold Time 

t28 WSC (0-1) Setup 

t29 Hold 

t31 RESET Setup Time 

t30 Hold Time 
| 132 «| -- READYO# Valid Delay 
ea CPU Reset From CLK2 


Twin | a 
car i A 
Te [8 
THovaiedewy | 5s | a8 
1 mes 
—. 
a 
see 
Ts | 
Ts | 0 
GE 


; 
- 


t36 Hold Time 
om | 0p —— 
es | 60 Vata 
[wo | EOP# FlostDelay 


t41a DREQ Setup Time 
t42a Hold Time 
t41b DREQ Setup Time 
t42b Hold Time 
poe ad INT Valid Delay 
t44 NA# Setup Time 
t45 Hold Time 


17 


a_i om —h | ot —_ 
a: “Gem a N 


NM © 
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A.C. SPECIFICATION TABLES (Continued) 


Functional Operating Range: Vcc = 5V +5%; Tcase = O°C to + 85°C. 


Table 13-3. 82380 A.C. Characteristics (Continued) 


CLKIN High Time At 1.5V 
CLKIN Low Time 


an 

: 
50 : 

: 

ns : 


A Ce Se ee 
a a ee ae ee 
As ae 
PCLKINFallTime | | to || 0 7Vtooey 
| TOUTIREF# Valid | 4 | 36 | 4 | 30 | FromCLk2,CL = 25pF 
| TOUTI/REF# Valid | 3 | 93 | 3 | 93 | FromOLKIN, CL = 120 pF 
8 ee ee 
ee eS ee 


TOUT2# Valid Delay From CLKIN, CL = 120 pF 


(Falling Edge Only) 
TOUT2# Float Delay 


From CLKIN (Note 1) 
| 55 | TOUT3# Valid Delay From CLKIN, CL = 120 pF 
NOTE: 


1. Float condition occurs when the maximum output current becomes less than ILO in magnitude. Float delay is not tested. 
For testing purposes, the float condition occurs when the dynamic output driven voltage changes with current loads. 


Functional Operating Range: Vcc = 5V +5%; Tcase = O°C to + 85°C. 
A.C. timings are tested at 1.5V thresholds; except as noted. 


Table 13-4. 82380-25 A.C. Characteristics 


82380-25 


125 


CLK2 High Time at 2.0V 
CLK2 High Time at 3.7V 
CLK2 Low Time at 2.0V 
CLK2 Low Time at 0.8V 
CLK2 Fall Time 3.7V to 0.8V 


0.8V to 3.7V 
50 pF Load 


CLK2 Rise Time 


A2-A31, BEO#-BE3# 
EDACKO-—EDACKS3 Valid Delay 
A2-A31, BEO# -BE3 # 


| Max 
rae 
| 125 | 
7 
EDACKO—EDACKS Float Delay 


4 20 
4 27 
t8 A2-A31, BEO#-—BE3# Setup Time 6 
t9 A2-A31, BEO#-BE3# Hold Time 4 
t10 W/R#, M/IO#, D/C# Valid Delay 4 
t11 W/R#, M/IO#, D/C# Float Delay 4 


50 pF Load 


50 pF Load 
50 pF Load 


1-573 


82380 Rig : intel. 


A.C. SPECIFICATION TABLES (Continued) 


Functional Operating Range: Vcc = 5V +5%; Tcase = 0°C to + 85°C. 
A.C. timings are tested at 1.5V thresholds; except as noted. - 


Table 13-4. 82380-25 A.C. Characteristics (Continued) 


Racal eo aT 
t12 W/R#, M/IO#, D/C# Setup Time 6 
t13 W/R#, M/IO#, D/C# Hold Time 4 
t14 ADS # Valid Delay 4 19 
t15 ADS # Float Delay 4 
t16 ADS # Setup Time 12 
t17 ADS # Hold Time 4 
ti8 Slave Mode DO-—D31 Read Valid 
t19 Slave Mode DO-D31 Read Float 
t20 Slave Mode DO-D31 Write Setup 
21 Slave Mode DO-D31 Write Hold 
t22 Master Mode DO-D31 Write Valid 
t23 Master Mode DO-D31 Write Float 


50 pF Load 
50 pF Load 


t24 Master Mode DO-D31 Read Setup 
t25 Master Mode D0O-D31 Read Hold 
t26 READY # Setup Time 
t27 READY # Hold Time 
t28 WSCO-WSC1 Setup Time 6 
t29 WSCO0-WSC1 Hold Time 15 
t30 RESET Hold Time 4 
t31 RESET Setup Time 9 
Poe ad 25 pF Load 
4 


50 pF Load 
50 pF Load 


READYO# Valid Delay 

CPURST Valid Delay 
t35 HLDA Setup Time 17 
t36 HLDA Hold Time 4 
t37a EOP # Setup (Synchronous) 13 
t38a EOP # Hold (Synchronous) 


t41a DREQ Setup (Synchronous) 17 
t42a DREQ Hold (Synchronous) 4 
t41b DREQ Setup (Asynchronous) 10 
t42b DREQ Hold (Asynchronous) 10 


t43 INT Valid Delay from IRQn 
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A.C. SPECIFICATION TABLES (Continued) 


Functional Operating Range: Vcc = 5V +5%; Tcase = 0°C to + 85°C. 
A.C. timings are tested at 1.5V thresholds; except as noted. 


Table 13-4. 82380-25 A.C. Characteristics (Continued) 


Parameter 


NA# Setup Time 
NA# Hold Time 


CLKIN Frequency 
CLKIN High Time 2.0V 

CLKIN Low Time 0.8V 

CLKIN Rise Time 0.8V to 3.7V -: 
CLKIN Fall Time 3.7V to 0.8V 


TOUT1/REF# Valid Delay 
t51 from CLK2 (Refresh) 50 pF Load 
t52 from CLKIN (Timer) 50 pF Load 


TOUT2# Valid Delay 90 50 pF Load 
(Falling Edge Only) 
TOUT2# Float Delay 50 pF Load 
a eee 50 pF Load 


82380 
OUTPUT 


290128-A4 


Figure 13-2. A.C. Test Load 


290128-A5 


Figure 13-3. CLK2 Timing 


ers 


82380 | in E 


INPUT SET— UP AND HOLD TIMING (CONT.) 


T™ 
PHI2 | PHI1 PHI2 


wSC(0 - 1) 


CLK2 


= 
o 


A(2-31), BE(O-3)# 


W/R#, M/lO#, D/C# 


READY# 


D(0 - 31) (DMA Read) 


D(O - 31) (CPU Write) 


DREQ(0 - 7) 


EUs UEU UU | 
: 


Teletetle a Hee 


290128-A6 


Figure 13-4. Input Setup and Hold Timing 


CLK2 


T33 MIN. 
CPURST am 


le T33 MAX. 


290128-A7 


Figure 13-5. Reset Timing 
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CLK2 


A(2=31), BE(O-3)# 
VALID DELAY 


A(2=31), BE(O=3)# 
EDACK(0 = 2) 
VALID DELAY 


A(2=31), BE(O=3)# 
EDACK(0 = 2) 
FLOAT. DELAY 


ADS# 
VALID DELAY 


ADS# 
VALID DELAY 


ADS# 
FLOAT DELAY 
T15Max 


T34Max 
290128-A8 


CLK2 


D(0 = 31) (CPU Read) 
T18Max 


D(O0 = 31) (Dma Write) 


D(O = 31) (Dma Write) 


D(0 - 31) (Dma Write) 


T23Max 
290128-A9 


Figure 13-7. Data Bus Output Delays 
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CLK2 


_ W/R#, M/10#,D/C# 
W/R#, M/10#,D/C# 
W/R#, M/10#,D/C# 


READYO# 


TOUT2# 


TOUT2# 


TOUT3# 
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JI 


o. 
re 
2S 
2s 


SI 


i 


CS 


T11Max 


T10Max 


ot 


it 


T32Max 


> 


VVVY 
XXX 


T39Max 


T40Mox 


Et 


T51Max 


TSSMax 


Figure 13-9. Timer Output Delays 
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Port Address (HEX) 


00 
01 
02 
03 
04 
05 
06 
07 
08 
09 
OA 
0B 
0C 
0D 
OE 
OF 
10 
mM 
12 
13 
14 
15 
16 
i¢ 
18 
19 
1A 
1B 
1C 
1E 
20 


APPENDIX A | 
Ports Listed by Address 


Description 


Read/Write DMA Channel 0 Target Address, AO-A15 

Read/Write DMA Channel 0 Byte Count, BO-—B15 

Read/Write DMA Channel 1 Target Address, AO-A15 

Read/Write DMA Channel 1 Byte Count, BO—B15 

Read/Write DMA Channel 2 Target Address, AO—A15 

Read/Write DMA Channel 2 Byte Count, BO-B15 

Read/Write DMA Channel 3 Target Address, AO-A15 

Read/Write DMA Channel 3 Byte Count, BO-B15 

Read/Write DMA Channel 0-3 Status/Command | Register 

Read/Write DMA Channel 0-3 Software Request Register 

Write DMA Channel 0-3 Set-Reset Mask Register 

Write DMA Channel 0-3 Mode Register | 

Write Clear Byte-Pointer FF 

Write DMA Master-Clear 

Write DMA Channel 0-3 Clear Mask Register 

Read/Write DMA Channel 0-3 Mask Register 

Read/Write DMA Channel 0 Target Address, A24-A31 

Read/Write DMA Channel 0 Byte Count, B16-B23 

Read/Write DMA Channel 1 Target Address, A24-A31 

Read/Write DMA Channel 1 Byte Count, B16-B23 

Read/Write DMA Channel 2 Target Address, A24-A31 

Read/Write DMA Channel 2 Byte Count, B16-B23 

Read/Write DMA Channel 3 Target Address, A24-—A31 

Read/Write DMA Channel 3 Byte Count, B16-B23 

Write DMA Channel 0-3 Bus Size Register 

Read/Write DMA Channel 0-3 Chaining Register 

Write DMA Channel 0-3 Command Register II 

Write DMA Channel 0-3 Mode Register II 

Read/Write Refresh Control Register 

Reset Software Request Interrupt 

Write Bank B ICW1, OCW2, or OCW3 

Read Bank B Poll, Interrupt Request or In-Service 
Status Register 

Write Bank B ICW2, ICW3, ICW4 or OCW1 

Read Bank B Interrupt Mask Register 

Read Bank B .ICW2 

Read/Write IRQ8 Vector Register 

Read/Write IRQ9 Vector Register 

Reserved 

Read/Write IRQ11 Vector Register 

Read/Write IRQ12 Vector Register 

Read/Write IRQ13 Vector Register 

Read/Write IRQ14 Vector Register 

Read/Write IRQ15 Vector Register 


82380 
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APPENDIX A—Ports Listed by Address (Continued) 


Port Address (HEX) Description 
30 Write Bank A ICW1, OCW2 or OCW3 
Read Bank A Poll, Interrupt Request or In-Service 
Status Register 
31 Write Bank A ICW2, ICW3, ICW4 or OCW1 
Read Bank A Interrupt Mask Register 
32 Read Bank A ICW2 
38 Read/Write IRQO Vector Register 
39 Read/Write IRQ1 Vector Register 
3A Read/Write IRQ1.5 Vector Register 
3B Read/Write IRQ3 Vector Register 
3C Read/Write IRQ4 Vector Register 
3D Reserved 
3E Reserved 
3F Read/Write IRQ7 Vector Register 
40 Read/Write Counter 0 Register 
41 Read/Write Counter 1 Register 
42 Read/Write Counter 2 Register 
43 Write Control Word Register |—Counter 0, 1, 2 
44 Read/Write Counter 3 Register 
45 Reserved 
46 Reserved 
47 Write Word Register II—Counter 3 
61 Write Internal Control Port 
64 Write CPU Reset Register (Data-1111XXX0OH) 
72 Read/Write Wait State Register 0 
73 Read/Write Wait State Register 1 
74 Read/Write Wait State Register 2 
7a Read/Write Refresh Wait State Register 
76 Reserved 
77 Reserved 
7D Reserved 
7E Reserved 
1F Read/Write Relocation Register 
80 Read/Write Internal Diagnostic Port 0 
81 Read/Write DMA Channel 2 Target Address, A16-—A23 
82 Read/Write DMA Channel 3 Target Address, A16-A23 
83 Read/Write DMA Channel 1 Target Address, A16-A23 
87 Read/Write DMA Channel 0 Target Address, A16-A23 
88 Read/Write Internal Diagnostic Port 1 
89 Read/Write DMA Channel 6 Target Address, A16-—A23 
BA Read/Write DMA Channel 7 Target Address, A16-A23 
8B Read/Write DMA Channel 5 Target Address, A16-A23 
8F Read/Write DMA Channel 4 Target Address, A16-A23 
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APPENDIX A—Ports Listed by Address (Continued) 


Port Address (HEX) 


90 
91 
92 
93 
94 
95 
96 
97 
98 
99 
9A 
9B 
9C 
9D 
9E 
OF 
AO 


A1 


Description 


Read/Write DMA Channel 0 Requester Address, AO-A15 
Read/Write DMA Channel 0 Requester Address, A16-A31 
Read/Write DMA Channel 1 Requester Address, AO-A15 
Read/Write DMA Channel 1 Requester Address, A16-A31 
Read/Write DMA Channel 2 Requester Address, AO-—A15 
Read/Write DMA Channel 2 Requester Address, A16-A31 
Read/Write DMA Channel 3 Requester Address, AO—A15 
Read/Write DMA Channel 3 Requester Address, A16—-A31 
Read/Write DMA Channel 4 Requester Address, AO-A15 
Read/Write DMA Channel 4 Requester Address, A16—A31 
Read/Write DMA Channel 5 Requester Address, AO-A15 
Read/Write DMA Channel 5 Requester Address, A16-A31 
Read/Write DMA Channel 6 Requester Address, AO-—A15 
Read/Write DMA Channel 6 Requester Address, A16-—A31 
Read/Write DMA Channel 7 Requester Address, AO-A15 
Read/Write DMA Channel 7 Requester Address, A16—A31 
Write Bank C ICW1, OCW2 or OCW3 
Read Bank C Poll, Interrupt Request or In-Service 

Status Register 
Write Bank C ICW2, ICW3, ICW4 or OCW1 
Read Bank C Interrupt Mask Register 
Read Bank C ICW2 
Read/Write IRQ16 Vector Register 
Read/Write |RQ17 Vector Register 
Read/Write IRQ18 Vector Register 
Read/Write IRQ19 Vector Register 
Read/Write IRQ20 Vector Register 
Read/Write IRQ21 Vector Register 
Read/Write IRQ22 Vector Register 
Read/Write IRQ23 Vector Register 
Read/Write DMA Channel 4 Target Address, AO-A15 
Read/Write DMA Channel 4 Byte Count, BO-B15 
Read/Write DMA Channel 5 Target Address, AO-A15 
Read/Write DMA Channel 5 Byte Count, BO-B15 
Read/Write DMA Channel 6 Target Address, AO-A15 
Read/Write DMA Channel 6 Byte Count, BO-B15 
Read/Write DMA Channel 7 Target Address, AO-A15 
Read/Write DMA Channel 7 Byte Count, BO-B15 
Read DMA Channel 4-7 Status/Command | Register 
Read/Write DMA Channel 4-7 Software Request Register 
Write DMA Channel 4-7 Set—Reset Mask Register 
Write DMA Channel 4-7 Mode Register | 
Reserved 
Reserved 
Write DMA Channel 4-7 Clear Mask Register 
Read/Write DMA Channel 4-7 Mask Register 
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APPENDIX A—Ports Listed by Address (Continued) 


Port Address (HEX) Description 
DO Read/Write DMA Channel 4 Target Address, A24-A31 
Di Read/Write DMA Channel 4 Byte Count, B16-B23 
D2 Read/Write DMA Channel 5 Target Address, A24-—A31 
D3 Read/Write DMA Channel 5 Byte Count, B16-B23 
D4 Read/Write DMA Channel 6 Target Address, A24-A31 
D5 Read/Write DMA Channel 6 Byte Count, B16-B23 
D6 Read/Write DMA Channel 7 Target Address, A24-A31 
D7 Read/Write DMA Channel 7 Byte Count, B16-B23 
D8 Write DMA Channel 4-7 Bus Size Register 
D9 Read/Write DMA Channel 4-7 Chaining Register 
DA Write DMA Channel 4-7 Command Register II 
DB Write DMA Channel 4-7 Mode Register II 
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Port Address (HEX) 


0D 
0C 


08 
C8 
1A 
DA 


0B 
CB 
1B 
DB 


09 
C9 
1E 


OE 
CE 
OF 
CF 
OA 
CA 


18 
D8 


19 
D9 


00 
87 
10 
01 
11 
90 
91 


02 
83 
12 
03 
13 
92 
93 


APPENDIX B 


Ports Listed by Function 


Description 


DMA CONTROLLER 
Write DMA Master-Clear 
Write DMA Clear Byte-Pointer FF 


Read/Write DMA Channel 0-3 Status/Command | Register 
Read/Write DMA Channel 4-7 Status/Command | Register 
Write DMA Channel 0-3 Command Register II 
Write DMA Channel 4-7 Command Register II 


Write DMA Channel 0-3 Mode Register | 
Write DMA Channel 4-7 Mode Register | 
Write DMA Channel 0-3 Mode Register II 
Write DMA Channel 4-7 Mode Register II 


Read/Write DMA Channel 0-3 Software Request Register 
Read/Write DMA Channel 4-7 Software Request Register 
Reset Software Request Interrupt 


Write DMA Channel 0-3 Clear Mask Register 
Write DMA Channel 4-7 Clear Mask Register 
Read/Write DMA Channel 0-3 Mask Register 
Read/Write DMA Channel 4-7 Mask Register 
Write DMA Channel 0-3 Set-Reset Mask Register 
Write DMA Channel 4-7 Set-Reset Mask Register 


Write DMA Channel 0-3 Bus Size Register 
Write DMA Channel 4-7 Bus Size Register 


Read/Write DMA Channel 0-3 Chaining Register 
Read/Write DMA Channel 4-7 Chaining Register 


Read/Write DMA Channel 0 Target Address, AO-A15 
Read/Write DMA Channel 0 Target Address, A16-A23 
Read/Write DMA Channel 0 Target Address, A24-A31 
Read/Write DMA Channel 0 Byte Count, BO-B15 
Read/Write DMA Channel 0 Byte Count, B16-—B23 
Read/Write DMA Channel 0 Requester Address, AO-A15 
Read/Write DMA Channel 0 Requester Address, A16-A31 


Read/Write DMA Channel 1 Target Address, AO-A15 
Read/Write DMA Channel 1 Target Address, A16-A23 
Read/Write DMA Channel 1 Target Address, A24-A31 
Read/Write DMA Channel 1 Byte Count, BO—-B15 
Read/Write DMA Channel 1 Byte Count, B16-—B23 
Read/Write DMA Channel 1 Requester Address, AO-A15 
Read/Write DMA Channel 1 Requester Address, A16-—A31 
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APPENDIX B—Ports Listed by Function (Continued) 


Port Address (HEX) Description 
DMA CONTROLLER 
04 Read/Write DMA Channel 2 Target Address, AO-A15 
81 Read/Write DMA Channel 2 Target Address, A16-—A23 
14 Read/Write DMA Channel 2 Target Address, A24-A31 
05 Read/Write DMA Channel 2 Byte Count, BO-B15 
15 Read/Write DMA Channel 2 Byte Count, B16-B23 
94 Read/Write DMA Channel 2 Requester Address, AO—A15 
95 Read/Write DMA Channel 2 Requester Address, A16-A31 
06 Read/Write DMA Channel 3 Target Address, AO—-A15 
82 Read/Write DMA Channel 3 Target Address, A16-A23 
16 Read/Write DMA Channel 3 Target Address, A24-A31 
07 Read/Write DMA Channel 3 Byte Count, BO-B15 
17 Read/Write DMA Channel 3 Byte Count, B16-B23 
96 Read/Write DMA Channel 3 Requester Address, AO—A15 
97 Read/Write DMA Channel 3 Requester Address, A16-—A31 
Co Read/Write DMA Channel 4 Target Address, AO-A15 
8F Read/Write DMA Channel 4 Target Address, A16-—A23 
DO Read/Write DMA Channel 4 Target Address, A24-—A31 
C1 Read/Write DMA Channel 4 Byte Count, BO-B15 
D1 Read/Write DMA Channel 4 Byte Count, B16-B23 
98 Read/Write DMA Channel 4 Requester Address, AO-—A15 
99 Read/Write DMA Channel 4 Requester Address, A16-A31 
C2 Read/Write DMA Channel 5 Target Address, AO-—A15 
8B Read/Write DMA Channel 5 Target Address, A16-—A23 
D2 Read/Write DMA Channel 5 Target Address, A24—-A31 
C3 Read/Write DMA Channel 5 Byte Count, BO—B15 
D3 Read/Write DMA Channel 5 Byte Count, B16-—B23 
9A Read/Write DMA Channel 5 Requester Address, AO-A15 
9B Read/Write DMA Channel 5 Requester Address, A16-A31 
C4 Read/Write DMA Channel 6 Target Address, AO—A15 
89 Read/Write DMA Channel 6 Target Address, A16-A23 
D4 Read/Write DMA Channel 6 Target Address, A24—A31 
C5 Read/Write DMA Channel 6 Byte Count, BO-B15 
D5 ~ Read/Write DMA Channel 6 Byte Count, B16-B23 
9C Read/Write DMA Channel 6 Requester Address, AO-A15 
9D Read/Write DMA Channel 6 Requester Address, A16-A31. 
Cé Read/Write DMA Channel 7 Target Address, AO-A15 
8A Read/Write DMA Channel 7 Target Address, A16—A23 
D6 Read/Write DMA Channel 7 Target Address, A24-A31 
C7 Read/Write DMA Channel 7 Byte Count, BO-B15 
D7 Read/Write DMA Channel 7 Byte Count, B16-—B23 
9E Read/Write DMA Channel 7 Requester Address, AO-A15 
OF Read/Write DMA Channel 7 Requester Address, A16-A31 
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APPENDIX B—Ports Listed by Function (Continued) 


Port Address (HEX) Description 
INTERRUPT CONTROLLER 
20 Write Bank B ICW1, OCW2, or OCW3 
Read Bank B Poll, Interrupt Request or In-Service 
Status Register 
21 Write Bank B ICW2, ICW3, ICW4 or OCW1 
Read Bank B Interrupt Mask Register 
22 Read Bank B ICW2 
28 Read/Write IRQ8 Vector Register 
29 Read/Write IRQ9 Vector Register 
2A Reserved 
2B Read/Write |IRQ11 Vector Register 
2C Read/Write IRQ12 Vector Register 
2D | Read/Write |RQ13 Vector Register 
2E Read/Write IRQ14 Vector Register 
2F Read/Write |RQ15 Vector Register 
AO Write Bank C ICW1, OCW2 or OCW3 
Read Bank C Poll, Interrupt Request or In-Service 
Status Register 
Al Write Bank C ICW2, ICW3, ICW4 or OCW1 
Read Bank C Interrupt Mask Register 
A2 Read Bank C ICW2 
A8 Read/Write |RQ16 Vector Register 
AQ Read/Write IRQ17 Vector Register 
AA Read/Write IRQ18 Vector Register 
AB Read/Write |RQ19 Vector Register 
AC Read/Write IRQ20 Vector Register 
AD Read/Write IRQ21 Vector Register 
AE Read/Write IRQ22 Vector Register 
AF Read/Write |IRQ23 Vector Register 
30 Write Bank A ICW1, OCW2 or OCW3 
Read Bank A Poll, Interrupt Request oor In-Service 
Status Register 
31 Write Bank A ICW2, ICW3, ICW4 or OCW1 
Read Bank A Interrupt Mask Register 
32 Read Bank A ICW2 
38 Read/Write IRQO Vector Register 
39 Read/Write IRQ1 Vector Register 
3A Read/Write IRQ1.5 Vector Register 
3B Read/Write IRQ3 Vector Register 
3C Read/Write IRQ4 Vector Register 
3D Reserved 
3E Reserved 
3F Read/Write IRQ7 Vector Register 
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APPENDIX B—Ports Listed by Function (Continued) 
Port Address (HEX) Description 


40 
41 
42 
43 
44 


47 


64 


72 
73 
74 
75 


1C 


61 
80 
88 


7F 
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PROGRAMMABLE INTERVAL TIMER 


Read/Write Counter 0 Register 

Read/Write Counter 1 Register 

Read/Write Counter 2 Register 

Write Control Word Register |—Counter 0, 1, 2 
Read/Write Counter 3 Register 

Write Word Register |i—Counter 3 


CPU RESET 
Write CPU Reset Register (Data-1 111 XXX0OH) 


WAIT STATE GENERATOR 


Read/Write Wait State Register 0 
Read/Write Wait State Register 1 
Read/Write Wait State Register 2 
Read/Write Refresh Wait State Register 


DRAM REFRESH CONTROLLER 
Read/Write Refresh Control Register 
INTERNAL CONTROL AND DIAGNOSTIC PORTS 


Write Internal Control Port 
Read/Write Internal Diagnostic Port 0 
Read/Write Internal Diagnostic Port 1 


RELOCATION REGISTER 
Read/Write Relocation Register 
INTEL RESERVED PORTS 


Reserved 
Reserved 
Reserved 
Reserved 
Reserved 
Reserved 
Reserved 
Reserved 
Reserved 
Reserved 
Reserved 
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APPENDIX C 
Pin Descriptions 


The 82380 provides all of the signals necessary to 
interface it to an 80386 processor. It has separate 
32-bit address and data buses. It also has a set of 
control signals to support operation as a bus master 
or a bus slave. Several special function signals exist 
on the 82380 for interfacing the system support pe- 
ripherals to their respective system counterparts. 
Following are the definitions of the individual pins of 
the 82380. These brief descriptions are provided as 
a reference. Each signal is further defined within the 
sections which describe the associated 82380 func- 
tion. 

A2-A31 1/0 ADDRESS BUS 

This is the 32-bit address bus. The addresses are 
doubleword memory and !|/O addresses. These are 
three-state signals which are active only during Mas- 
ter mode. The address lines should be connected 
directly to the 80386’s local bus. 

BEO# 1/0 BYTE-ENABLE 0 

BEO # active indicates that data bits D0-D7 are be- 
ing accessed or are valid. It is connected directly to 
the 80386’s BEO#. The byte enable signals are ac- 
tive outputs when the 82380 is in the Master mode. 
BE1# I/O BYTE-ENABLE 1 

BE1# active indicates that data bits D8-D15 are 
being accessed or are valid. It is connected directly 
to the 80386’s BE1#. The byte enable signals are 
active only when the 82380 is in the Master mode. 
BE2# 1/0 BYTE-ENABLE 2 

BE2# active indicates that data bits D15-D23 are 
being accessed or are valid. It is connected directly 
to the 80386’s BE2#. The byte enable signals are 
active only when the 82380 is in the Master mode. 
BE3# I/O BYTE-ENABLE 3 

BE3# active indicates that data bits D24-D31 are 
being accessed or are valid. The byte enable signals 
are active only when the 82380 is in the Master 
mode. This pin should be connected directly to the 
80386’s BE3#. This pin is used for factory testing 
and must be low during reset. The 80386 drives 
BE3# low during reset. 


DO-D31 I/O DATA BUS 

This is the 32-bit data bus. These pins are active 
outputs during interrupt acknowledges, during Slave 
accesses, and when the 82380 is in the Master 
mode. 

CLK2 | PROCESSOR CLOCK 

This pin must be connected to CLK2. The 82380 
monitors the phase of this clock in order to remain 
synchronized with the 80386. This clock drives all of 
the internal synchronous circuitry. 

D/C# I/O DATA/CONTROL 

D/C# is used to distinguish between 80386 control 
cycles and DMA or 80386 data access cycles. It is 
active as an output only in the Master mode. 
W/R# I/O WRITE/READ 

W/R # is used to distinguish between write and read 
cycles. It is active as an output only in the Master 
mode. 

M/lIO# 1/O MEMORY /IO 

M/lO# is used to distinguish between memory and 
lO accesses. It is active as an output only in the 
Master mode. 
ADS # I/O ADDRESS STATUS 

This signal indicates presence of a valid address on 
the address bus. It is active as output only in the 
Master mode. ADS # is active during the first T-state 
where addresses and control signals are valid. 
NA# | NEXT ADDRESS 

Asserted by a peripheral or memory to begin a pipe- 
lined address cycle. This pin is monitored only while 
the 82380 is in the Master mode. In the Slave mode, 


pipelining is determined by the current and past 
status of the ADS# and READY # signals. 
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HOLD O HOLD REQUEST 

This is an active-high signal to the 80386 to request 
control of the system bus. When control is granted, 
the 80386 activates the hold acknowledge signal 
(HLDA). 
HLDA | HOLD ACKNOWLEDGE 

This input signal tells the DMA controller that the 
80386 has relinquished control of the system bus to 
the DMA controller. 

DREQ (0-3, 5-7) | DMA REQUEST 
The DMA Request inputs monitor requests from pe- 
ripherals requiring DMA service. Each of the eight 
DMA channels has one DREQ input. These active- 
high inputs are internally synchronized and priori- 
tized. Upon reset, channel 0 has the highest priority 
and channel 7 the lowest. 


DREQ4/IRQ9 # | DMA/INTERRUPT ~~ RE- 
QUEST | 

This is the DMA request input for channel 4. It is also 
connected to the interrupt controller via interrupt re- 
quest 9. This internal connection is available for 
DMA channel 4 only. The interrupt input is active low 
and can be programmed as either edge of level trig- 
gered. Either function can be masked by the appro- 
priate mask register. Priorities of the DMA channel 
and the interrupt request are not related but follow 
the rules of the individual controllers. 


Note that this pin has a weak internal pull-up. This 
causes the interrupt request to be inactive, but the 
DMA request will be active if there is no external 
connection made. Most applications will require that 
either one or the other of these functions be used, 
but not both. For this reason, it is advised that DMA 
channel 4 be used for transfers where a software 
request is more appropriate (such as memory-to- 
memory transfers). In such an application, DREQ4 
can be masked by software, freeing IRQ9# for other 
purposes. 

EOP # 1/0 END OF PROCESS 

As an output, this signal indicates that the current 
Requester access is the last access of the currently 
operating DMA channel. It is activated when Termi- 
nal Count is reached. As an input, it signals the DMA 
channel to terminate the current buffer and proceed 
to the next buffer, if one is available. This signal may 
be programmed as an asynchronous or synchro- 
nous input. 
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EOP# must be connected to a pull-up resistor. This 


will prevent erroneous external requests for termina- 
tion of a DMA process. 


EDACK (0-2) O ENCODED DMA ACKNOWL- 
EDGE 


These signals contain the encoded acknowledge- 
ment of a request for DMA service by a peripheral. 
The binary code formed by the three signals indi- 
cates which channel is active. Channel 4 does not 
have a DMA acknowledge. The inactive state is indi- 
cated by the code 100. During a Requester access, 
EDACK presents the code for the active DMA chan- 
nel. During a Target access, EDACK presents the 
inactive code 100. 
IRQ (11-23) # | INTERRUPT REQUEST 
These are active low interrupt request inputs. The 
inputs can be programmed to be edge or level sensi- 
tive. Interrupt priorities are programmable as either 
fixed or rotating. These inputs have weak internal 
pull-up resistors. Unused interrupt request inputs 
should be tied inactive externally. 

INT O INTERRUPT OUT 

INT signals the 80386 that an interrupt request is 
pending. 
CLKIN | TIMER CLOCK INPUT 

This is the clock input signal to all of the 82380’s 
programmable timers. It is independent of the sys- 
tem clock input (CLK2). 


TOUT1/REF# O TIMER 1 OUTPUT/REFRESH 


This pin is software programmable as either the di- 
rect output of Timer 1, or as the indicator of a refresh 
cycle in progress. As REF #, this signal is active dur- 
ing the memory read cycle which occurs during re- 
fresh. 


TOUT2#/IRQ3# 1/0 TIMER 2 OUTPUT/IN- 
TERRUPT REQUEST3 


This is the inverted output of Timer 2. It is also con- 
nected directly to interrupt request 3. External hard- 
ware can use IRQ3# if Timer 2 is programmed as 
OUT =0 (TOUT2# = 1) 


TOUT3 # O TIMER 3 OUTPUT 


This is the inverted output of Timer 3. 


| 
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READY # | READY INPUT 

This active-low input indicates to the 82380 that the 
current bus cycle is complete. READY is sampled by 
the 82380 both while it is in the Master mode, and 
while it is in the Slave mode. 

WSC (0-1) | WAIT STATE CONTROL 
WSCO0 AND WSC‘1 are inputs used by the Wait-State 
Generator to determine the number of wait states 
required by the currently accessed memory or I/O. 
The binary code on these ins, combined with the M/ 
lO# signal, selects an internal register in which a 
wait-state count is stored. The combination WSC = 
11 disables the wait-state generator. 

READYO# O READY OUTPUT 

This is the synchronized output of the wait-state 
generator. It is also valid during 80386 accesses to 
the 82380 in the Slave Mode when the 82380 re- 
quires wait states. READYO# should feed directly 
the 80386’s READY # input. 


82380 


RESET | RESET 

This synchronous input serves to initialize the state 
of the 82380 and provides basis for the CPURST 
output. RESET must be held active for at least 15 
CLK2 cycles in order to guarantee the state of the 
82380. After Reset, the 82380 is in the Slave mode 
with all outputs except timers and interrupts in their 
inactive states. The state of the timers and interrupt 
controller must be initialized through software. This 
input must be active for the entire time required by 
the 80386 to guarantee proper reset. 

CPURST O CPU RESET 

CPURST provides a synchronized reset signal for 
the CPU. It is activated in the event of a software 
reset command, an 80386 shut-down detect, or a 
hardware reset via the RESET pin. The 82380 holds 
CPURST active for 62 clocks in response to either a 
software reset command or a shut-down detection. 
Otherwise CPURST reflects the RESET input. 


Voc + 5V input power 
Vss Ground 


Table C-1. Wait-State Select Inputs 


Port Wait-State Registers 
Address : D4 


72H Memory 0 : 
73H Memory 1 
74H Memory 2 


DISABLED 


Select Inputs 
WSC1 WSCO 


0 


D3 DO 


1 
1 
1 
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APPENDIX D 
82380 System Notes 


82380 TIMER UNIT SYSTEM NOTES 


The 82380 DMA controller with Integrated System 
Peripherals is functionally inconsistent with the data 
sheet. This document explains the behavior of the 
_ 82380 Timer Unit and outlines subsequent limita- 

tions of the timer unit. This document also provides 
recommended workarounds. 


1.0 WRITE CYCLES TO THE 82380 
TIMER UNIT 


This errata applies only to SLAVE WRITE cycles to 
the 82380 timer unit. During these cycles, the data 
being written into the 82380 timer unit may be cor- 
rupted if CLKIN is not inhibited during a certain “win- 
dow” of the write cycle. 


1.1 Description 


Please refer to Figure 1. 


During write cycles to the 82380 timer unit, the 
82380 translates the 386DX interface signals such 
as ADS#, W/R#, M/IO#, and D/C# into several 
internal signals that control the operation of the in- 
ternal sub-blocks (e.g., Timer Unit). 


The 82380 timer unit is controlled by such internal 
signals. These internal signals are generated and 
sampled with respect to two separate clock signals: 
CLK2 (the system clock) and CLKIN (the 82380 tim- 
er unit clock). 


Since the CLKIN and CLK2 clock signals are used 
internally to generate control signals for the inter- 
face to the timer unit, some timing parameters must 
be met in order for the interface logic to function 
properly. 


Those timing parameters are met by inhibiting the 
CLKIN signal for a specific window during Write Cy- 
cles to the 82380 Timer Unit. 


The CLKIN signal must be inhibited using external 


logic, as the GATE function of the 82380 timer unit is 
not guaranteed to totally inhibit CLKIN. 


1-590 


1.2 Consequences 


This CLKIN inhibit circuitry guarantees proper write 
cycles to the 82380 timer unit. ' 


Without this solution, write cycles to the 82380 timer 
unit could place corrupted data into the timer unit 
registers. This, in turn, could yield inaccurate results 
and improper timer operation. 


The proposed solution would involve a hardware 
modification for existing systems. 


1.3 Solution 


A timing waveform (Figure 2) shows the specific win- 
dow during which CLKIN must be inhibited. Please 
note that CLKIN must only be inhibited during the 
window shown in Figure 2. This window is defined by 
two AC timing parameters: 


tg = 9ns 
‘th = 28ns 


The proposed solution provides a certain amount of 
system ‘“‘guardband” to make sure that this window 
is avoided. 


PAL equations for a suggested workaround are also 
included. Please refer to the comments in the PAL 
codes for stated assumptions of this particular work- 
around. A state diagram (Figure 3) is provided to 
help clarify how this PAL is designed. 


Figure 4 shows how this PAL would fit into a system 
workaround. In order to show the effect of this work- 
around on the CLKIN signal, Figure 5 shows how 
CLKIN is inhibited. Note that you must still meet the 
CLKIN AC timing parameters (e.g., t47 (min), tag 
(min)) in order for the timer unit to function properly. 


Please note that this workaround has not been test- 
ed. It is provided as a suggested solution. Actual 
solutions will vary from system to system. 


1.4 Long Term Plans 


Intel has no plans to fix this behavior in the 82380 
timer unit. 


in 82380 


module Timer_82380_Fix 
flag ‘=-r2",*-q2','=fl', *=-t4", *<wl,3,6,5,4,16,7,12,17,18,15,14' 
title '82380 Timer Unit CLKIN 
INHIBIT signal PAL Solution ' 
Timer_Unit_Fix device 'P16R6'; 


"This PAL inhibits the CLKIN signal (that comes from an oscillator) 
"during Slave Writes to the 82380 Timer unit. 
" 


"ASSUMPTION : This PAL assumes that an external system address 
decoder provides a signal to indicate that an 823580 
Timer Unit access is taking place. This input 
Signal is called TMR in this PAL. This PAL also 
assumes that this TMR signal occurs during a 
specific T-State. Please see Figure 3 of this 
document to see when this signal is expected to 

be active by this PAL. 


"NOTE: This PAL does not support ae gaa 82380 SLAVE 

. cycles. 

i] 

"(c) Intel Corporation 1989. This PAL is provided as a proposed 
"method of solving a certain 82380 Timer Unit problem. This PAL 
"has not been tested or validated. Please validate this solution 
Mil your system and application. 
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"Input Pins" 


CLK2 
RESET 
TMR 


'RDY 
'!ADS 
CLK 
W_R 
nel 
ne3 
GNDa 
GNDb 
CLKIN_IN 


"Output Pins" 
Q_0 

CLKIN_OUT 
INHIBIT 


SO 
Sl 


"Declarations" 


; "System Clock 

; "Microprocessor RESET signal 

; "Input from Address Decoder, indicating 

"an access to the timer unit of the 

"823580. 

"End of Cycle indicator 

"Address and control strobe 

"PHI2 clock 

"Write/Read Signal" 

"No Connect 0" 

; "No Connect 1" 

; "Tied to ground, documentation only 

; "Output enable, documentation only 
"Input-CLKIN directly from oscillator 


COON DOS 
we we we we we we 


"Internal signal only, fed back to 
"Pal, logic* 

"CLKIN signal fed to 82380 Timer Unit 
"CLKIN Inhibit signal 

"Unused State Indicator Pin 

"Unused State Indicator Pin 


Valid_ADS = ADS & CLK ; "ADS# Sampled in PHI1 of 386DX T-State 


Valid_RDY = RDY & CLK "RDY# Sampled in PHI1 of 386DX T-State 


Timer_Acc TMR & CLK "Timer Unit Access, as provided by 


"external Address Decoder " 


State_Diagram [INHIBIT, Sl, SO] 


state 000: 


State OOL: 


State 010: 


State 110: 
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if RESET then 000 
else if Valid_ADS & W_R then 001 
else 000; 


if RESET then 000 

else if Timer_Acc then 010 
else if !Timer_Acc then 000 
else OO1; 


if RESET then 000 
else if CLK then 110 
else 010; 


if RESET then 000 
else if CLK then 11l 
else 110; 
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State lll: if RESET then 000 
else if CLK then Oll 
else 1ll; 


if RESET then 000 
else if Valid_RDY then 000 
else Oll; 


State 100: if RESET then 000 
else 000; 


State 101: if RESET then 000 
else 000; 


EQUATIONS 


Q.0 := CLKIN_IN ; "Latched incoming clock. This signal is used 
"internally to feed into the MUX-ing logic" 


CLKIN_OUT := (INHIBIT & CLKIN_OUT & !RESET) 
+( tINHIBIT & Q_O & !RESET) ; 


"Equation for CLKIN_OUT. This 
"feeds directly to the 82380 Timer Unit." 


END 
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- Reduced Equations: 


{INHIBIT s= (!CLK & !INHIBIT # CLK & SO # RESET # !5S1) ; 


{Sl := (RESET 
# INHIBIT & !Sl 
# CLK & !INHIBIT & !~RDY & SO & Sl 
# !CLK & !S1l 
# !Sl1 & !IMR 
# !SO0 & !S1) ; 


(RESET 
INHIBIT & !Sl 
CLK & !INHIBIT & !~RDY & Sl 
CLK & !S0 
‘INHIBIT & !SO & Sl 
SO & !Sl 
‘Sl & !W_R 
~ADS & !S1) ; 
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1Q..0 s= ( SCLKIN_IN) ; 


!ICLKIN_OUT := (RESET # !CLKIN_OUT & INHIBIT # !INHIBIT & !Q_0) ; 
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end of module Timer_82380_Fix 
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Figure 1. Translation of 386DX Signals to Internal 82380 Timer Unit Signals 


1-594 


82380 


SU gg = 
sug = 
68-82 L06c 


AX za revs KIKI AKAXKAAXKAAXAK NATO 


LISIHNI 
OAQV3Y 
Sp ate 


en SS Se Se SR SS OY Rs eS 1e-Zuday 


19 


e190 


Figure 2. 82380 Timer Unit Write Cycle 
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Figure 3. State Diagram for Inhibit Signal 
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NOTE: 
This solution does not support pipelined 82380 SLAVE Cycles. 


Figure 4. System with 82380 Timer Unit “Inhibit” Circuitry 
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Figure 5(b). Inhibited CLKIN in an 82380 Timer Unit and CLKIN Minimum LOW Time | 
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82380 DATA SHEET REVISION HISTORY 


Changes in this revision: 

Figure 4-1: | Added details about IRQ3# and IRQ2#/IRQ1.5#. 

Section 5.2.1: Added note referring reader to Appendix D (System Notes). 
Table 13-2: © Changed Vic MIN to Voc — 0.8V. 


Figure 13-1: | Changed signal names to reflect accurate drive levels and measurement points for those sig- 
nals. 


Appendix D: Added this appendix to explain the restrictions on the CLKIN signal of the 82380 Timer Unit. 
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82370 
INTEGRATED SYSTEM PERIPHERAL 
m High Performance 32-Bit DMA = Programmable Wait State Generator 
Controller for 16-Bit Bus —0 to 15 Wait States Pipelined 
— 16 MBytes/Sec Maximum Data — 1 to 16 Wait States Non-Pipelined 


Transfer Rate at 16 MHz 


= DRAM Refresh Controller 
— 8 Independently Programmable 
Channels m 80376 Shutdown Detect and Reset 


Control 


@ 20-Source Interrupt Controller — Software/Hardware Reset 


— Individually Programmable Interrupt 


Vectors m High Speed CHMOS Ill Technology 
— 15 External, 5 Internal Interrupts m 100-Pin Plastic Quad Flat-Pack Package 
— 82C59A Superset and 132-Pin Pin Grid Array Package 
gw Four 16-Bit Programmable interval (See Packaging Handbook Order #240800-001, Package Type 
Timers NG or Package Type A) 
— 82C54 Compatible = Optimized for Use with the 80376 


' Microprocessor 
— Resides on Local Bus for Maximum 
Bus Bandwidth 
— 16 MHz Clock 


m Software Compatible to 82380 


The 82370 is a multi-function support peripheral that integrates system functions necessary in an 80376 
environment. It has eight channels of high performance 32-bit DMA (32-bit internal, 16-bit external) with the 
most efficient transfer rates possible on the 80376 bus. System support peripherals integrated into the 82370 
provide Interrupt Control, Timers, Wait State generation, DRAM Refresh Control, and System Reset logic. 


The 82370’s DMA Controller can transfer data between devices of different data path widths using a single 
channel. Each DMA channel operates independently in any of several modes. Each channel has a temporary 
data storage register for handling non-aligned data without the need for external alignment logic. 
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BUS INTERFACE 
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ARBITRATION 
AND CONTROL 


16 = BIT PHYSICAL 
(32 = BIT LOGICAL) 
8 = CHANNEL 


WAIT = STATE 


CONTROL rae 
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Pin Descriptions exist on the 82370 for interfacing the system support 

peripherals to their respective system counterparts. 
The 82370 provides all of the signals necessary to Following are the definitions of the individual pins of 
interface an 80376 host processor. Ithas aseparate the 82370. These brief descriptions are provided as 
24-bit address and 16-bit data bus. It also has a set a reference. Each signal is further defined within the 
of control signals to support operation as a bus mas- sections which describe the associated 82370 func- 


ter or a bus slave. Several special function signals tion. 
| Symbol_| Type _ Name and Function 


A;—-A23 1/0 ADDRESS BUS: Outputs physical memory or port |/O addresses. See 
Address Bus (2.2.3) for additional information. 
/O 


BYTE ENABLES: Indicate which data bytes of the data bus take part in a bus 
cycle. See Byte Enable (2.2.4) for additional information. 


DATA BUS: This is the 16-bit data bus. These pins are active outputs during 
interrupt acknowledges, during Slave accesses, and when the 82370 is in the 
Master Mode. 


PROCESSOR CLOCK: This pin must be connected to the processor’s clock, 
CLK2. The 82370 monitors the phase of this clock in order to remain 
synchronized with the CPU. This clock drives all of the internal synchronous 
Circuitry. 


DATA/CONTROL: D/C # is used to distinguish between CPU control cycles 
and DMA or CPU data access cycles. It is active as an output only in the 
Master Mode. 


W/R# 1/0 WRITE/READ: W/R # is used to distinguish between write and read cycles. It 
is active as an output only in the Master Mode. 

M/IO# 1/O MEMORY/IO: M/IO # is used to distinguish between memory and IO 
accesses. It is active as an output only in the Master Mode. 

ADS # I/O ADDRESS STATUS: This signal indicates presence of a valid address on the 
address bus. It is active as output only in the Master Mode. ADS # is active 
during the first T-state where addresses and control signals are valid. 

NA# 

Mode. In the Slave Mode, pipelining is determined by the current and past 
status of the ADS # and READY # signals. ) 

HOLD HOLD REQUEST: This is an active-high signal to the Bus Master to request 
control of the system bus. When control is granted, the Bus Master activates 
the hold acknowledge signal (HLDA). 


HLDA HOLD ACKNOWLEDGE: This input signal tells the DMA controller that the 
Bus Master has relinquished control of the system bus to the DMA controller. 


NEXT ADDRESS: Asserted by a peripheral or memory to begin a pipelined 
address cycle. This pin is monitored only while the 82370 is in the Master 
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Pin Descriptions (Continued) 


|__Symbol___| Type | Name and Function 


DREQ (0-3, 5-7) on DMA REQUEST: The DMA Request inputs monitor requests from peripherals 


requiring DMA service. Each of the eight DMA channels has one DREQ input. 
DREQ4/IRQ9 # 


These active-high inputs are internally synchronized and prioritized. Upon 
request, channel 0 has the highest priority and channel 7 the lowest. 
DMA/INTERRUPT REQUEST: This is the DMA request input for channel 4. It 
is also connected to the interrupt controller via interrupt request 9. This 
internal connection is available for DMA channel 4 only. The interrupt input is 
a 
EDACK (0-2) e 
IRQ (11-23) # 
pull-up resistors. Unused interrupt request inputs should be tied inactive 
externally. 
PINT ~==~———'|_--O._| INTERRUPT OUT: INT signals that an interrupt request is pending. 
CLKIN BE TIMER CLOCK INPUT: This is the clock input signal to all of the 82370’s 


active low and can be programmed as either edge or level triggered. Either 
programmable timers. It is independent of the system clock input (CLK2). 
TOUT1/REF # ig 


Note that this pin has a weak internal pull-up. This causes the interrupt 
request to be inactive, but the DMA request will be active if there is no 
external connection made. Most applications will require that either one or the 
other of these functions be used, but not both. For this reason, it is advised 
that DMA channel 4 be used for transfers where a software request is more 
appropriate (such as memory-to-memory transfers). In such an application, 
DREQ4 can be masked by software, freeing IRQ9# for other purposes. 


END OF PROCESS: As an output, this signal indicates that the current 
Requester access is the last access of the currently operating DMA channel. 
It is activated when Terminal Count is reached. As an input, it signals the DMA 
channel to terminate the current buffer and proceed to the next buffer, if one 
is available. This signal may be programmed as an asynchronous or 
synchronous input. 


EOP# must be connected to a pull-up resistor. This will prevent erroneous 
external requests for termination of a DMA process. | 


ENCODED DMA ACKNOWLEDGE: These signals contain the encoded 
acknowledgment of a request for DMA service by a peripheral. The binary 
code formed by the three signals indicates which channel is active. Channel 4 
does not have a DMA acknowledge. The inactive state is indicated by the 
code 100. During a Requester access, EDACK presents the code for the 
active DMA channel. During a Target access, EDACK presents the inactive 
code 100. 


INTERRUPT REQUEST: These are active low interrupt request inputs. The 
inputs can be programmed to be edge or level sensitive. Interrupt priorities 
are programmable as either fixed or rotating. These inputs have weak internal 


function can be masked by the appropriate mask register. Priorities of the 
DMA channel and the interrupt request are not related but follow the rules of 
TIMER 1 OUTPUT/REFRESH: This pin is software programmable as either 
the direct output of Timer 1, or as the indicator of a refresh cycle in progress. 


the individual controllers. 
As REF #, this signal is active during the memory read cycle which occurs 
during refresh. 
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|__Symbol___| Type _ Name and Function 


TOUT2#/IRQ3# I/O | TIMER 2 OUTPUT/INTERRUPT REQUEST: This is the inverted output of 
Timer 2. It is also connected directly to interrupt request 3. External hardware 
can use IRQ3 # if Timer 2 is programmed as OUT = 0 (TOUT2# = 1). 
TOUT3 # | © | TIMER 3 OUTPUT: This is the inverted output of Timer 3. 
READY # READY INPUT: This active-low input indicates to the 82370 that the current 
bus cycle is complete. READY is sampled by the 82370 both while it is in the 
Master Mode, and while it is in the Slave Mode. 
WSC (0-1) 
READYO # 


WAIT STATE CONTROL: WSCO and WSC1 are inputs used by the Wait- 
RESET 


State Generator to determine the number of wait states required by the 
CHPSEL # - 


with the M/IO# signal, selects an internal register in which a wait-state count 
is stored. The combination WSC = 11 disables the wait-state generator. 


READY OUTPUT: This is the synchronized output of the wait-state generator. 
It is also valid during CPU accesses to the 82370 in the Slave Mode when the 
82370 requires wait states. READYO# should feed directly the processor’s 

READY # input. 


RESET: This synchronous input serves to initialize the state of the 82370 and 
provides basis for the CPURST output. RESET must be held active for at least 
15 CLK2 cycles in order to guarantee the state of the 82370. After Reset, the 
82370 is in the Slave Mode with all outputs except timers and interrupts in 
their inactive states. The state of the timers and interrupt controller must be 
initialized through software. This input must be active for the entire time 
required by the host processor to guarantee proper reset. 


CHIP SELECT: This pin is driven active whenever the 82370 is addressed in a 
slave bus read or write cycle. It is also active during interrupt acknowledge 
cycles when the 82370 is driving the Data Bus. It can be used to control the 
local bus transceivers to prevent contention with the system bus. 


CPU RESET: CPURST provides a synchronized reset signal for the CPU. It is 
activated in the event of a software reset command, a processor shut-down 
detect, or a hardware reset via the RESET pin. The 82370 holds CPURST 
active for 62 clocks in response to either a software reset command or a shut- 
down detection. Otherwise CPURST reflects the RESET input. 


POWER: + 5V input power. 
Ground Reference. 


currently accessed memory or I/O. The binary code on these pins, combined 
CPURST 


Table 1. Wait-State Select Inputs 


Port Wait-State Registers Select Inputs 
Address | 07 D4 | D3 Do | WSC1 WSCO 


72H MEMORY 0 1/00 


73H MEMORY 1 1/0 1 
74H MEMORY 2 /O2 
DISABLED 


M/IO# 
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CPURST 

INT 

Vcc 

Vss 
TOUT2#/IRQ3# 
TOUT3# 
D/C# 

Vcc 

W/R# 

M/lO# 

HOLD 
TOUT1/REF # 
CLK2 

Vss 
READYO# 
EOP # 
CHPSEL # 


EDACK2 
EDACK1 
EDACKO 
HLDA 
DREQ7 
DREQ6 
NA# 
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DREQ4/IRQ9 # 


DREQ3 
DREQ2 
DREQ1 
DREQO 
IRQ23 # 
IRQ22 # 
IRQ21 # 
IRQ20 # 
IRQ19# 
IRQ18# 
IRQ17 # 
IRQ16# 
IRQ15# 
IRQ14# 
IRQ13 # 
IRQ12# 
IRQ11# 
CLKIN 
WSCO 
WSC1 
RESET 
READY # 


Vss 
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READY # 
READYO# 
HOLD 

HLDA 

INT 

EOP # 
EDACK2 
EDACK1 
EDACKO 
DREQ7 
DREQ6 
DREQS5 
DREQ4/IRQ9# 
DREQ3 
DREQ2 
DREQ1 


1.0 FUNCTIONAL OVERVIEW 


The 82370 contains several independent functional 
modules. The following is a brief discussion of the 
components and features of the 82370. Each mod- 
ule has a corresponding detailed section later in this 
data sheet. Those sections should be referred to for 
design and programming information. 


1.1 82370 Architecture 


The 82370 is comprised of several computer system 
functions that are normally found in separate LSI 
and VLSI components. These include: a high-per- 
formance, eight-channel, 32-bit Direct Memory Ac- 
cess Controller; a 20-level Programmable Interrupt 


IRQ14# 
IRQ13 # 
IRQ12# 
IRQ11# 


WSCO 

WSC1 

TOUT3 #4 
TOUT2#/IRQ3# 
TOUT1/REF # 
CLKIN 

Vss 

Vss 

Vss 

Vss 

Vss 

Vss 

Vss 

Vss 

Vss 

Vss 

Vcc 

Voc 

Voc 


Controller which is a superset of the 82C59A; four 
16-bit Programmable Interval Timers which are func- 
tionally equivalent to the 82C54 timers; a DRAM Re- 
fresh Controller; a Programmable Wait State Gener- 
ator; and system reset logic. The interface to the 
82370 is optimized for high-performance operation 
with the 80376 microprocessor. 


The 82370 operates directly on the 80376 bus. In 
the Slave Mode, it monitors the state of the proces- 
sor at all times and acts or idles according to the 
commands of the host. It monitors the address pipe- 
line status and generates the programmed number 
of wait states for the device being accessed. The 
82370 also has logic to the reset of the 80376 via 
hardware or software reset requests and processor 
shutdown status. 
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After a system reset, the 82370 is in the Slave 
Mode. It appears to the system as an I/O device. It 
becomes a bus master when it is performing DMA 
transfers. 


To maintain compatibility with existing software, the 
registers within the 82370 are accessed as bytes. If 
the internal logic of the 82370 requires a delay be- 
fore another access by the processor, wait states 
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are automatically inserted into the access cycle. 
This allows the programmer to write initialization rou- 
tines, etc. without regard to hardware recovery 
times. 


_Figure 1-1 shows the basic architectural compo- 


nents of the 82370. The following sections briefly 
discuss the architecture and function of each of the 
distinct sections of the 82370. 


80376 LOCAL BUS CHPSEL# 


' BUS INTERFACE 


HOLD 
INTERNAL BUS 
HOLDA ~——1 ARBITRATION 


CLK2 j__.} AND CONTROL 
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Figure 1-1. Architecture of the 82370 
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1.1.1 DMA CONTROLLER 


The 82370 contains a high-performance, 8-channel 
DMA Controller. It provides a 32-bit internal data 
path. Through its 16-bit external physical data bus, it 
is capable of transferring data in any combination of 
bytes, words and double-words. The addresses of 
both source and destination can be independently 
incremented, decremented or held constant, and 
cover the entire 16-bit physical address space of the 
80376. It can disassemble and assemble non- 
aligned data via a 32-bit internal temporary data 
storage register. Data transferred between devices 
of different data path widths can also be assembled 
and disassembled using the internal temporary data 
storage register. The DMA Controller can also trans- 
fer aligned data between I/O and memory on the fly, 
allowing data transfer rates up to 16 megabytes per 
second for an 82370 operating at 16 MHz. Figure 
1-2 illustrates the functional components of the DMA 
Controller. 


There are twenty-four general status and command 
registers in the 82370 DMA Controller. Through 
these registers any of the channels may be pro- 
grammed into any of the possible modes. The oper- 
ating modes of any one channel are independent of 
the operation of the other channels. 


CONTROL/STATUS REGISTERS 


82370 


Each channel has three programmable registers 
which determine the location and amount of data to 
be transferred: 


Byte Count Register— Number of bytes to trans- 
fer. (24-bits) 


Requester Register — Byte Address of memory 
or peripheral which is re- 
questing DMA service. 
(24-bits) 


— Byte Address of peripheral 
or memory which will be 
accessed. (24-bits) 


Target Register 


There are also port addresses which, when ac- 
cessed, cause the 82370 to perform specific func- 
tions. The actual data written doesn’t matter, the act 
of writing to the specific address causes the com- 
mand to be executed. The commands which operate 
in this mode are: Master Clear, Clear Terminal Count 
Interrupt Request, Clear Mask Register, and Clear 
Byte Pointer Flip-Flop. 


DMA transfers can be done between all combina- 
tions of memory and I/O; memory-to-memory, mem- 
ory-to-I/O, |/O-to-memory, and 1|/O-to-I/O. DMA 
service can be requested through software and/or 
hardware. Hardware DMA acknowledge signals are 
available for all channels (except channel 4) through 
an encoded 93-bit DMA acknowledge bus 
(EDACKO-2). 


CHANNEL REGISTERS 


COMMAND REGISTER I BASE CURRENT | TEMPORARY 
COMMAND REGISTER IX | BYTE COUNT | BYTE COUNT] REGISTER 


MODE REGISTER I BASE CURRENT 
REQUESTER | REQUESTER 
MODE REGISTER IT ADDRESS ADDRESS 
SOFTWARE REQUEST BASE 
REGISTER TARGET 


LOGIC MASK REGISTER ADDRESS 


REQUEST 
ARBITRATION 


CHANNEL O 


CURRENT 
TARGET 
ADDRESS 


STATUS REGISTER CHANNEL 1 (SAME AS CH 0) 
BUS SIZE REGISTER CHANNEL 2 (SAME AS CH 0) 


CHAINING REGISTER CHANNEL 3 (SAME AS CH 0) 


"LOWER" GROUP OF CHANNELS 
EDACKO 


EDACK1 PROCESS 


CONTROL 
EDACK2 


EOP¥ 


—s 
— 


“UPPER” GROUP OF CHANNELS 


CHANNEL 4 (SAME AS CH 0) 
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CHANNEL 7 (SAME AS CH 0) 


CONTROL/STATUS 
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Figure 1-2. 82370 DMA Controller 
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The 82370 DMA Controller transfers blocks of data 
(buffers) in three modes: Single Buffer, Buffer Auto- 
Initialize, and Buffer Chaining. In the Single Buffer 
Process, the 82370 DMA Controller is programmed 
to transfer one particular block of data. Successive 
transfers then require reprogramming of the DMA 
channel. Single Buffer transfers are useful in sys- 
tems where it is known at the time the transfer be- 
gins what quantity of data is to be transferred, and 
there is a contiguous block of data area available. 


The Buffer Auto-Initialize Process allows the same 
data area to be used for successive DMA transfers 
without having to reprogram the channel. 


The Buffer Chaining Process allows a program to 
specify a list of buffer transfers to be executed. The 
82370 DMA Controller, through interrupt routines, is 
reprogrammed from the list. The channel is repro- 
grammed for a new buffer before the current buffer 
transfer is complete. This pipelining of the channel 
programming process allows the system to allocate 
non-contiguous blocks of data storage space, and 
transfer all of the data with one DMA process. The 
buffers that make up the chain do not have to be in 
contiguous locations. 


Channel priority can be fixed or rotating. Fixed priori- 
ty allows the programmer to define the priority of 
DMA channels based on hardware or other fixed pa- 


INTERNAL DATA BUS 


STATUS 
LATCH 


GATES CONTROL 
LOGIC 


CONTROL 
REGISTERS 


CLKIN OUTPUT CONTROL LOGIC 
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rameters. Rotating priority is used to provide periph- 
erals access to the bus on a shared basis. 


With fixed priority, the programmer can set any 
channel to have the current lowest priority. This al- 
lows the user to reset or manually rotate the priority 
schedule without reprogramming the command reg- 
isters. 


1.1.2 PROGRAMMABLE INTERVAL TIMERS 


Four 16-bit programmable interval timers reside 
within the 82370. These timers are identical in func- 
tion to the timers in the 82C54 Programmable Inter- 
val Timer. All four of the timers share a common 
clock input which can be independent of the system 
clock. The timers are capable of operating in six dif- 
ferent modes. In all of the modes, the current count 
can be latched and read by the 80376 at any time, 
making these very versatile event timers. Figure 1-3 
shows the functional components of the Program- 
mable Interval Timers. 


The outputs of the timers are directed to key system 
functions, making system design simpler. Timer 0 is 
routed directly to an interrupt input and is not avail- 
able externally. This timer would typically be used to 
generate time-keeping interrupts. 


INPUT/OUTPUT 
LATCHES 
16— BIT COUNTER 


‘ 
TIMER O 


TIMER 1 
TIMER 2 
TIMERS 


Figure 1-3. Programmable Interval Timers—Block Diagram 
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Timers 1 and 2 have outputs which are available for 
general timer/counter purposes as well as special 
functions. Timer 1 is routed to the refresh control 
logic to provide refresh timing. Timer 2 is connected 
to an interrupt request input to provide other timer 
functions. Timer 3 is a general purpose timer/coun- 
ter whose output is available to external hardware. It 
is also connected internally to the interrupt request 
which defaults to the highest priority (IRQO). 


1.1.3 INTERRUPT CONTROLLER 


The 82370 has the equivalent of three enhanced 
82C59A Programmable Interrupt Controllers. These 
controllers can all be operated in the Master Mode, 
but the priority is always as if they were cascaded. 
There are 15 interrupt request inputs provided for 
the user, all of which can be inputs from external 
slave interrupt controllers. Cascading 82C59As to 
these request inputs allows a possible total of 120 
external interrupt requests. Figure 1-4 is a block dia- 
gram of the 82370 Interrupt Controller. 


Each of the interrupt request inputs can be individu- 
ally programmed with its own interrupt vector, allow- 
ing more flexibility in interrupt vector mapping than 


82370 


was available with the 82C59A. An interrupt is pro- 
vided to alert the system that an attempt is being 
made to program the vectors in the method of the 
82C59A. This provides compatibility of existing soft- 
ware that used the 82C59A or 8259A with new de- 
signs using the 82370. 


In the event of an unrequested or otherwise errone- 
ous interrupt acknowledge cycle, the 82370 Interrupt 
Controller issues a default vector. This vector, pro- 
grammed by the system software, will alert the sys- 
tem of unsolicited interrupts of the 80376. 


The functions of the 82370 Interrupt Controller are 
identical to the 82C59A, except in regards to pro- 
gramming the interrupt vectors as mentioned above. 
Interrupt request inputs are programmable as either 
edge or level triggered and are software maskable. 
Priority can be either fixed or rotating and interrupt 
requests can be nested. 


Enhancements are added to the 82370 for cascad- 
ing external interrupt controllers. Master to Slave 
handshaking takes place on the data bus, instead of 
dedicated cascade lines. 
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Figure 1-4. 82370 Interrupt Controller—Block Diagram 
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1.1.4 WAIT STATE GENERATOR 


The Wait State’ Generator is a programmable 
READY generation circuit for the 80376 bus. A pe- 
ripheral requiring wait states can request the Wait 
State Generator to hold the processor’s READY in- 
put inactive for a predetermined number of bus 
states. Six different wait state counts can be pro- 
grammed into the Wait State Generator by software; 
three for memory accesses and three for I/O ac- 
cesses. A block diagram of the 82370 Wait State 
Generator is shown in Figure 1-5. 


The peripheral being accessed selects the required 
wait state count by placing a code on a 2-bit wait 
state select bus. This code along with the M/IO# 
signal from the bus master is used to select one of 
six internal 4-bit wait state registers which has been 
programmed with the desired number of wait states. 
From zero to fifteen wait states can be programmed 
into the wait state registers. The Wait State genera- 
tor tracks the state of the processor or current bus 


master at all times, regardless of which device is the 


current bus master and regardless of whether or not 
the wait state generator is currently active. 


The 82370 Wait State Generator is disabled by mak- 
ing the select inputs both high. This allows hardware 
which is intelligent enough to generate its own ready 
signal to be accessed without penalty. As previously 
mentioned, deselecting the Wait State Generator 
does not disable its ability to determine the proper 
number of wait states due to pipeline status in sub- 
sequent bus cycles. 


The number of wait states inserted into a pipelined 
bus cycle is the value in the selected wait state reg- 
ister. If the bus master is operating in the non-pipe- 
lined mode, the Wait State Generator will increase 
the number of wait states inserted into the bus cycle 
by one. 


Pipelined 0-15 Wait States 
Non-Pipelined 0-16 Wait States 
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On reset, the Wait State Generator’s registers are 
loaded with the value FFH, giving the maximum 
number of wait states for any access in which the 
wait state select inputs are active. 


1.1.5 DRAM REFRESH CONTROLLER 


The 82370 DRAM Refresh Controller consists of a 
24-bit refresh address counter and bus arbitration 
logic. The output of Timer 1 is used to periodically 
request a refresh cycle. When the controller re- 
ceives the request, it requests access to the system 
bus through the HOLD signal. When bus control is 
acknowledged by the processor or current bus mas- 
ter, the refresh controller executes a memory read 
operation at the address currently in the Refresh Ad- 
dress Register. At the same time, it activates a re- 
fresh signal (REF #) that the memory uses to force a 
refresh instead of a normal read. Control of the bus 
is transferred to the processor at the completion of 
this cycle. Typically a refresh cycle will take six clock 
cycles to execute on an 80376 bus. 


The 82370 DRAM Refresh Controller has the high- 
est priority when requesting bus access and will in- 
terrupt any active DMA process. This allows large 
blocks of data to be moved by the DMA controller 
without affecting the refresh function. Also the DMA 
controller is not required to completely relinquish the 
bus, the refresh controller simply steals a bus cycle 
between DMA accesses. 


The amount by which the refresh address is incre- 
mented is programmable to allow for different bus 
widths and memory bank arrangements. 


1.1.6 CPU RESET FUNCTION 


The 82370 contains a special reset function which 
can respond to hardware reset signals as well as a 
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Figure 1-5. 82370 Wait State Generator—Block Diagram 
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software reset command. The circuit will hold the 
80376’s RESET line active while an external hard- 
ware reset signal is present at its RESET input. It 
can also reset the 80376 processor as the result of a 
software command. The software reset command 
causes the 82370 to hold the processdér’s RESET 
line active for a minimum of 62 clock cycles. The 
80376 requires that its RESET line be held active for 
a minimum of 80 clock cycles to re-initialize. For a 
more detailed explanation and solution, see Appen- 
dix D (System Notes). 


The 82370 can be programmed to sense the shut- 
down detect code on the status lines from the 
80376. If the Shutdown Detect function is enabled, 
the 82370 will automatically reset the processor. A 
diagnostic register is available which can be used to 
determine the cause of reset. 


1.1.7 REGISTER MAP RELOCATION 


After a hardware reset, the internal registers of the 
82370 are located in |/O space beginning at port 
address OOOOH. The map of the 82370’s registers is 
relocatable via a software command. The default 
mapping places the 82370 between I/O addresses 
OOOOH and OODBH. The relocation register allows 
this map to be moved to any even 256-byte bounda- 
ry in the processor’s 16-bit |/O address space or any 
even 64 kbyte boundary in the 24-bit memory ad- 
dress space. 


1.2 Host Interface 


The 82370 is designed to operate efficiently on the 
local bus of an 80376 microprocessor. The control 
signals of the 82370 are identical in function to 
those of the 80376. As a slave, the 82370 operates 
with all of the features available on the 80376 bus. 
When the 82370 is in the Master Mode, it looks iden- 
tical to an 80376 to the connected devices. 


The 82370 monitors the bus at all times, and deter- 
mines whether the current bus cycle is a pipelined or 
non-pipelined access. All of the status signals of the 
processor are monitored. 


The control, status, and data registers within the 
82370 are located at fixed addresses relative to 
each other, but the group can be relocated to either 
memory or I/O space and to different locations with- 
in those spaces. 


As a Slave device, the 82370 monitors the control/ 
status lines of the CPU. The 82370 will generate all 
of the wait states it needs whenever it is accessed. 
This allows the programmer the freedom of access- 


82370 


ing 82370 registers without having to insert NOPs in 
the program to wait for slower 82370 internal regis- 
ters. 


The 82370 can determine if a current bus cycle is a 
pipelined or a non-pipelined cycle. It does this by 
monitoring the ADS#, NA# and READY# signals 
and thereby keeping track of the current state of the 
80376. 


As a bus master, the 82370 looks like an 80376 to 
the rest of the system. This enables the designer 
greater flexibility in systems which include the 
82370. The designer does not have to alter the inter- 
faces of any peripherals designed to operate with 
the 80376 to accommodate the 82370. The 82370 
will access any peripherals on the bus in the same 
manner as the 80376, including recognizing pipe- 
lined bus cycles. 


The 82370 is accessed as an 8-bit peripheral. The 
80376 places the data of all 8-bit accesses either on 
D(O-7) or D(8-15). The 82370 will only accept data 
on these lines when in the Slave Mode. When in the 
Master Mode, the 82370 is a full 16-bit machine, 
sending and receiving data in the same manner as 
the 80376. 


2.0 80376 HOST INTERFACE 


The 82370 contains a set of interface signals to op- 
erate efficiently with the 80376 host processor. 
These signals were designed so that minimal hard- 
ware is needed to connect the 82370 to the 80376. 
Figure 2-1 depicts a typical system configuration 
with the 80376 processor. As shown in the diagram, 
the 82370 is designed to interface directly with the 
80376 bus. 


Since the 82370 resides on the opposite side of the 
data bus transceivers with respect to the rest of the 
system peripherals, it is important to note that the 
transceivers should be controlled so that contention 
between the data bus transceivers and the 82370 
will not occur. In order to ease the implementation of 
this, the 82370 activates the CHPSEL # signal which 
indicates that the 82370 has been addressed and 
may output data. This signal should be included in 
the direction and enable control logic of the trans- 
ceiver. When any of the 82370 internal registers are 
read, the data bus transceivers should be disabled 
so that only the 82370 will drive the local bus. 


This section describes the basic bus functions of the 
82370 to show how this device interacts with the 
80376 processor. Other signals which are not direct- 
ly related to the host interface will be discussed in 
their associated functional block description. 
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Figure 2-1. 80376/82370 System Configuration 


2.1 Master and Slave Modes 


At any time, the 82370 acts as either a Slave device 
or a Master device in the system. Upon reset, the 
82370 will be in the Slave Mode. In this mode, the 
80376 processor can read/write into the 82370 in- 
ternal registers. Initialization information may be pro- 
grammed into the 82370 during Slave Mode. 


When DMA service (including DRAM Refresh Cycles 
generated by the 82370) is requested, the 82370 will 
request and subsequently get control of the 80376 
local bus. This is done through the HOLD and HLDA 
(Hold Acknowledge) signals. When the 80376 proc- 
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essor responds by asserting the HLDA signal, the 
82370 will switch into Master Mode and perform 
DMA transfers. In this mode, the 82370 is the bus 
master of the system. It can read/write data from/to 
memory and peripheral devices. The 82370 will re- 
turn to the Slave Mode upon completion of DMA 
transfers, or when HLDA is negated. 


2.2 80376 Interface Signals 


As mentioned in the Architecture section, the Bus 
Interface module of the 82370 (see Figure 1-1) con- 
tains signals that are directly connected to the 
80376 host processor. This module has separate 


| 

intel ° 

16-bit Data and 24-bit Address busses. Also, it has 
additional control signals to support different bus op- 
erations on the system. By residing on the 80376 
local bus, the 82370 shares the same address, data 
and control lines with the processor. The following 


subsections discuss the signals which interface to 
the 80376 host processor. 


2.2.1 CLOCK (CLK2) 


The CLK2 input provides fundamental timing for the 
82370. It is divided by two internally to generate the 
82370 internal clock. Therefore, CLK2 should be 
driven with twice the 80376’s frequency. In order to 
maintain synchronization with the 80376 host proc- 
essor, the 82370 and the 80376 should share a 
common clock source. 


The internal clock consists of two phases: PHI1 and 
PHI2. Each CLK2 period is a phase of the internal 
clock. PHI2 is usually used to sample input and set 
up internal signals and PHI1 is for latching internal 
data. Figure 2-2 illustrates the relationship of CLK2 
and the 82370 internal clock signals. The CPURST 
signal generated by the 82370 guarantees that the 
80376 will wake up in phase with PHI1. 


2.2.2 DATA BUS (Do-D45) 


This 16-bit three-state bidirectional bus provides a 
general purpose data path between the 82370 and 
the system. These pins are tied directly to the corre- 
sponding Data Bus pins of the 80376 local bus. The 
Data Bus is also used for interrupt vectors generated 
by the 82370 in the Interrupt Acknowledge cycle. 


During Slave I/O operations, the 82370 expects a 
single byte to be written or read. When the 80376 
host processor writes into the 82370, either Do—D7 
or Dg—Dj5 will be latched into the 82370, depending 


82370 CLOCK PERIOD 
CLK2 PERIOD 


82370 CLOCK PERIOD 
CLK2 PERIOD 


82370 


upon whether Byte Enable bit BLE# is 0 or 1 (see 
Table 2-1). When the 80376 host processor reads 
from the 82370, the single byte data will be duplicat- 
ed twice on the Data Bus; i.e. on Do—D7 and Dg- 
D465. 


During Master Mode, the 82370 can transfer 16-, 
and 8-bit data between memory (or I/O devices) and 
I/O devices (or memory) via the Data Bus. 


2.2.3 ADDRESS BUS (A23-A}) 


These three-state bidirectional signals are connect- 
ed directly to the 80376 Address Bus. In the Slave 
Mode, they are used as input signals so that the 
processor can address the 82370 internal ports/reg- 
isters. In the Master Mode, they are used as output 
signals by the 82370 to address memory and periph- 
eral devices. The Address Bus is capable of ad- 
dressing 16 Mbytes of physical memory space 
(OOO000H to FFFFFFH), and 64 Kbytes of I/O ad- 
dresses. 


2.2.4 BYTE ENABLE (BHE#, BLE #) 


The Byte Enable pins BHE# and BLE# select the 
specific byte(s) in the word addressed by A;—Ao3. 
During Master Mode operation, it is used as an out- 
put by the 82370 to address memory and |/O loca- 
tions. The definition of BHE# and BLE# is further 
illustrated in Table 2-1. 


NOTE: 
The 82370 will activate BHE# when output in Mas- 
ter Mode. For a more detailed explanation and its 
solutions, see Appendix D (System Notes). 


82370 CLOCK PERIOD 
CLK2 PERIOD 


Figure 2-2. CLK2 and 82370 Internal Clock 
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As an output (Master Mode): 
Table 2-1. Byte Enable Signals 


Logical Byte Presented on 
Data Bus During WRITE Only* 
D7-Do 


Byte to be Accessed 


Relative to Ag3-A, Dj5-Dg 


(Not Used) 
U = Undefined 
A = Logical Do-D7 
B = Logical Dg-Dy5 
*NOTE: 


Actual number of bytes accessed depends upon the programmed data path width. 


Table 2-2. Bus Cycle Definition 


2.2.5 BUS CYCLE DEFINITION SIGNALS 
(D/C #, W/R#, M/IO#) 


These three-state bidirectional signals define the 
type of bus cycle being performed. W/R# distin- 
guishes between write and read cycles. D/C# dis- 
tinguishes between processor data and control cy- 
cles. M/IO# distinguishes between memory and |/O 
cycles. 


During Slave Mode, these signals are driven by the 
80376 host processor; during Master Mode, they are 
driven by the 82370. In either mode, these signals 
will be valid when the Address Status (ADS#) is 
driven LOW. Exact bus cycle definitions are given in 
Table 2-2. Note that some combinations are recog- 
nized as inputs, but not generated as outputs. In the 
Master Mode, D/C# is always HIGH. 


2.2.6 ADDRESS STATUS (ADS #) 


This signal indicates that a valid address (A;—Ao3, 
BHE#, BLE#) and bus cycle definition (W/R#, 
D/C#, M/IO#) is being driven on the bus. In the 
Master Mode, it is driven by the 82370 as an output. 
In the Slave Mode, this signal is monitored as 
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| mio# | pice 

0 0 0 Interrupt Acknowledge NOT GENERATED 
0 0 1 UNDEFINED NOT GENERATED 
0 1 0 1/O Read 1/O Read 

0 1 1 1/O Write I/O Write 

1 0 0 UNDEFINED NOT GENERATED 
1 0 1 HALT if Ay = 1 NOT GENERATED 

SHUTDOWN if A; = 0 
1 , Memory Read Memory Read 
1 Memory Write Memory Write 


an input by the 82370. By the current and past 
status of ADS# and the READY # input, the 82370 
is able to determine, during Slave Mode, if the next 
bus cycle is a pipelined address cycle. ADS# is as- 
serted during T1 and T2P bus states (see Bus State 
Definition). 


NOTE: 
ADS# must be qualified with the rising edge of 
CLk2. 


2.2.7 TRANSFER ACKNOWLEDGE (READY #) 


This input indicates that the current bus cycle is 
complete. In the Master Mode, assertion of this sig- 
nal indicates the end of a DMA bus cycle. In the 
Slave Mode, the 82370 monitors this input and 
ADS # to detect a pipelined address cycle. This sig- 
nal should be tied directly to the READY # input of 
the 80376 host processor. 


2.2.8 NEXT ADDRESS REQUEST (NA#) 


This input is used to indicate to the 82370 in the 
Master Mode that the system is requesting address 
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pipelining. When driven LOW by either memory or 
peripheral devices during Master Mode, it indicates 
that the system is prepared to accept a new address 
and bus cycle definition signals from the 82370 be- 
fore the end of the current bus cycle. If this input is 
active when sampled by the 82370, the next address 


is driven onto the bus, provided a bus request is 
already pending internally. 


This input pin is monitored only in the Master Mode. 
In the Slave Mode, the 82370 uses the ADS# and 
READY# signals to determine address pipelining 
cycles, and NA# will be ignored. 


2.2.9 RESET (RESET, CPURST) 
RESET 


This synchronous input suspends any operation in 
progress and places the 82370 in a known initial 
state. Upon reset, the 82370 will be in the Slave 
Mode waiting to be initialized by the 80376 host 
processor. The 82370 is reset by asserting RESET 
for 15 or more CLK2 periods. When RESET is as- 
serted, all other input pins are ignored, and all other 
bus pins are driven to an idle bus state as shown in 
Table 2-3. The 82370 will determine the phase of its 
internal clock following RESET going inactive. 


RESET is level-sensitive and must be synchronous 


to the CLK2 signal. The RESET setup and hold time 
requirements are shown in Figure 2-3. 


| PHI 1/2 | 


PHI 1/2 


82370 


Table 2-3. Output Signals Following RESET 


A;-Ao3, Do-Di5, BHE#, BLE # | Float 

D/C#, W/R#, M/IO#, ADS#_ | Float 

READYO# ae 

EOP # ‘1’ (Weak Pull-UP) 


EDACK2—EDACKO ‘100’ 


HOLD ‘0’ 
INT UNDEFINED* 
TOUT1/REF #, UNDEFINED* 


| TOUT2#/IRQ3#, TOUT3 # 


CPURST 
CHPSEL # 


*NOTE: 
The Interrupt Controller and Programmable Interval Timer 
are initialized by software commands. 


CPURST 


This output signal is used to reset the 80376 host 
processor. It will go active (HIGH) whenever one of 
the following events occurs: a) 82370’s RESET input 
is active; b) a software RESET command is issued 
to the 82370; or c) when the 82370 detects a proc- 
essor Shutdown cycle and when this detection fea- 
ture is enabled (see CPU Reset and Shutdown De- 
tect). When activated, CPURST will be held active 
for 62 clocks. The timing of CPURST is such that the 
80376 processor will be in synchronization with the 
82370. This timing is shown in Figure 2-4. 


| PHI 2 | PHI 1 | PHI 2 


T31 T30 


RESET \ 


T30—RESET Hold Time 
T31—RESET Setup Time 
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Figure 2-3. RESET Timing 


K-33 MIN. 


CPURST 


T33—CPU Reset from CLK2 
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Figure 2-4. CPURST Timing 
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2.2.10 INTERRUPT OUT (INT) 


This output pin is used to signal the 80376 host 
processor that one or more interrupt requests (either 
internal or external) are pending. The processor is 
expected to respond with an Interrupt Acknowledge 
cycle. This signal should be connected directly to 
the Maskable Interrupt Request (INTR) input of the 
80376 host processor. 


2.3 82370 Bus Timing 


The 82370 internally divides the CLK2 signal by two 
_to generate its internal clock. Figure 2-2 showed the 
relationship of CLK2 and the internal clock which 
consists of two phases: PHI1 and PHI2. Each CLK2 
period is a phase of the internal clock. 


In the 82370, whether it is in the Master or Slave 
Mode, the shortest time unit of bus activity is a bus 
state. A bus state, which is also referred as a 
‘T-state’, is defined as one 82370 PHI2 clock period 
(i.e. two CLK2 periods). Recall in Table 2-2 various 
types of bus cycles in the 82370 are defined by the 
M/lIO#, D/C# and W/R# signals. Each of these 
bus cycles is composed of two or more bus states. 
The length of a bus cycle depends on when the 
READY # input is asserted (i.e. driven LOW). 


2.3.1 ADDRESS PIPELINING 


The 82370 supports Address Pipelining as an option 
in both the Master and Slave Mode. This feature typ- 
ically allows a memory or peripheral device to oper- 
ate with one less wait state than would otherwise be 
required. This is possible because during a pipelined 
cycle, the address and bus cycle definition of the 
next cycle will be generated by the bus master while 
waiting for the end of the current cycle to be ac- 
knowledged. The pipelined bus is especially well 
suited for an interleaved memory environment. For 
16 MHz interleaved memory designs with 100 ns ac- 
cess time DRAMs, zero wait state memory accesses 
can be achieved when pipelined addressing is se- 
lected. 


In the Master Mode, the 82370 is capable of initiat- 
ing, on a cycle-by-cycle basis, either a pipelined or 
non-pipelined access depending upon the state of 
the NA# input. If a pipelined cycle is requested (indi- 
cated by NA# being driven LOW), the 82370 will 
drive the address and bus cycle definition of the next 
cycle as soon as there is an internal bus request 
pending. 


In the Slave Mode, the 82370 is constantly monitor- 


ing the ADS# and READY # signals on the proces- 
sor local bus to determine if the current bus cycle is 
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a pipelined cycle. If a pipelined cycle is detected, the 
82370 will request one less wait state from the proc- 
essor if the Wait State Generator feature is selected. 
On the other hand, during an 82370 internal register 
access in a pipelined cycle, it will make use of the 
advance address and bus cycle information. In all 


cases, Address Pipelining will result in a savings of 
one wait state. 


2.3.2 MASTER MODE BUS TIMING 


When the 82370 is in the Master Mode, it will be in 
one of six bus states. Figure 2-5 shows the complete 
bus state diagram of the Master Mode, including 
pipelined address states. As seen in the figure, the 
82370 state diagram is very similar to that of the 
80376. The major difference is that in the 82370, 
there is no Hold state. Also, in the 82370, the condi- 
tions for some state transitions depend upon wheth- 
er it is the end of a DMA process. 


NOTE: 
The term ‘end of a DMA process’ is loosely defined 
here. It depends on the DMA modes of operation 
as well as the state of the EOP# and DREQ in- 
puts. This is expained in detail in section 3—DMA 
Controller. 


The 82370 will enter the idle state, Ti, upon RESET 
and whenever the internal address is not available at 
the end of a DMA cycle or at the end of a DMA 
process. When address pipelining is not used (NA# 
is not asserted), a new bus cycle always begins with 
state T1. During T1, address and bus cycle definition 
signals will be driven on the bus. T1 is always fol- 
lowed by T2. 


lf a bus cycle is not acknowledged (with READY #) 
during T2 and NA# is negated, T2 will be repeated. 
When the end of the bus cycle is acknowledged dur- 
ing T2, the following state will be T1 of the next bus 
cycle (if the internal address latch is loaded and if 
this is not the end of the DMA process). Otherwise, 
the Ti state will be entered. Therefore; if the memory 
or peripheral accessed is fast enough to respond 
within the first T2, the fastest non-pipelined cycle will 
take one T1 and one T2 state. 


Use of the address pipelining feature allows the 
82370 to enter three additional bus states: T1P, T2P 
and T2i. T1P is the first bus state of a pipelined bus 
cycle. T2P follows T1P (or T2) if NA# is asserted 
when sampled. The 82370 will drive the bus with the 
address and bus cycle definition signals of the next 
cycle during T2P. From the state diagram, it can be 
seen that after an idle state Ti, the first bus cycle 
must begin with T1, and is therefore a non-pipelined 
bus cycle. The next bus cycle can be pipelined if 
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NA# is asserted and the previous bus cycle ended 
in a T2P state. Once the 82370 is in a pipelined 
cycle and provided that NA# is asserted in subse- 
quent cycles, the 82370 will be switching between 
T1P and T2P states. If the end of the current bus 
cycle is not acknowledged by the READY # input, 
the 82370 will extend the cycle by adding T2P 
states. The fastest pipelined cycle will consist of one 
T1P and one T2P state. 


The 82370 will enter state T2i when NA# is assert- 
ed and when one of the following two conditions 
occurs. The first condition is when the 82370 is in 
state T2. T2i will be entered if READY # is not as- 
serted and there is no next address available. This 
situation is similar to a wait state. The 82370 will stay 
in T2i for as long as this condition exists. The sec- 
ond condition which will cause the 82370 to enter 
T2i is when the 82370 is in state T1P. Before going 
to state T2P, the 82370 needs to wait in state T2i 
until the next address is available. Also, in both cas- 
es, if the DMA process is complete, the 82370 will 
enter the T2i state in order to finish the current DMA 
cycle. 


Figure 2-6 is a timing diagram showing non-pipelined 
bus accesses in the Master Mode. Figure 2-7 shows 
the timing of pipelined accesses in the Master Mode. 


READY# Asserted. [Not ADAV + End of DMA] 


82370 


2.3.3 SLAVE MODE BUS TIMING 


Figure 2-8 shows the Slave Mode bus timing in both 
pipelined and non-pipelined cycles when the 82370 
is being accessed. Recall that during Slave Mode, 
the 82370 will constantly monitor the ADS# and 
READY # signals to determine if the next cycle is 
pipelined. In Figure 2-8, the first cycle is non-pipe- 
lined and the second cycle is pipelined. In the pipe- 
lined cycle, the 82370 will start decoding the ad- 
dress and bus cycle signals one bus state earlier 
than in a non-pipelined cycle. 


The READY # input signal is sampled by the 80376 
host processor to determine the completion of a bus 
cycle. This occurs during the end of every T2, T2i 
and T2P state. Normally, the output of the 82370 
Wait State Generator, READYO#, is directly con- 
nected to the READY# input of the 80376 host 
processor and the 82370. In such case, READYO# 
and READY # will be identical (see Wait State Gen- 
erator). 
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Figure 2-5. Master Mode State Diagram 
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Figure 2-6. Non-Pipelined Bus Cycles 
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Figure 2-7. Pipelined Bus Cycles 
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NA# is shown here only for timing reference. It is not sampled by the 82370 during Slave Mode. 
When the 82370 registers are accessed, it will take one or more wait states in pipelined and two or more wait states in 


non-pipelined cycle to complete the internal access. 


Figure 2-8. Slave Read/Write Timing 


3.0 DMA CONTROLLER 


The 82370 DMA Controller is capable of transferring 
data between any combination of memory and/or 
1/O, with any combination of data path widths. The 
82370 DMA Controller can be programmed to ac- 
commodate 8- or 16-bit devices. With its 16-bit ex- 
ternal data path, it can transfer data in units of byte 
or a word. Bus bandwidth is optimized through the 
use of an internal temporary register which can dis- 
assemble or assemble data to or from either an 
aligned or non-aligned destination or source. Figure 
3-1 is a block diagram of the 82370 DMA Controller. 


The 82370 has eight channels of DMA. Each chan- 
nel operates independently of the others. Within the 
operation of the individual channels, there are many 
different modes of data transfer available. Many of 
the operating modes can be intermixed to provide a 
very versatile DMA controller. 


3.1 Functional Description 


In describing the operation of the 82370’s DMA Con- 
troller, close attention to terminology is required. Be- 


1-625 


82370 


CONTROL/STATUS REGISTERS 


CHANNEL REGISTERS 


COMMAND REGISTER I BASE CURRENT | TEMPORARY 
COMMAND REGISTER Ir | BYTE COUNT | BYTE COUNT] REGISTER 


MODE REGISTER I BASE 
REQUESTER 
MODE REGISTER IL ADDRESS 


SOFTWARE REQUEST BASE 
REGISTER TARGET 


MASK REGISTER ADDRESS 


REQUEST 


CURRENT 
REQUESTER 
ADDRESS 


CURRENT 
TARGET 
ADDRESS 


CHANNEL O 


STATUS REGISTER - CHANNEL 1 (SAME AS CH 0) 
BUS SIZE REGISTER CHANNEL 2 (SAME AS CH 0) 


CHAINING REGISTER CHANNEL 3 (SAME AS CH 0) 


EDACKO 


EDACK1 PROCESS 


CONTROL 
EDACK2 


EOP# 


mere 
atest 


CONTROL/STATUS 


(SAME AS 
LOWER GROUP) 


"LOWER" GROUP OF CHANNELS 


"UPPER" GROUP OF CHANNELS 


CHANNEL 4 (SAME AS CH 0 
CHANNEL 5 (SAME AS CH 0 
CHANNEL 6 (SAME AS CH 0 


CHANNEL 7 (SAME AS CH 0) 


290164-16 


Figure 3-1. 82370 DMA Controller Block Diagram 


fore entering the discussion of the function of the 
82370 DMA Controller, the following explanations of 
some of the terminology used herein may be of ben- 
efit. First, a few terms for clarification: 


DMA PROCESS—A DMA process is the execution 
of a programmed DMA task from beginning to end. 
Each DMA process requires intitial programming by 
the host 80376 microprocessor. 


BUFFER—A contiguous block of data. 


BUFFER TRANSFER—The action required by the 
DMA to transfer an entire buffer. 


DATA TRANSFER—The DMA action in which a 
group of bytes or words are moved between devices 
by the DMA Controller. A data transfer operation 
may involve movement of one or many bytes. 


BUS CYCLE—Access by the DMA to a single byte 
or word. 


Each DMA channel consists of three major compo- 


nents. These components are identified by the con- 
tents of programmable registers which define the 
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memory or I/O devices being serviced by the DMA. 
They are the Target, the Requester, and the Byte 
Count. They will be defined generically here and in 
greater detail in the DMA register definition section. 


The Requester is the device which requires service 
by the 82370 DMA Controller, and makes the re- 
quest for service. All of the control signals which the 
DMA monitors or generates for specific channels 
are logically related to the Requester. Only the Re- 
quester is considered capable of initiating or termi- 
nating a DMA process. 


The Target is the device with which the Requester 
wishes to communicate. As far as the DMA process 
is concerned, the Target is a slave which is incapa- 
ble of control over the process. 


The direction of data transfer can be either from Re- 
quester to Target or from Target to Requester; i.e. 
each can be either a source or a destination. 


The Requester and Target may each be either I/O 
or memory. Each has an address associated with it 
that can be incremented, decremented, or held con- 
stant. The addresses are stored in the Requester 
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Address Registers and Target Address Registers, 
respectively. These registers have two parts: one 
which contains the current address being used in the 
DMA process (Current Address Register), and one 
which holds the programmed base address (Base 
Address Register). The contents of the Base Regis- 
ters are never changed by the 82370 DMA Control- 
ler. The Current Registers are incremented or decre- 


mented according to the progress of the DMA pro- 
cess. 


The Byte Count is the component of the DMA pro- 
cess which dictates the amount of data which must 
be transferred. Current and Base Byte Count Regis- 
ters are provided. The Current Byte Count Register 
is decremented once for each byte transferred by 
the DMA process. When the register is decremented 


past zero, the Byte Count is considered ‘expired’ 


and the process is terminated or restarted, depend- 
ing on the mode of operation of the channel. The 
point at which the Byte Count expires is called “Ter- 
minal Count’ and several status signals are depen- 
dent on this event. 


Each channel of the 82370 DMA Controller also 
contains a 32-bit Temporary Register for use in as- 
sembling and disassembling non-aligned data. The 
operation of this register is transparent to the user, 
although the contents of it may affect the timing of 
some DMA handshake sequences. Since there is 
data storage available for each channel, the DMA 
Controller can be interrupted without loss of data. 


To avoid unexpected results, care should be taken 
in programming the byte count correctly when as- 
sembing and disassembling non-aligned data. For 
example: 


Words to Bytes: 

Transferring two words to bytes, but setting the byte 
count to three, will result in three bytes transferred 
and the final byte flushed. 


Bytes to Words: 

Transferring six bytes to three words, but setting the 
byte count to five, will result in the sixth byte trans- 
ferred being undefined. 


The 82370 DMA Controller is a slave on the bus until 
a request for DMA service is received via either a 
software request command or a hardware request 
signal. The host processor may access any of the 
control/status or channel registers at any time the 
82370 is a bus slave. Figure 3-2 shows the flow of 
operations that the DMA Controller performs. 


At the time a DMA service request is received, the 
DMA Controller issues a bus hold request to the 
host processor. The 82370 becomes the bus master 
when the host relinquishes the bus by asserting a 
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hold acknowledge signal. The channel to be serv- 
iced will be the one with the highest priority at the 
time the DMA Controller becomes the bus master. 
The DMA Controller will remain in control of the bus 
until the hold acknowledge signal is removed, or un- 
til the current DMA transfer is complete. 


While the 82370 DMA Controller has control of the 
bus, it will perform the required data transfer(s). The 
type of transfer, source and destination addresses, 
and amount of data to transfer are programmed in 
the control registers of the DMA channel which re- 
ceived the request for service. 


At completion of the DMA process, the 82370 will 
remove the bus hold request. At this time the 82370 
becomes a slave again, and the host returns to be- 
ing a master. If there are other DMA channels with 
requests pending, the controller will again assert the 
hold request signal and restart the bus arbitration 
and switching process. 


WAIT FOR DMA heen 
SERVICE REQUEST NO REQUEST 


~ REQUEST PENDING 


ASSERT BUS HOLD 
REQUEST 


BUS HOLD ACKNOWLEDGED 


ARBITRATE 
PENDING REQUESTS 


EXECUTE HIGHEST 
PRIORITY TRANSFER 
DE=ASSERT BUS 
HOLD REQUEST 


290164-17 


Figure 3-2. Flow of DMA Controller Operation 


3.2 Interface Signals 


There are fourteen control signals dedicated to the 
DMA process. They include eight DMA Channel Re- 
quests (DREQn), three Encoded DMA Acknowledge 
signals (EDACKn), Processor Hold and Hold Ac- 
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Figure 3-3. Requester, Target and DMA Controller Interconnection 


knowledge (HOLD, HLDA), and End-of-Process 
(EOP #). The DREQn inputs and EDACK (0-2) out- 
puts are handshake signals to the devices requiring 
DMA service. The HOLD output and HLDA input are 
handshake signals to the host processor. Figure 3-3 
shows these signals and how they interconnect be- 
tween the 82370 DMA Controller, and the Requester 
and Target devices. 


3.2.1 DREQn and EDACK (0-2) 


These signals are the handshake signals between 
the peripheral and the 82370. When the peripheral 
requires DMA service, it asserts the DREQn signal 
of the channel which is programmed to perform the 
service. The 82370 arbitrates the DREQn against 
other pending requests and begins the DMA pro- 
cess after finishing other higher priority processes. 


When the DMA service for the requested channel is 
in progress, the EDACK (0-2) signals represent the 
DMA channel which is accessing the Requester. 
The 3-bit code on the EDACK (0-2) lines indicates 
the number of the channel presently being serviced. 


Table 3-2 shows the encoding of these signals. Note | 


that Channel 4 does not have a corresponding hard- 
ware acknowledge. 


The DMA acknowledge (EDACK) signals indicate 
the active channel only during DMA accesses to the 
Requester. During accesses to the Target, EDACK 
(0-2) has the idle code (100). EDACK (0-2) can 
thus be used to select a Requester device during a 
transfer. 


DREQn can be programmed as either an Asynchro- 
nous or Synchronous input. See section 3.4.1 for de- 
tails on synchronous versus asynchronous operation 
of these pins. 
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Table 3-2. EDACK Encoding 
During a DMA Transfer 


The EDACKn signals are always active. They either 
indicate ‘no acknowledge’ or they indicate a bus ac- 
cess to the requester. The acknowledge code is ei- 
ther 100, for an idle DMA or during a DMA access to 
the Target, or ‘n’ during a Requester access, where 
n is the binary value representing the channel. A 
simple 3-line to 8-line decoder can be used to pro- 
vide discrete acknowledge signals for the peripher- 
als. 


3.2.2 HOLD AND HLDA 


The Hold Request (HOLD) and Hold Acknowledge 
(HLDA) signals are the handshake signals between 
the DMA Controller and the host processor. HOLD is 
an output from the 82370 and HLDA is an input. 
HOLD is asserted by the DMA Controller when there 
is a pending DMA request, thus requesting the proc- 
essor to give up control of the bus so the DMA pro- 
cess can take place. The 80376 responds by assert- 
ing HLDA when it is ready to relinquish control of the 
bus. 
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The 82370 will begin operations on the bus one 
clock cycle after the HLDA signal goes active. For 


this reason, other devices on the bus should be in 
the slave mode when HLDA is active. 


HOLD and HLDA should not be used to gate or se- 
lect peripherals requesting DMA service. This is be- 
cause of the use of DMA-like operations by the 
DRAM Refresh Controller. The Refresh Controller is 
arbitrated with the DMA Controller for control of the 
bus, and refresh cycles have the highest priority. A 
refresh cycle will take place between DMA cycles 
without relinquishing bus control. See section 3.4.3 
for a more detailed discussion of the interaction be- 
tween the DMA Controller and the DRAM Refresh 
Controller. 


3.2.3 EOP # 


EOP # is a bi-directional signal used to indicate the 
end of a DMA process. The 82370 activates this as 
an output during the T2 states of the last Requester 
bus cycle for which a channel is programmed to exe- 
cute. The Requester should respond by either with- 
drawing its DMA request, or interrupting the host 
processor to indicate that the channel needs to be 
programmed with a new buffer. As an input, this sig- 
nal is used to tell the DMA Controller that the periph- 
eral being serviced does not require any more data 
to be transferred. This indicates that the current 
buffer is to be terminated. 


EOP# can be programmed as either an Asynchro- 
nous or a Synchronous input. See section 3.4.1 for 
details on synchronous versus asynchronous opera- 
tion of this pin. 


3.3 Modes of Operation 


The 82370 DMA Controller has many independent 
operating functions. When designing peripheral in- 
terfaces for the 82370 DMA Controller, all of the 
functions or modes must be considered. All of the 
channels are independent of each other (except in 
priority of operation) and can operate in any of the 
modes. Many of the operating modes, though inde- 
pendently programmable, affect the operation of 
other modes. Because of the large number of com- 
binations possible, each programmable mode is dis- 
cussed here with its affects on the operation of other 
modes. The entire list of possible combinations will 
not be presented. 


Table 3-1 shows the categories of DMA features 
available in the 82370. Each of the five major cate- 
gories is independent of the others. The sub-catego- 
ries are the available modes within the major func- 
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Table 3-1. DMA Operating Modes 


|. TARGET/REQUESTER DEFINITION 
a. Data Transfer Direction 
b. Device Type, 
. BUFFER PROCESSES 
a. Single Buffer Process 
b. Buffer Auto-Initialize Process 
c. Buffer Chaining Process 
. DATA TRANSFER/HANDSHAKE MODES 
a. Single Transfer Mode 
b. Demand Transfer Mode 
c. Block Transfer Mode 
d. Cascade Mode 
. PRIORITY ARBITRATION 
a. Fixed 
b. Rotating 
c. Programmable Fixed 
. BUS OPERATION 
a. Fly-By (Single-Cycle)/Two-Cycle 
b. Data Path Width 
c. Read, Write, or Verify Cycles 


tion or mode category. The following sections ex- | 
plain each mode or function and its relation to other 
features. 


3.3.1 TARGET/REQUESTER DEFINITION 


All DMA transfers involve three devices: the DMA 
Controller, the Requester, and the Target. Since the 
devices to be accessed by the DMA Controller vary 
widely, the operating characteristics of the DMA 
Controller must be tailored to the Requester and 
Target devices. 


The Requester can be defined as either the source 
or the destination of the data to be transferred. This 
is done by specifying a Write or a Read transfer, 
respectively. In a Read transfer, the Target is the 
data source and the Requester is the destination for 
the data. In a Write transfer, the Requester is the 
source and the Target is the destination. 


The Requester and Target addresses can each be 
independently programmed to be incremented, dec- 
remented, or held constant. As an example, the 
82370 is capable of reversing a string of data by 
having the Requester address increment and the 
Target address decrement in a memory-to-memory 
transfer. 
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3.3.2 BUFFER TRANSFER PROCESSES 


The 82370 DMA Controller allows three programma- 
ble Buffer Transfer Processes. These processes de- 
fine the logical way in which a buffer of data is ac- 
cessed by the DMA. ; 


The three Buffer Transfer Processes include the Sin- 
gle Buffer Process, the Buffer Auto-Initialize Pro- 
cess, and the Buffer Chaining Process. These pro- 
cesses require special programming considerations. 
See the DMA Programming section for more details 
on setting up the Buffer Transfer Processes. 


Single Buffer Process 


The Single Buffer Process allows the DMA channel 
to transfer only one buffer of data. When the buffer 
has been completely transferred (Current Byte 
Count decremented past zero or EOP# input ac- 
tive), the DMA process ends and the channel be- 
comes idle. In order for that channel to be used 
again, it must be reprogrammed. 


The Single Buffer Process is usually used when the 
amount of data to be transferred is known exactly, 
and it is also known that there is not likely to be any 
data to follow before the operating system can re- 
program the channel. 


Buffer Auto-initialize Process 


The Buffer Auto-Initialize Process allows multiple 
groups of data to be transferred to or from a single 
buffer. This process does not require reprogram- 
ming. The Current Registers are automatically repro- 
grammed from the Base Registers when the current 
process is terminated, either by an expired Byte 
Count or by an external EOP# signal. The data 
transferred will always be between the same Target 
and Requester. 


The auto-initialization/process-execution cycle is re- 
peated until the channel is either disabled or re-pro- 
grammed. 


Buffer Chaining Process 


The Buffer Chaining Process is useful for transfer- 
ring large quantities of data into non-contiguous 
buffer areas. In this process, a single channel is 
used to process data from several buffers, while 
having to program the channel only once. Each new 
buffer is programmed in a pipelined operation that 
provides the new buffer information while the old 
buffer is being processed. The chain is created by 
loading new buffer information while the 82370 DMA 
Controller is processing the Current Buffer. When 
the Current Buffer expires, the 82370 DMA Control- 
ler automatically restarts the channel using the new 
buffer information. 
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Loading the new buffer information is done by an 
interrupt routine which is requested by the 82370. 
Interrupt Request 1 (IRQ1) is tied internally to the 
82370 DMA Controller for this purpose. IRQ1 is gen- 
erated by the 82370 when the new buffer informa- 
tion is loaded into the channel’s Current Registers, 
leaving the Base Registers ‘empty’. The interrupt 
service routine loads new buffer information into the 
Base Registers. The host processor is required to 
load the information for another buffer before the 
current Byte Count expires. The process repeats un- | 
til the host programs the channel back to single buff- 
er operation, or until the channel runs out of buffers. 


The channel runs out of buffers when the Current 
Buffer expires and the Base Registers have not yet 
been loaded with new buffer information. When this 
occurs, the channel must be reprogrammed. 


‘If an external EOP # is encountered while executing 


a Buffer Chaining Process, the current buffer is con- 
sidered expired and the new buffer information is 
loaded into the Current Registers. If the Base Regis- 
ters are ‘empty’, the chain is terminated. 


The channel uses the Base Target Address Register 
as an indicator of whether or not the Base Registers 
are full. When the most significant byte of the Base 
Target Register is loaded, the channel considers all 
of the Base Registers loaded, and removes the in- 
terrupt request. This requires that the other Base 
Registers (Base Requester Address, Base Byte 
Count) must be loaded before the Base Target Ad- 
dress Register. The reason for implementing the re- 
loading process this way is that, for most applica- 
tions, the Byte Count and the Requester will not 
change from one buffer to the next, and therefore do 
not need to be reprogrammed. The details of pro- 
gramming the channel for the Buffer Chaining Pro- 
cess can be found in the section on DMA program- 
ming. 


_ 3.3.3 DATA TRANSFER MODES 


Three Data Transfer modes are available in the 
82370 DMA Controller. They are the Single Transfer, 
Block Transfer, and Demand Transfer Modes. 
These transfer modes can be used in conjunction 
with any one of three Buffer Transfer modes: Single 
Buffer, Auto-Initialized Buffer and Buffer Chaining. 
Any Data Transfer Mode can be used under any of 


' the Buffer Transfer Modes. These modes are inde- 


pendently available for all DMA channels. 


Different devices being serviced by the DMA Con- 
troller require different handshaking sequences for 
data transfers to take place. Three handshaking 
modes are available on the 82370, giving the de- 
signer the opportunity to use the DMA Controller as 
efficiently as possible. The speed at which data can 
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be presented or read by a device can affect the way 
a DMA Controller uses the host’s bus, thereby af- 
fecting not only data throughput during the DMA pro- 


cess, but also affecting the host’s performance by 
limiting its access to the bus. 


Single Transfer Mode 


In the Single Transfer Mode, one data transfer to or 
from the Requester is performed by the DMA Con- 
troller at a time. The DREQn input is arbitrated and 
the HOLD/HLDA sequence is executed for each 
transfer. Transfers continue in this manner until the 
Byte Count expires, or until EOP # is sampled active. 
If the DREQn input is held active continuously, the 
entire DREQ-HOLD-HLDA-DACK sequence is re- 
peated over and over until the programmed number 
of bytes has been transferred. Bus control is re- 
leased to the host between each transfer. Figure 3-4 
shows the logical flow of events which make up a 
buffer transfer using the Single Transfer Mode. Re- 
fer to section 3.4 for an explanation of the bus con- 
trol arbitration procedure. 


The Single Transfer Mode is used for devices which 
require complete handshake cycles with each data 
access. Data is transferred to or from the Requester 
only when the Requester is ready to perform the 
transfer. Each transfer requires the entire DREQ- 


T Tx Ti 
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HOLD-HLDA-DACK handshake cycle. Figure 3-5 
shows the timing of the Single Transfer Mode cycle. 


INITIALIZE BUFFER 
WAIT FOR DREQn 
OR SOFTWARE REQUEST 


EXECUTE 


ONE REQUESTER 
TRANSFER 


D OF BUFFER 
soi atte as 290164-19 


Figure 3-4. Buffer Transfer 
in Single Transfer Mode 
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The Single Transfer Mode is more efficient (15%-—20%) in the case where the source is the Target. Because of the 
internal pipeline of the 82370 DMA Controller, two idle states are added at the end of a transfer in the case where the 


source is the Requester. 


Figure 3-5. DMA Single Transfer Mode 
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Block Transfer Mode 


In the Block Transfer Mode, the DMA process is ini- INITIALIZE BUFFER 
tiated by a DMA request and continues unti the Byte 
Count expires, or until EOP # is activated by the Re- 
quester. The DREQn signal need only be held active 7 
until the first Requester access. Only a refresh cycle 
will interrupt the block transfer process. 


Figure 3-6 illustrates the operation of the DMA dur- EOP OR TC 


ing the Block Transfer Mode. Figure 3-7 shows the 
timing of the handshake signals during Block Mode END OF BUFFER 290164-21 
Transfers. 


Figure 3-6. Buffer Transfer 
in Block Transfer Mode 
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Figure 3-7. Block Mode Transfers 


1-632 


intel : | 7 82370 


Demand Transfer Mode 


The Demand Transfer Mode provides the most flex- 


ible handshaking procedures during the DMA pro- 
cess. A Demand Transfer is initiated by a DMA re- 
quest. The process continues until the Byte Count 

expires, or an external EOP # is encountered. If the 
device being serviced (Requester) desires, it can in- 
terrupt the DMA process by de-activating the 
DREQn line. Action is taken on the condition of DREQn DE=ACTIVATED 
DREQn during Requester accesses only. The ac- OR EOP OR TC 
cess during which DREQn is sampled inactive is the 
last Requester access which will be performed dur- 
ing the current transfer. Figure 3-8 shows the flow of 
events during the transfer of a buffer in the Demand 
Mode. 


TRANSFER DATA UNTIL 


When the DREQn line goes inactive, the DMA Con- END OF BUFFER paren 
troller will complete the current transfer, including 

any necessary accesses to the Target, and relin- Figure 3-8. Buffer Transfer 

quish control of the bus to the host. The current pro- | in Demand Transfer Mode 


cess information is saved (byte count, Requester 
and Target addresses, and Temporary Register). 


The Requester can restart the transfer process by 
reasserting DREQn. The 82370 will arbitrate the re- 
quest with other pending requests and begin the 
process where it left off. Figure 3-9 shows the timing 
of handshake signals during Demand Transfer Mode 
operation. 


Tx Tx Ti Ti T1 T2 Ti Tx Tx 


Eivatatatatavavavara'a tata a 


DREQn (SYNCHRONOUS) a oo 
a ca 


x os gg = a 
ADS# XXOQOQQOOQOQOOQ XY) OOOO XXX 


iene BEB guing a 
READY# XXXXXXXXXX XXX XK KKK KK KA Ly AXXXX) ee OXXXXKX 
A(1=23) | | | ! 
BLE#, BHE# XXXQOO OOO at RS a eee eS XK : 5 QOXX 
WR#, M/lO# l l l 


EOP# REXKRXKRRKRRKRRKKRKARKARRARRARRKKEZ | WERRREZ |  \KRXRRKKKKKRKRRKKRKKRKKKKE 


290164-24 


Figure 3-9. Demand Mode Transfers 
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Using the Demand Transfer Mode allows peripherals 
_ to access memory in small, irregular bursts without 
wasting bus control time. The 82370 is designed to 
give the best possible bus control latency in the De- 
mand Transfer Mode. Bus control latency is defined 
here as the time form the last active bus cycle of the 
previous bus master to the first active bus cycle of 
the new bus master. The 82370 DMA Controller will 
perform its first bus access cycle two bus states af- 
ter HLDA goes active. In the typical configuration, 
bus control is returned to the host one bus state 
after the DREQn goes inactive. 


There are two cases where there may be more than 
one bus state of bus control latency at the end of a 
transfer. The first is at the end of an Auto-Initialize 
process, and the second is at the end of a process 
where the source is the Requester and Two-Cycle 
transfers are used. 


When a Buffer Auto-Initialize Porcess is complete, 
the 82370 requires seven bus states to reload the 
Current Registers from the Base Registers of the 
Auto-Initialized channel. The reloading is done while 
the 82370 is still the bus master so that it is prepared 
to service the channel immediately after relinquish- 
ing the bus, if necessary. 


¥ 
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In the case where the Requester is the source, and 
Two-Cycle transfers are being used, there are two 
extra idle states at the end of the transfer process. 
This occurs due to the housekeeping in the DMA’s 
internal pipeline. These two idle states are present 


only after the very last Requester access, before the 
DMA Controller de-activates the HOLD signal. 


3.3.4 CHANNEL PRIORITY ARBITRATION 


DMA channel priority can be programmed into one 
of two arbitration methods: Fixed or Rotating. The 
four lower DMA channels and the four upper DMA 
channels operate as if they were two separate DMA 
controllers operating in cascade. The lower group of 
four channels (0-3) is always prioritized between 
channels 7 and 4 of the upper group of channels (4- 
7). Figure 3-10 shows a pictorial representation of 
the priority grouping. 


The priority can thus be set up as rotating for one 
group of channels and fixed for the other, or any 
other combination. While in Fixed Priority, the pro- 
grammer can also specify which channel has the 
lowest priority. 


LOW PRIORITY 


CHANNEL 3 


CHANNEL 2 
CHANNEL 1 


CHANNEL O 


HIGH PRIORITY 
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Figure 3-10. DMA Priority Grouping 
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The 82370 DMA Controller defaults to Fixed Priority. 
Channel 0 has the highest priority, then 1, 2, 3, 4, 5, 
6, 7. Channel 7 has the lowest priority. Any time the 
DMA Controller arbitrates DMA requests, the re- 


questing channel with the highest priority will be 
serviced next. 


Fixed Priority can be entered into at any time by a 
software command. The priority levels in effect after 
the mode switch are determined by the current set- 
ting of the Programmable Priority. 


Programmable Priority is available for fixing the prior- 
ity of the DMA channels within a group to levels oth- 
er than the default. Through a software command, 
the channel to have the lowest priority in a group 
can be specified. Each of the two groups of four 
channels can have the priority fixed in this way. The 
other channels in the group will follow the natural 
Fixed Priority sequence. This mode affects only the 
priority levels while operating with Fixed Priority. 


For example, if channel 2 is programmed to have the 
lowest priority in its group, channel 3 has the highest 
priority. In descending order, the other channels 
would have the following priority: (3,0,1,2),4,5,6,7 
(channel 2 lowest, channel 3 highest). If the upper 


CHANNEL 6 
CHANNEL 7 
PHANTOM 


CHANNEL 4 
CHANNEL 5 
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group were programmed to have channel 5 as the 
lowest priority channel, the priority would be (again, 
highest to lowest): 6,7, (3,0,1,2), 4,5. Figure 3-11 
shows this example pictorially. The lower group is 
always prioritized as a fifth channel of the upper 
group (between channels 4 and 7). 


The DMA Controller will only accept Programmable 
Priority commands while the addressed group is op- 
erating in Fixed Priority. Switching from Fixed to Ro- 
tating Priority preserves the current priority levels. 
Switching from Rotating to Fixed Priority returns the 
priority levels to those which were last programmed 
by use of Programmable Priority. 


Rotating Priority allows the devices using DMA to 
share the system bus more evenly. An individual 
channel does not retain highest priority after being 
serviced, priority is passed to the next highest priori- 
ty channel in the group. The channel which was 
most recently serviced inherits the lowest priority. 
This rotation occurs each time a channel is serviced. 
Figure 3-12 shows the sequence of events as priori- 
ty is passed between channels. Note that the lower 
group rotates within the upper group, and that serv- 
icing a channel within the lower group causes rota- 
tion within the group as well as rotation of the upper 


group. 


LOW PRIORITY 


HIGH PRIORITY 
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Figure 3-11. Example of Programmed Priority 
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0/1 ]2/3 4|5|6|7|— default (highest to low- 
est) 


DREQ2 and DREQ6—process channel 2 


4/5/6|7 [3[o]1]2]— channel 2 drops to low- 


est priority within group. 
Lower group drops to 
lowest priority within up- 
per group. (Double Rota- 
tion) 


DREQ6 (still) and DREQ7—process channel 6 


3/0] 12 |4] 5/6] — channel 6 drops to low- 


est priority within group 
DREQ7 (still) and DREQO—process channel 7 


30] 1] 21 41516] 7) — channel 7 drops to low- 


est priority within group 
DREQO (still) and DREQ1—process channel 0 


4|5|6|7, 1]2/3]0 — channel 0 drops to low- 


est priority within group. 
(Double Rotation) 


DREQ1 (still)\—process channel 1 


4|5|6|7 /2|3|0] 1] — channel 1 drops to low- 


est priority within group 


Figure 3-12. Rotating Channel Priority. 
Lower and upper groups are programmed 
for the Rotating Priority Mode. 


3.3.5 COMBINING PRIORITY MODES 


Since the DMA Controller operates as two four- 
channel controllers in cascade, the overall priority 
scheme of all eight channels can take on a variety of 
forms. There are four possible combinations of prior- 
ity modes between the two groups of channels: 
Fixed Priority only (default), Fixed Priority upper 
group/Rotating Priority lower group, Rotating Priority 
upper group/Fixed Priority lower group, and Rotating 
Priority only. Figure 3-13 illustrates the operation of 
the two combined priority methods. 
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Case 1— 
0-3 Fixed Priority, 4-7 Rotating Priority 
High Low 


Case 2— | 
0-3 Rotating Priority, 4-7 Fixed Priority 
High Low 


After servicing channel 2 
After servicing channel 6 
After servicing channel 1 


Figure 3-13. Combining Priority Modes 


Default priority 


After servicing channel 2 


After servicing channel 6 


After servicing channel 1 


Default priority 


3.3.6 BUS OPERATION 


Data may be transferred by the DMA Controller us- 
ing two different bus cycle operations: Fly-By (one- 
cycle) and Two-Cycle. These bus handshake meth- 
ods are selectable independently for each channel 
through a command register. Device data path 
widths are independently programmable for both 
Target and Requester. Also selectable through soft- 
ware is the direction of data transfer. All of these 
parameters affect the operation of the 82370 ona 
bus-cycle by bus-cycle basis. 


3.3.6.1 Fly-By Transfers 


The Fly-By Transfer Mode is the fastest and most 
efficient way to use the 82370 DMA Controller to 
transfer data. In this method of transfer, the data is 
written to the destination device at the same time it 
is read from the source. Only one bus cycle is used 
to accomplish the transfer. 
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In the Fly-By Mode, the DMA acknowledge signal is 
used to select the Requester. The DMA Controller 
simultaneously places the address of the Target on 
the address bus. The state of M/IO# and W/R# 
during the Fly-By transfer cycle indicate the type of 
Target and whether the Target is being written to or 
read from. The Target’s Bus Size is used as an in- 
crementer for the Byte Count. The Requester ad- 
dress registers are ignored during Fly-By transfers. 


Note that memory-to-memory transfers cannot be 
done using the Fly-By Mode. Only one memory of 
|/O address is generated by the DMA Controller at a 
time during Fly-By transfers. Only one of the devices 
being accessed can be selected by an address. 
Also, the Fly-By method of data transfer limits the 
hardware to accesses of devices with the same data 
bus width. The Temporary Registers are not affect- 
ed in the Fly-By Mode. 


Fly-By transfers also require that the data paths of 
the Target and Requester be directly connected. 
This requires that successive Fly-By access be to 
word boundaries, or that the Requester be capable 
of switching its connections to the data bus. 


3.3.6.2 Two-Cycle Transfers 


Two-Cycle transfers can also be performed by the 
82370 DMA Controller. These transfers require at 
least two bus cycles to execute. The data being 
transferred is read into the DMA Controller’s Tempo- 
rary Register during the first bus cycle(s). The sec- 
ond bus cycle is used to write the data from the 
Temporary Register to the destination. 


If the addresses of the data being transferred are 
not word aligned, the 82370 will recognize the situa- 
tion and read and write the data in groups of bytes, 
placing them always at the proper destination. This 
process of collecting the desired bytes and putting 
them together is called “byte assembly”. The re- 
verse process (reading from aligned locations and 
writing to non-aligned locations) is called “byte dis- 
assembly”’. 


The assembly/disassembly process takes place 
transparent to the software, but can only be done 
while using the Two-Cycle transfer method. The 
82370 will always perform the assembly/disassem- 
bly process as necessary for the current data trans- 
fer. Any data path widths for either the Requester or 
Target can be used in the Two-Cycle Mode. This is 
very convenient for interfacing existing 8- and 16-bit 
peripherals to the 80376’s 16-bit bus. | 


The 82370 DMA Controller always reads and write 
data within the word boundaries; i.e. if a word to be 
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read is crossing a word boundary, the DMA Control- 
ler will perform two read operations, each reading 
one byte, to read the 16-bit word into the Temporary 
Register. Also, the 82370 DMA Controller always at- 
tempts to fill the Temporary Register from the 
source before writing any data to the destination. If 
the process is terminated before the Temporary 
Register is filled (TC or EOP #), the 82370 will write 
the partial data to the destination. If a process is 
temporarily suspended (such as when DREQnh is de- 
activated during a demand transfer), the contents of 
a partially filled Temporary Register will be stored 
within the 82370 until the process is restarted. 


For example, if the source is specified as an 8-bit 
device and the destination as a 32-bit device, there 
will be four reads as necessary from the 8-bit source 
to fill the Temporary Register. Then the 82370 will 
write the 32-bit contents to the destination in two 
cycles of 16-bit each. This cycle will repeat until the 
process is terminated or suspended. 


With Two-Cycle transfers, the devices that the 
82370 accesses can reside at any address within 
|/O or memory space. The device must be able to 
decode the byte-enables (BLE#, BHE #). Also, if the 
device cannot accept data in byte quantities, the 
programmer must take care not to allow the DMA 
Controller to access the device on any address oth- 
er than the device boundary. 


3.3.6.3 Data Path Width and Data Transfer Rate 
Considerations 


The number of bus cycles used to transfer a single 
“word” of data is affected by whether the Two-Cycle 
or the Fly-By (Single-Cycle) transfer method is used. 


The number of bus cycles used to transfer data di- 
rectly affects the data transfer rate. Inefficient use of 
bus cycles will decrease the effective data transfer 
rate that can be obtained. Generally, the data trans- 
fer rate is halved by using Two-Cycle transfers in- 
stead of Fly-By transfers. 


The choice of data path widths of both Target and 
Requester affects the data transfer rate also. During 
each bus cycle, the largest pieces of data possible 
should be transferred. 


The data path width of the devices to be accessed 
must be programmed into the DMA controller. The 
82370 defaults after reset to 8-bit-to-8-bit data trans- 
fers, but the Target and Requester can have differ- 
ent data path widths, independent of each other and 
independent of the other channels. Since this is a 
software programmable function, more discussion of 
the uses of this feature are found in the section on 
programming. 
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3.3.6.4 Read, Write and Verify Cycles 


Three different bus cycles types may be used in a 
data transfer. They are the Read, Write and Verify 
cycles. These cycle types dictate the way in which 
the 82370 operates on the data to be transferred. 


A Read Cycle transfers data from the Target to the 
Requester. A Write Cycle transfers data from the 
Requester to the target. In a Fly-By transfer, the ad- 
dress and bus status signals indicate the access 
(read of write) to the Target; the access to the Re- 
quester is assumed to be the opposite. 


The Verify Cycle is used to perform a data read only. 
No write access is indicated or assumed in a Verify 
Cycle. The Verify Cycle is useful for validating block 
fill operations. An external comparator must be pro- 
vided to do any comparisons on the data read. 


3.4 Bus Arbitration and Handshaking 


Figure 3-14 shows the flow of events in the DMA 
request arbitration process. The arbitration se- 
_ quence starts when the Requester asserts a DREQn 
(or DMA service is requested by software). Figure 
3-15 shows the timing of the sequence of events 
following a DMA request. This sequence is executed 
for each channel that is activated. The DREQn sig- 
nal can be replaced by a software DMA channel re- 
quest with no change in the sequence. 


After the Requester asserts the service request, the 
82370 will request control of the bus via the HOLD 
signal. The 82370 will always assert the HOLD sig- 
nal one bus state after the service request is assert- 
ed. The 80376 responds by asserting the HLDA sig- 
nal, thus releasing control of the bus to the 82370 
DMA Controller. 


Priority of pending DMA service requests is arbitrat- 
ed during the first state after HLDA is asserted by 
the 80376. The next state will be the beginning of 
the first transfer access of the highest priority pro- 
cess. 


When the 82370 DMA Controller is finished with its 
current bus activity, it returns control of the bus to 
the host processor. This is done by driving the 
HOLD signal inactive. The 82370 does not drive any 
address or data bus signals after HOLD goes low. It 
enters the Slave Mode until another DMA process is 
requested. The processor acknowledges that it has 
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regained control of the bus by forcing the HLDA sig- 
nal inactive. Note that the 82370’s DMA Controller 
will not re-request control of the bus until the entire 
HOLD/HLDA handshake sequence is complete. 


WAIT FOR DREQn OR SOFTWARE REQUEST 
REQUESTER ASSERTS DREQn 
82370 ASSERTS HOLD REQUEST 


TRANSFER (SEE DATA TRANSFER MODES) 


290164-27 


Figure 3-14. Bus Arbitration and DMA Sequence 


The 82370 DMA Controller will terminate a current 
DMA process for one of three reasons: expired byte 
count, end-of-process command (EOP # activated) 
from a peripheral, or deactivated DMA request sig- 
nal. In each case, the controller will de-assert HOLD 
immediately after completing the data transfer in 
progress. These three methods of process termina- 
tion are illustrated in Figures 3-16, 3-19 and 3-18, 
respectively. 


An expired byte count indicates that the current pro- 
cess is complete as programmed and the channel 
has no further transfers to process. The channel 
must be restarted according to the currently pro- 
grammed Buffer Transfer Mode, or reprogrammed 
completely, including a new Buffer Transfer Mode. 


ADS# JOOQOQOOOOOOOOOX XY 
] | | 


NOTE: 


respond to HLDA without extra idle bus states. 


If the peripheral activates the EOP # signal, it is indi- 
cating that it will not accept or deliver any more data 
for the current buffer. The 82370 DMA Controller 
considers this as a completion of the channel’s cur- 
rent process and interprets the condition the same 
way as if the byte count expired. 


The action taken by the 82370 DMA Controller in 
response to a de-activated DREQn signal depends 
on the Data Transfer Mode of the channel. In the 
Demand Mode, data transfers will take place as long 
as the DREQn is active and the byte count has not 
expired. In the Block Mode, the controller will com- 
plete the entire block transfer without relinquishing 
the bus, even if DREQn goes inactive before the 
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WR#, M/lO# (acca SCE 
EDACK (0-2) 
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Channel priority resolution takes place during the bus state before HOLDA is asserted, allowing the DMA Controller to 


Figure 3-15. Beginning of a DMA process 
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transfer is complete. In the Single Mode, the control- 
ler will execute single data transfers, relinquishing 
the bus between each transfer, as long as DREQn is 
active. 


Normal termination of a DMA process due to expira- 
tion of the byte count (Terminal Count—TC) is 
shown if Figure 3-16. The condition of DREQn is 
ignored until after the process is terminated. If the 
channel is programmed to auto-initialize, HOLD will 
be held active for an additional seven clock cycles 
while the auto-initialization takes place. 


Table 3-3 shows the DMA channel activity due to 
EOP # or Byte Count expiring (Terminal Count). 


Table 3-3. DMA Channel Activity Due to Terminal Count or External EOP # 


Single or 
Chaining-Base 
Empty 


Buffer Process 


EVENT 


Terminal Count 
EOP # 


RESULTS 


Current Registers 
Channel Mask 

EOP # Output 
Terminal Count Status 
Software Request 


Auto- 
Initialize 


Chaining-Base 
Loaded 
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Figure 3-16. Termination of a DMA Process Due to Expiration of Current Byte Count 
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Figure 3-17. Switching between Active DMA Channels 


The 82370 always relinquishes control of the bus 
between channel services. This allows the hardware 
designer the flexibility to externally arbitrate bus hold 
requests, if desired. If another DMA request is pend- 
ing when a higher priority channel service is com- 
pleted, the 82370 will relinquish the bus until the 
hold acknowledge is inactive. One bus state after 
the HLDA signal goes inactive, the 82370 will assert 
HOLD again. This is illustrated in Figure 3-17. 


3.4.1 SYNCHRONOUS AND ASYNCHRONOUS 
SAMPLING OF DREQn AND EOP# 


As an indicator that a DMA service is to be started, 
DREQn is always sampled asynchronous. It is sam- 
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pled at the beginning of a bus state and acted upon 
at the end of the state. Figure 3-15 illustrates the 
start of a DMA process due to a DREQn input. 


The DREQn and EOP # inputs can be programmed 
to be sampled either synchronously or asynchro- 
nously to signal the end of a transfer. 


The synchronous mode affords the Requester one 
bus state of extra time to react to ‘an access. This 
means the Requester can terminate a process on 
the current access, without losing any data. The 
asynchronous mode requires that the input signal be 
presented prior to the beginning of the last state of 
the Requester access. 


a 
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The timing relationships of the DREQn and EOP # 
signals to the termination of a DMA transfer are 
shown in Figures 3-18 and 3-19. Figure 3-18 shows 
the termination of a DMA transfer due to inactive 


DREQn. Figure 3-19 shows the termination of a 
DMA process due to an active EOP # input. 


In the Synchronous Mode, DREQn and EOP# are 
sampled at the end of the last state of every Re- 
quester data transfer cycle. If EOP# is active or 
DREQn is inactive at this time, the 82370 recognizes 
this access to the Requester as the last transfer. At 
this point, the 82370 completes the transfer in prog- 
ress, if necessary, and returns bus control to the 
host. 


CLK 


ADS# 


READY# XXXXXXXX) 


AXXXXXXXXKA 
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In the asynchronous mode, the inputs are sampled 
at the beginning of every state of a Requester ac- 
cess. The 82370 waits until the end of the state to 
act on the input. 


DREQn and EOP# are sampled at the latest possi- 
ble time when the 82370 can determine if another 
transfer is required. In the Synchronous Mode, 
DREQn and EOP # are sampled on the trailing edge 
of the last bus state before another data access cy- 
cle begins. The Asynchronous Mode requires that 
the signals be valid one clock cycle earlier. 
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Figure 3-18. Termination of a DMA Process due to De-Asserting DREQn 
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Figure 3-19. Termination of a DMA Process due to an External EOP # 
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While in the Pipeline Mode, if the NA# signal is sam- 
pled active during a transfer, the end of the state 
where NA# was sampled active is when the 82370 
decides whether to commit to another transfer. The 
device must de-assert DREQn or assert EOP # be- 
fore NA# is asserted, otherwise the 82370 will com- 
mit to another, possibly undesired, transfer. 


Synchronous DREQn and EOP# sampling allows 
the peripheral to prevent the next transfer from oc- 
curring by de-activating DREQn or asserting EOP # 
during the current Requester access, before the 
82370 DMA Controller commits itself to another 
transfer. The DMA Controller will not perform the 
next transfer if it has not already begun the bus cy- 
cle. Asynchronous sampling allows less stringent 
timing requirements than the Synchronous Mode, 
but requires that the DREQn signal be valid at the 
beginning of the next to last bus state of the current 
Requester access. 


Using the Asynchronous Mode with zero wait states 
can be very difficult. Since the addresses and con- 
trol signals are driven by the 82370 near half-way 
through the first bus state of a transfer, and the 
Asynchronous Mode requires that DREQn be inac- 
tive before the end of the state, the peripheral being 
accessed is required to present DREQn only a few 
nanoseconds after the control information is avail- 
able. This means that the peripheral’s control logic 
must be extremely fast (practically non-causal). An 
alternative is the Synchronous Mode. 


a 
intel. 
3.4.2 ARBITRATION OF CASCADED MASTER 
REQUESTS | 


The Cascade Mode allows another DMA-type de- 
vice to share the bus by arbitrating its bus accesses 
with the 82370’s. Seven of the eight DMA channels 
(0-3 and 5-7) can be connected to a cascaded de- 
vice. The cascaded device requests bus control 
through the DREQn line of the channel which is pro- 
grammed to operate in Cascade Mode. Bus hold ac- 


_knowledge is signalled to the cascaded device 


through the EDACK lines. When the EDACK lines 
are active with the code for the requested cascade 
channel, the bus is available to the cascaded master 
device. 


A cascade cycle begins the same way a regular 
DMA cycle begins. The requesting bus master as- 
serts the DREQn line on the 82370. This bus control 
request is arbitrated as any other DMA request 
would be. If any channel receives a DMA request, 
the 82370 requests control of the bus. When the 
host acknowledges that it has released bus control, 
the 82370 acknowledges to the requesting master 
that it may access the bus. The 82370 enters an idle 
state until the new master relinquishes control. 


A cascade cycle will be terminated by one of two 
events: DREQn going inactive, or HLDA going inac- 
tive. The normal way to terminate the cascade cycle 


Bus Master 0 
HOLD REQUEST 


HOLD ACKNOWLEDGE 


HOLD ACKNOWLEDGE 
Bus Master 7 
HOLD REQUEST 
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Figure 3-20. Cascaded Bus Master 
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is for the cascaded master to drop the DREQn sig- 


nal. Figure 3-21 shows the two cascade cycle termi- 
nation sequences. 


The Refresh Controller may interrupt the cascaded 
master to perform a refresh cycle. If this occurs, the 
82370 DMA Controller will de-assert the EDACK sig- 
nal (hold acknowledge to cascaded master) and wait 
for the cascaded master to remove its hold request. 
When the 82370 regains bus control, it will perform 
the refresh cycle in its normal fashion. After the re- 
fresh cycle has been completed, and if the cascad- 
ed device has re-asserted its request, the 82370 will 
return control to the cascaded master which was in- 
terrupted. 


The 82370 assumes that it is the only device moni- 
toring the HLDA signal. If the system designer 
wishes to place other devices on the bus as bus 
masters, the HLDA from the processor must be in- 
tercepted before presenting it to the 82370. Using 
the Cascade capabililty of the 82370 DMA Controller 
offers a much better solution. 


3.4.3 ARBITRATION OF REFRESH REQUESTS 


The arbitration of refresh requests by the DRAM Re- 
fresh Controller is slightly different from normal DMA 
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channel request arbitration. The 82370 DRAM Re- 
fresh Controller always has the highest priority of 
any DMA process. It also can interrupt a process in 
progress. Two types of processes in progress may 
be encountered: normal DMA, and bus master cas- 
cade. 


In the event of a refresh request during a normal 
DMA process, the DMA Controller will complete the 
data transfer in progress and then execute the re- 
fresh cycle before continuing with the current DMA 
process. The priority of the interrupted process is 


not lost. If the data transfer cycle interrupted by the 


Refresh Controller is the last of a DMA process, the 
refresh cycle will always be executed before control 
of the bus is transferred back to the host. 


When the Refresh Controller request occurs during 
a cascade cycle, the Refresh Controller must be as- 
sured that the cascaded master device has relin- 
quished control of the bus before it can execute the 
refresh cycle. To do this, the DMA Controller drops 
the EDACK signal to the cascaded master and waits 
for the corresponding DREQn input to go inactive. 
By dropping the DREQn signal, the cascaded mas- 
ter relinquishes the bus. The Refresh Controller then 
performs the refresh cycle. Control of the bus is re- 
turned to the cascaded master if DREQn returns to 
an active state before the end of the refresh cycle, 
otherwise control is passed to the processor and the 
cascaded master loses its priority. 


Cascade cycle termination by DREQn inactive 
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Figure 3-21. Cascade Cycle Termination 
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3.5 DMA Controller Register Overview 


The 82370 DMA Controller contains 44 registers 
which are accessable to the host processor. Twen- 
ty-four of these registers contain the device ad- 
dresses and data counts for the individual DMA 
channels (three per channel). The remaining regis- 
ters are control and status registers for initiating and 
monitoring the operation of the 82370 DMA Control- 
ler. Table 3-4 lists the DMA Controller's registers 
and their accessability. 


Table 3-4. DMA Controller Registers 


Control/Status Registers—one each per group 


Command Register | write only 
Command Register II write only 
Mode Register | write only 
Mode Register II write only 
Software Request Register read/write 
Mask Set-Reset Register write only 
Mask Read-Write Register read/write 
Status Register read only 
Bus Size Register write only 
Chaining Register read/write 
Channel Registers—one each per channel 
Base Target Address write only 
Current Target Address read only 
Base Requester Address write only 
Current Requester Address read only 
Base Byte Count write only 


Current Byte Count read only 


3.5.1 CONTROL/STATUS REGISTERS 


The following registers are available to the host 
processor for programming the 82370 DMA Control- 
ler into its various modes and for checking the oper- 
ating status of the DMA processes. Each set of four 
DMA channels has one of each of these registers 
associated with it. 


Command Register | 


Enables or disables the DMA channel as a group. 
Sets the Priority Mode (Fixed or Rotating) of the 
group. This write-only register is cleared by a hard- 
ware reset, defaulting to all channels enabled and 
Fixed Priority Mode. 


Command Register Il 
Sets the sampling mode of the DREQn and EOP # 
inputs. Also sets the lowest priority channel for the 


group in the Fixed Priority Mode. The functions pro- 
grammed through Command Register || default after 
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Register Name Access 
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a hardware reset to: asynchronous DREQn and 
EOP#, and channels 3 and 7 lowest priority. 


Mode Registers | 


Mode Register | is identical in function to the Mode 
register of the 8237A. It programs the following func- 
tions for an individually selected channel: 


Type of Transfer—read, write, verify 
Auto-Initialize—enable or disable 

Target Address Count—increment or decrement 
Data Transfer Mode—demand, single, block, 
cascade 


Mode Register | functions default to the following 
after reset: verify transfer, Auto-Initialize disabled, In- 
crement Target address, Demand Mode. 


Mode Register Il 


Programs the following functions for an individually 
selected channel: 


Target Address Hold—enable or disable 
Requester Address Count—increment or 
decrement 

Requester Address Hold—enable or disable 
Target Device Type—|/O or Memory 
Requester Device Type—|/O or Memory 
Transfer Cycles—Two-Cycle or Fly-By 


Mode Register II functions are defined as follows 
after a hardware reset: Disable Target Address Hold, 
Increment Requester Address, Target (and Re- 
quester) in memory, Fly-By Transfer Cycles. Note: 
Requester Device Type ignored in Fly-By Transfers. 


Software Request Register 


The DMA Controller can respond to service requests 
which are initiated by software. Each channel has an 
internal request status bit associated with it. The 
host processor can write to this register to set or 
reset the request bit of a selected channel. 


The status of a group’s software DMA service re- 
quests can be read from this register as well. Each 
status bit is cleared upon Terminal Count or external 
EOP #. 


The software DMA requests are non-maskable and 
subject to priority arbitration with all other software 
and hardware requests. The entire register is 
cleared by a hardware reset. 


Mask Registers 
Each channel has associated with it a mask bit 
which can be set/reset to disable/enable that chan- 


nel. Two methods are available for setting and clear- 
ing the mask bits. The Mask Set/Reset Register is a 
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write-only register which allows the host to select an 
individual channel and either set or reset the mask 
bit for that channel only. The Mask Read/Write Reg- 


ister is available for reading the mask bit status and 
for writing mask bits in groups of four. 


The mask bits of a group may be cleared in one step 
by executing the Clear Mask Command. See the 
DMA Programming section for details. A hardware 
reset sets all of the channel mask bits, disabling all 
channels. 


Status Register 


The Status register is a read-only register which con- 
tains the Terminal Count (TC) and Service Request 
status for a group. Four bits indicate the TC status 
and four bits indicate the hardware request status 
for the four channels in the group. The TC bits are 
set when the Byte Count expires, or when and exter- 
nal EOP# is asserted. These bits are cleared by 
reading from the Status Register. The Service Re- 
quest bit for a channel indicates when there is a 
hardware DMA request (DREQn) asserted for that 
channel. When the request has been removed, the 
bit is cleared. 


Bus Size Register 


This write-only register is used to define the bus size 
of the Target and Requester of a selected channel. 
The bus sizes programmed will be used to dictate 
the sizes of the data paths accessed when the DMA 
channel is active. The values programmed into this 
register affect the operation of the Temporary Regis- 
ter. When 32-bit bus width is programmed, the 
82370 DMA Controller will access the device twice 
through its 16-bit external Data Bus to perform a 
32-bit data transfer. Any byte-assembly required to 
make the transfers using the specified data path 
widths will be done in the Temporary Register. The 
Bus Size register of the Target is used as an incre- 
ment/decrement value for the Byte Counter and 
Target Address when in the Fly-By Mode. Upon re- 
set, all channels default to 8-bit Targets and 8-bit 
Requesters. 


Chaining Register 


As a command or write register, the Chaining regis- 
ter is used to enable or disable the Chaining Mode 
for a selected channel. Chaining can either be dis- 
abled or enabled for an individual channel, indepen- 
dently of the Chaining Mode status of other chan- 
nels. After a hardware reset, all channels default to 
Chaining disabled. | 


When read by the host, the Chaining Register pro- 
vides the status of the Chaining Interrupt of each of 
the channels. These interrupt status bits are cleared 
when the new buffer information has been loaded. 
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3.5.2 CHANNEL REGISTERS 


Each channel has three individually programmable 
registers necessary for the DMA process; they are 
the Base Byte Count, Base Target Address, and 
Base Requester Address registers. The 24-bit Base 
Byte Count register contains the number of bytes to 
be transferred by the channel. The 24-bit Base Tar- 
get Address Register contains the beginning ad- 
dress (memory or I/O) of the Target device. The 
24-bit Base Requester Address register contains the 
base address (memory or I/O) of the device which is 
to request DMA service. 


Three more registers for each DMA channel exist 
within the DMA Controller which are directly related 
to the registers mentioned above. These registers 


contain the current status of the DMA process. They 


are the Current Byte Count register, the Current Tar- 
get Address, and the Current Requester Address. It 
is these registers which are manipulated (increment- 
ed, decremented, or held constant) by the 82370 
DMA Controller during the DMA process. The Cur- 
rent registers are loaded from the Base registers at 
the beginning of a DMA process. 


The Base registers are loaded when the host proc- 
essor writes to the respective channel register ad- 
dresses. Depending on the mode in which the chan- 
nel is operating, the Current registers are typically 
loaded in the same operation. Reading from the 
channel register addresses yields the contents of 
the corresponding Current register. 


To maintain compatibility with software which ac- 
cesses an 8237A, a Byte Pointer Flip-Flop is used to 
control access to the upper and lower bytes of some 
words of. the Channel Registers. These words are 
accessed as byte pairs at single port addresses. The 
Byte Pointer Flip-Flop acts as a one-bit pointer 
which is toggled each time a qualifying Channel 
Register byte is accessed. 


It always points to the next logical byte to be ac- 
cessed of a pair of bytes. 


The Channel registers are arranged as pairs of 
words, each pair with its own port address. Address- 
ing the port with the Byte Pointer Flip-Flop reset ac- 
cesses the least significant byte of the pair. The 
most significant byte is accessed when the Byte 
Pointer is set. 


For compatibility with existing 8237A designs, there 
is one exception to the above statements about the 
Byte Pointer Flip-Flop. The third byte (bits 16-23) of 
the Target Address is accessed through its own port 
address. The Byte Pointer Flip-Flop is not affected 
by any accesses to this byte. 
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The upper eight bits of the Byte Count Register are 
cleared when the least significant byte of the regis- 
ter is loaded. This provides compatibility with soft- 


ware which accesses an 8237A. The 8237A has 
16-bit Byte Count Registers. 


NOTE: 
The 82370 is a subset of the Intel 82380 32-bit 
DMA Controller with Integrated System Peripherals. 


Although the 82370 has 24 address bits externally, 
the programming model is actually a full 32 bits wide. 
For this reason, there are some “hidden” DMA reg- 
isters in the 82370 register set. These hidden regis- 
ters correspond to what would be A24-A31 in a 
32-bit system. 


Think of the 82370 addresses as though they were 
32 bits wide, with only the lower 24 bits available 
externally. 


This should be of concern in two areas: 


1. Understanding the Byte Pointer Flip Flop 
2. Removing the IRQ1 Chaining Interrupt 


The byte pointer flip flop will behave as though the 
hidden upper address bits were accessible. 


The IRQ1 Chaining Interrupt will be removed only 
when the hidden upper address bits are pro- 
grammed. You will note that since the hidden upper 
address bits are not available externally, the value 
you program into the registers is not important. The 
act of programming the hidden register is critical in 
removing the IRQ1 Chaining interrupt for a DMA 
channel. 


The port assignments for these hidden upper ad- 
dress bits come directly from the port assignments 
of the Intel 82380. For your convenience, those port 
definitions have been included in this data sheet in 
section 3.7. | 


3.5.3 TEMPORARY REGISTERS 


Each channel has a 32-bit Temporary Register used 
for temporary data storage during two-cycle DMA 
transfers. It is this register in which any necessary 
byte assembly and disassembly of non-aligned data 
is performed. Figure 3-22 shows how a block of data 
will be moved between memory locations with differ- 
ent boundaries. Note that the order of the data does 
not change. 


If the destination is the Requester and an early pro- 
cess termination has been indicated by the EOP# 
signal or DREQn inactive in the Demand Mode, the 
Temporary Register is not affected. If data remains 
in the Temporary Register due to differences in data 
path widths of the Target and Requester, it will not 
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Target = source = 00000020H 
Requester = destination = 00000053H 
Byte Count = 000007H 


Figure 3-22. Transfer of data between memory 
locations with different boundaries. This will be 
the result, independent of data path width. 


be transferred or otherwise lost, but will be stored for 
later transfer. 


If the destination is the Target and the EOP # signal 
is sensed active during the Requester access of a 
transfer, the DMA Controller will complete the trans- 
fer by sending to the Target whatever information is 
in the Temporary Register at the time of process 
termination. This implies that the Target could be 
accessed with partial data in two accesses. For this 
reason it is advisable to have an I/O device desig- 
nated as a Requester, unless it is capable of han- 
dling partial data transfers. , 


3.6 DMA Controller Programming 


Programming a DMA Channel to perform a needed 
DMA function is in general a four step process. First 
the global attributes of the DMA Controller are pro- 
grammed via the two Command Registers. These 
global attributes include: priority levels, channel 
group enables, priority mode, and DREQn/EOP # in- 
put sampling. 


The second step involves setting the operating 
modes of the particular channel. The Mode Regis- 
ters are used to define the type of transfer and the 
handshaking modes. The Bus Size Register and 
Chaining Register may also need to be programmed 
in this step. 


The third step in setting up the channel is to load the 
Base Registers in accordance with the needs of the 
operating modes chosen in step two. The Current 
Registers are automatically loaded from the Base 
Registers, if required by the Buffer Transfer Mode in 
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effect. The information loaded and the order in 
which it is loaded depends on the operating mode. A 
channel used for cascading, for example, needs no 


buffer information and this step can be skipped en- 
tirely. 


The last step is to enable the newly programmed 
channel using one of the Mask Registers. The chan- 
nel is then available to perform the desired data 
transfer. The status of the channel can be observed 
at any time through the Status Register, Mask Reg- 
ister, Chaining Register, and Software Request reg- 
ister. 


Once the channel is programmed and enabled, the 
DMA process may be initiated in one of two ways, 
either by a hardware DMA request (DREQn) or a 
software request (Software Request Register). 


Once programmed to a particular Process/Mode 
configuration, the channel will operate in that config- 
uration until programmed otherwise. For this reason, 
restarting a channel after the current buffer expires 
does not require complete reprogramming of the 
channel. Only those parameters which have 
changed need to be reprogrammed. The Byte Count 
Register is always changed and must be repro- 
grammed. A Target or Requester Address Register 
which is incremented or decremented should be re- 
programmed also. 
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3.6.1 BUFFER PROCESSES 


The Buffer Process is determined by the Auto-Initial- 
ize bit of Mode Register | and the Chaining Register. 
If Auto-Initialize is enabled, Chaining should not be 
used. 


3.6.1.1 Single Buffer Process 


The Single Buffer Process is programmed by dis- 
abling Chaining via the Chaining Register and pro- 
gramming Mode Register | for non-Auto-Initialize. 


3.6.1.2 Buffer Auto-initialize Process 


Setting the Auto-initialize bit in Mode Register | is all 
that is necessary to place the channel in this mode. 
Buffer Auto-Initialize must not be enabled simulta- 
neous to enabling the Buffer Chaining Mode as this 
will have unpredictable results. 


Once the Base Registers are loaded, the channel is 
ready to be enabled. The channel will reload its Cur- 
rent Registers from the Base Registers each time 
the Current Buffer expires, either by an expired Byte 
Count or an external EOP #. 


(IRQ1 WILL BE ACTIVATED) 


ENABLE INTERRUPT 


(IRQ1 WILL NEED SERVICE= 


LOAD BASE REGISTERS) 


ENABLE THE CHANNEL 


FROM THIS POINT, THE HOST CAN PERFORM 
ANOTHER TASK. THE INTERRUPT SERVICE ROUTINE 
LEFT BEHIND WILL MAINTAIN THE CHANNEL. 


290164-35 


Figure 3-23. Flow of Events in the Buffer Chaining Process 
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3.6.1.3 Buffer Chaining Process 


The Buffer Chaining Process is entered into from the 
Single Buffer Process. The Mode Registers should 
be programmed first, with all of the Transfer Modes 
defined as if the channel were to operate in the Sin- 
gle Buffer Process. The channel’s Base Registers 
are then loaded. When the channel has been set up 
in this way, and the chaining interrupt service routine 
is in place, the Chaining Process can be entered by 
programming the Chaining Register. Figure 3-23 il- 
lustrates the Buffer Chaining Process. 


An interrupt (IRQ1) will be generated immediately af- 
ter the Chaining Process is entered, as the channel 
then perceives the Base Registers as empty and in 
need of reloading. It is important to have the inter- 
rupt service routine in place at the time the Chaining 
Process is entered into. The interrupt request is re- 
moved when the most significant byte of the Base 
Target Address is loaded. 


The interrupt will occur again when the first buffer 
expires and the Current Registers are loaded from 
the Base Registers. The cycle continues until the 
Chaining Process is disabled, or the host fails to re- 
spond to IRQ1 before the Current Buffer expires. 


Exiting the Chaining Process can be done by reset- 
ting the Chaining Mode Register. If an interrupt is 
pending for the channel when the Chaining Register 
is reset, the interrupt request will be removed. The 
Chaining Process can be temporarily disabled by 
setting the channel’s Mask bit in the Mask Register. 


The interrupt service routine for IRQ1 has the re- 
sponsibility of reloading the Base Registers as nec- 
essary. It should check the status of the channel to 
determine the cause of channel expiration, etc. It 
should also have access to operating system infor- 
mation regarding the channel, if any exists. The 
IRQ1 service routine should be capable of determin- 
ing whether the chain should be continued or termi- 
nated and act on that information. 


3.6.2 DATA TRANSFER MODES 


The Data Transfer Modes are selected via Mode 
Register |. The Demand, Single, and Block Modes 
are selected by bits D6 and D7. The individual trans- 
fer type (Fly-By vs Two-Cycle, Read-Write-Verify, 
and I/O vs Memory) is programmed through both of 
the Mode registers. 


3.6.3 CASCADED BUS MASTERS 


The Cascade Mode is set by writing ones to D7 and 
D6 of Mode Register |. When a channel is pro- 
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grammed to operate in the Cascade Mode, all of the 
other modes associated with Mode Registers | and Il 
are ignored. The priority and DREQn/EOP# defini- 
tions of the Command Registers will have the same 


effect on the channel’s operation as any other 
mode. 


3.6.4 SOFTWARE COMMANDS 


There are five port addresses which, when written 
to, command certain operations to be performed by 
the 82370 DMA Controller. The data written to these 
locations is not of consequence, writing to the loca- 
tion is all that is necessary to command the 82370 to 
perform the indicated function. Following are de- 
scriptions of the command functions. 


Clear Byte Pointer Flip-Flop—Location 000CH 


Resets the Byte Pointer Flip-Flop. This command 
should be performed at the beginning of any access 
to the channel registers in order to be assured of 
beginning at a predictable place in the register pro- 
gramming sequence. 


Master Clear—Location 000DH 


All DMA functions are set to their default states. This 
command is the equivalent of a hardware reset to 
the DMA Controller. Functions other than those in 
the DMA Controller section of the 82370 are not af- 
fected by this command. 


Clear Mask Register— Channels 0-3 
— Location 000EH 


Channels 4-7 
— Location OOCEH 


This command simultaneously clears the Mask Bits 
of all channels in the addressed group, enabling all 
of the channels in the group. 


Clear TC Interrupt Request—Location 001EH 


This command resets the Terminal Count Interrupt 
Request Flip-Flop. It is provided to allow the pro- 
gram which made a software DMA request to ac- 
knowledge that it has responded to the expiration of 
the requested channel(s). 


3.7 Register Definitions 


The following diagrams outline the bit definitions and 
functions of the 82370 DMA Controller’s Status and 
Control Registers. The function and programming of 
the registers is covered in the previous section on 
DMA Controller Programming. An entry of “X” asa 
bit value indicates ‘don’t care.” 
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Channel Registers (read Current, write Base) 


Register Name Address Byte Bits 
(hex) Pointer Accessed 


Channel 0 Target Address 0-7 


8-15 
16-23 
24-31(*) 

Channel 1 

Channel 2 

Channel 3 


0-7 
1-649 


Byte Count 
8-15 
16-23 
0-7 
8-15 
16-23 
24-31(*) 


0-7 
8-15 
16-23 
24-31(*) 
0-7 
8-15 
16-23 
0-7 
8-15 
16-23 
24-31(*) 
0-7 
8-15 
16-23 
24-31(*) 
0-7 
8-15 
16-23 
0-7 
8-15 
16-23 
24-31(*) 


Requester Address 


Target Address 


Byte Count 


Requester Address 


Target Address 


Byte Count 


Requester Address 


Target Address 


Byte Count 


Requester Address 


~Ow8 Oo-o0o0x sal—c-CcCo4c00x-"cCl/“04600-00x 4 6/]-0-002 00x — 
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Channel Registers (read Current, write Base) (Continued) 


Channel 4 


Channel 5 
Channel 6 
Channel 7 


NOTE: 


Target Address 


Byte Count 


Requester Address 


Target Address 


Byte Count 


Requester Address 


Target Address 


Byte Count 


Requester Address 


Target Address 


Byte Count 


Requester Address 


: : 
” ' 
0 
0 
1 
0 
0 
1 
0 
1 
0 
1 
xX 
0 
0 
1 
0 
0 
1 
0 
1 
0 
{ ' 
Xx 
0 
0 
{ : 
0 
0 
1 
0 
1 
0 
1 
x 
0 
0 
1 
0 
0 
1 
0 
1 


0-7 
8-15 
16-23 
24-31(*) 
0-7 
8-15 
16-23 
0-7 
8-15 
16-23 
24-31(*) 


0-7 
8-15 
16-23 
24-31(*) 
0-7 
8-15 
16-23 
0-7 
8-15 
16-23 
24-31(*) 


0-7 
8-15 
16-23 
24-31(*) 
0-7 
8-15 
16-23 
0-7 
8-15 
16-23 
24-31(*) 


0-7 
8-15 
16-23 
24-31(*) 
0-7 
8-15 
16-23 
0-7 
8-15 
16-23 
24-31(*) 


(*)These bits are not available externally. You need to be aware of their existence for chaining and Byte Pointer Flip-Flop 
operations. Please see section 3.5.2 for further details. 
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Command Register | (write only) 


Port Addresses— Channels 0-—3—0008H 
Channels 4—7—00C8H 


07 D6 DS D4 D3 D2 ODI O00 


GROUP MASK 


O = ENABLE CHANNELS 
1 = DISABLE CHANNELS 


PRIORITY 
O = FIXED PRIORITY 
1 = ROTATING PRIORITY 


Command Register II (write only) 


Port Addresses— Channels 0—3—001AH 
Channels 4—7—OODAH 


po fof of o fry re] es | 0s | 


DREQN SAMPLING 


EOP# SAMPLING 
0 = ASYNCHRONOUS 
1 = SYNCHRONOUS 


LOW PRIORITY LEVEL SET 
00 = CHANNEL 0(4) LOWEST 


01 = 1(5) 
10 2(6) 
11 3(7) 
290164-37 


Mode Register | (write only) 


Port Addresses— Channels 0—3—O000BH 
Channels 4—7—00CBH 


CHANNEL SELECT 
00 = CHANNEL 0(4) 
01 = 1(5) 
10 = 2(6) 
11= 3(7) 


TRANSFER TYPE 

00 = VERIFY 

01 = WRITE 

10 = READ 

11 = ILLEGAL 

XX IF IN CASCADE MODE 


AUTO=INITIALIZE 
O = DISABLE, 1 = ENABLE 


TARGET INCREMENT/DECREMENT 
O = INCREMENT TARGET 

1 = DECREMENT TARGET * 

X IF TARGET HOLD ENABLED 


DATA TRANSFER MODE 

00 = DEMAND MODE 

01 = SINGLE TRANSFER MODE 
10 = BLOCK MODE 


11 = ¢ DE MODE 
pa 290164-38 


*Target and Requester DECREMENT is allowed only for byte transfers. 
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Mode Register II (write only) 


Port Addresses— Channels 0-—3—001BH 
Channels 4—7—O0DBH 


D7 06 DS D4 D3 D2 OD ODO 


icy [RO] to | RH} RI} THY ci | co 


CHANNEL SELECT 
SEE MODE REGISTER | 


TARGET HOLD 
O = INCREMENT/DECREMENT 
1 = HOLD 


REQUESTER INCREMENT 

0 = INCREMENT 

1 = DECREMENT * 
X IF REQUESTER HOLD ENABLED 


REQUESTER HOLD 
O = INCREMENT/DECREMENT 
1 = HOLD 


TARGET DEVICE TYPE 


REQUESTER DEVICE TYPE 
O = MEMORY 
1 = INPUT/OUTPUT 


TRANSFER CYCLES 
O = ONE=CYCLE (FLY=BY) 


1 = TWO=CYCLE 
290164-39 


*Target and Requester DECREMENT is allowed only for byte transfers. 
Software Request Register (read/write) 


Port Addresses— Channels 0—3—0009H 
Channels 4—7—00C9H 


Write Format: Software DMA Service Request 


CHANNEL SELECT 
SEE MODE REGISTER | 


REQUEST SERVICE 
O = REMOVE REQUEST 
1 = ASSERT REQUEST 


290164-40 
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Read Format: Software Requests Pending 


D7 D6 DS D4 DS D2 OD OOO 1 = REQUEST PENDING 


CHANNEL 0(4) REQUEST 
CHANNEL 1(5) REQUEST 
CHANNEL 2(6) REQUEST 


CHANNEL 3(7) REQUEST 
290164-41 


Mask Set/Reset Register Individual Channel Mask (write only) 


Port Addresses— Channels 0-—3—O00AH 
Channels 4—7—O00CAH 


x fx txt xt xt ct] co) 


CHANNEL SELECT 
SEE MODE REGISTER | 


MASK SET BIT 
0 = CLEAR MASK 


1 = SET MASK 
290164-42 


Mask Read/Write Register Group Channel Mask (read/write) 
Port Addresses— Channels 0-3—O00FH 
Channels 4—7—00CFH 


D7 D6 DS D4 D3 D2 Di DO 


ES ESESES COCA 


CHANNEL 0(4) MASK BIT 


CHANNEL 1(5) MASK BIT 
CHANNEL 2(6) MASK BIT 
CHANNEL 3(7) MASK BIT 


MASK BIT = 0 = CHANNEL ENABLED 


= 1 — CHANNEL DISABLED 
290164-43 
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Status Register Channel Process Status (read only) 


Port Addresses— Channels 0—3—0008H 
Channels 4—7—00C8H 


D7 D6 DS D4 D3 D2 ODI obO 


res [kz] Rr] RO [res] rez] ter] Too. 


CHANNEL 0(4) EXPIRED 
CHANNEL 1(5) EXPIRED 
CHANNEL 2(6) EXPIRED 


CHANNEL 3(7) EXPIRED 
1 =EXPIRED 


CHANNEL 0(4) REQUEST 
CHANNEL 1(5) REQUEST 
CHANNEL 2(6) REQUEST 


CHANNEL 3(7) REQUEST 


1= T PENDING 
REQUEST PE 790164—44 


Bus Size Register Set Data Path Width (write only) 


Port Addresses— Channels 0—3—0018H 
Channels 4—7—00D8H 


CHANNEL SELECT 
SEE MODE REGISTER | 


TARGET BUS SIZE 


REQUESTER BUS SIZE 
290164-45 


Bus Size Encoding: 

00 = Reserved by Intel 10 = 16-bit Bus 

01 = 32-bit Bus* 11 = 8-bit Bus 
*If programmed as 32-bit bus width, the corresponding device will be accessed in two 16-bit cycles provided that the data is 
aligned within word boundary. 


Chaining Register (read/write) 


Port Addresses— Channels 0-—3—0019H 
Channels 4-7—00D9H 


\ 


WRITE FORMAT: SET CHAINING MODE 


D7 D6 DS D4 D3 D2 Di ODO 


ee ee 


CHANNEL SELECT 
SEE MODE REGISTER | 


CHAINING ENABLE BIT 
0 = DISABLE CHAINING MODE 


1 = ENABLE CHAINING MODE 
290164-46 
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READ FORMAT: 


B7 . (06. DS. 


82370 


CHANNEL INTERRUPT STATUS 


DO 


xT x Tx] x [esponpon [co 


CHANNEL 0(4) BASE EMPTY 
CHANNEL 1(5) BASE EMPTY 
CHANNEL 2(6) BASE EMPTY 
CHANNEL 3(7) BASE EMPTY 


3.8 8237A Compatibility 


The register arrangement of the 82370 DMA Con- 
troller is'a superset of the 8237A DMA Controller. 
Functionally the 82370 DMA Controller is very differ- 
ent from the 8237A. Most of the functions of the 
8237A are performed also by the 82370. The follow- 
ing discussion points out the differences between 
the 8237A and the 82370. 


The 8237A is limited to transfers between I/O and 
memory only (except in one special case, where two 
channels can be used to perform memory-to-memo- 
ry transfers). The 82370 DMA Controller can transfer 
between any combination of memory and I/O. Sev- 
eral other features of the 8237A are enhanced or 
expanded in the 82370 and other features are add- 
ed. 


The 8237A is an 8-bit only DMA device. For pro- 
gramming compatibility, all of the 8-bit registers are 
preserved in the 82370. The 82370 is programmed 
via 8-bit registers. The address registers in the 
82370 are 24-bit registers in order to support the 
80376’s 24-bit bus. The Byte Count Registers are 
24-bit registers, allowing support of larger data 
blocks than possible with the 8237A. 


All of the 8237A’s operating modes are supported 
by the 82370 (except the cumbersome two-channel 
memory-to-memory transfer). The 82370 performs 
memory-to-memory transfers using only one chan- 
nel. The 82370 has the added features of buffer 
pipelining (Buffer Chaining Process) and program- 
mable priority levels. 


The 82370 also adds the feature of address regis- 
ters for both destination and source. These address- 
es may be incremented, decremented, or held con- 
stant, as required by the application of the individual 
channel. This allows any combination of destination 
and source device. 


Each DMA channel has associated with it a Target 
and a Requester. In the 8237A, the Target is the 
device which can be accessed by the address regis- 
ter, the Requester is the device which is accessed 
by the DMA Acknowledge signals and must be an 
1/O device. 


4.0 PROGRAMMABLE INTERRUPT 
CONTROLLER (PIC) 


4.1 Functional Description 


The 82370 Programmable Interrupt Controller (PIC) 
consists of three enhanced 82C59A Interrupt Con- 
trollers. These three controllers together provide 15 
external and 5 internal interrupt request inputs. Each 
external request input can be cascaded with an ad- 
ditional 82C59A slave controller. This scheme al- 
lows the 82370 to support a maximum of 120 
(15 x 8) external interrupt request inputs. 


Following one or more interrupt requests, the 82370 
PIC issues an interrupt signal to the 80376. When 
the 80376 host processor responds with an interrupt 
acknowledge signal, the PIC will arbitrate between 
the pending interrupt requests and place the inter- 
rupt vector associated with the highest priority pend- 
ing request on the data bus. 


The major enhancement in the 82370 PIC over the 
82C59A is that each of the interrupt request inputs 
can be individually programmed with its own inter- 
rupt vector, allowing more flexibility in interrupt vec- 
tor mapping. 


4.1.1 INTERNAL BLOCK DIAGRAM 


The block diagram of the 82370 Programmable In- 
terrupt Controller is shown in Figure 4-1. Internally, 
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the PIC consists of three 82C59A banks: A, B and C. 
The three banks are cascaded to one another: C is 
cascaded to B, B is cascaded to A. The INT output 
of Bank A is used externally to interrupt the 80376. 


Bank A has nine interrupt request inputs (two are 
unused), and Banks B and C have eight interrupt 
request inputs. Of the fifteen external interrupt re- 
quest inputs, two are shared by other functions. Spe- 
cifically, the Interrupt Request 3 input (IRQ3#) can 
be used as the Timer 2 output (TOUT2#). This pin 
can be used in three different ways: IRQ3# input 
only, TOUT2# output only, or using TOUT2# to 
generate an IRQ3# interrupt request. Also, the In- 
terrupt Request 9 input (IRQ9#) can be used as 
DMA Request 4 input (DREQ 4). Typically, only 
IRQ9# or DREQ4 can be used at a time. 


IRQ16# 
IRQ17# 
IRQ18# 
IRQ19# 
IRQ20# 
IRQ21#: 
IRQ22# 
IRQ23# 


TOUTO (IRQ8#) 


DREQ4/IRQ9# ane 


(IRQ10#) Lp! 
1# 


IRQ1S# 


TOUT3# (IRQO#) 
CHAINING (IRQ1#) 
ICW2 (IRQ 1.5#) 


TOUT2#/IRQ3# 
SW Req TC (IRQ4#) 
NOT USED 
NOT USED 
DEFAULT (IRQ7#) 


0 
1 

1 

2 
3 
4 
5 
6 
7 


NOM & WN - © 


NOU WH CO 
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4.1.2 INTERRUPT CONTROLLER BANKS 


All three banks are identical, with the exception of 
the IRQ1.5 on Bank A. Therefore, only one bank will 
be discussed. In the 82370 PIC, all external requests 
can be cascaded into and each interrupt controller 
bank behaves like a master. As compared to the 
82C59A, the enhancements in the banks are: 


— All interrupt vectors are individually programma- 
ble. (In the 82C59A, the vectors must be pro- 
grammed in eight consecutive interrupt vector lo- 
cations.) 


— The cascade address is provided on the Data 
Bus (DO-D7). (In the 82C59A, three dedicated 
control signals (CASO, CAS1, CAS2) are used for 
master/slave cascading.) 


INTERRUPT 
BANK 
Cc 


INTERRUPT 


BANK 
B 


-o 
INTERRUPT 


BANK INT 
A (OUTPUT) 


290164-48 


Figure 4-1. Interrupt Controller Block Diagram 
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The block diagram of a bank is shown in Figure 4-2. 
As can be seen from this figure, the bank consists of 
six major blocks: the Interrupt Request Register 
(IRR), the In-Service Register (ISR), the Interrupt 
Mask Register (IMR), the Priority Resolver (PR), the 
Vector Registers (VR), and the Control Logic. The 


functional description of each block is included be- 
low. 


INTERRUPT REQUEST (IRR) AND 
IN-SERVICE REGISTER (ISR) 


The interrupts at the Interrupt Request (IRQ) input 
lines are handled by two registers in cascade, the 
Interrupt Request Register (IRR) and the In-Service 
Register (ISR). The IRR is used to store all interrupt 
levels which are requesting service; and the ISR is 
used to store all interrupt levels which are being 
serviced. 


PRIORITY RESOLVER (PR) 


This logic block determines the priorities of the bits 
set in the IRR. The highest priority is selected and 
strobed into the corresponding bit of the ISR during 
an Interrupt Acknowledge cycle. 


82370 


INTERRUPT MASK REGISTER (IMR) 


The IMR stores the bits which mask the interrupt 
lines to be masked (disabled). The IMR operates on 
the IRR. Masking of a higher priority input will not 
affect the interrupt request lines of lower priority. 


VECTOR REGISTERS (VR) 


This block contains a set of Vector Registers, one 
for each interrupt request line, to store the pre-pro- 
grammed interrupt vector number. The correspond- 
ing vector number will be driven onto the Data Bus 
of the 82370 during the Interrupt Acknowledge cy- 

cle. | 


CONTROL LOGIC 


The Control Logic coordinates the overall operations 
of the other internal blocks within the same bank. 
This logic will drive the Interrupt Output signal (INT) 
HIGH when one or more unmasked interrupt inputs 
are active (LOW). The INT output signal goes direct- 
ly to the 80376 (in bank A) or to another bank to 
which this bank is cascaded (see Figure 4-1). Also, 
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Figure 4-2. Interrupt Bank Block Diagram 
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this logic will recognize an Interrupt Acknowledge 
cycle (via M/IO#, D/C # and W/R# signals). During 
this bus cycle, the Control Logic will enable the cor- 
responding Vector Register to drive the interrupt 
vector onto the Data Bus. 


In bank A, the Control Logic is also responsible for 
handling the special I|CW2 interrupt request input 
(IRQ1.5). 


4.2 Interface Signals 


4.2.1 INTERRUPT INPUTS 


There are 15 external Interrupt Request inputs and 5 
internal Interrupt Requests. The external request in- 
puts are: IRQ3#, IRQ9#, IRQ11# to IRQ23#. They 
are shown in bold arrows in Figure 4-1. All IRQ in- 
puts are active LOW and they can be programmed 
(via a control bit in the Initialization Command Word 
1 (ICW1)) to be either edge-triggered or level-trig- 
gered. In order to be recognized as a valid interrupt 
request, the interrupt input must be active (LOW) un- 
til the first INTA cycle (see Bus Functional Descrip- 
tion). Note that all 15 external Interrupt Request in- 
puts have weak internal pull-up resistors. 


As mentioned earlier, an 82C59A can be cascaded 
to each external interrupt input to expand the inter- 
rupt capacity to a maximum of 120 levels. Also, two 
of the interrupt inputs are dual functions: IRQ3# can 
be used as Timer 2 output (TOUT2#) and IRQ9# 
can be used as DREQ4 input. IRQ3#¥# is a bidirec- 
tional dual function pin. This interrupt request input is 
wired-OR with the output of Timer 2 (TOUT2#). If 
only IRQ3# function is to be used, Timer 2 should 
be programmed so that OUT2 is LOW. Note that 
TOUT2# can also be used to generate an interrupt 
request to IRQ3# input. 


The five internal interrupt requests serve special 
system functions. They are shown in Table 4-1. The 
following paragraphs describe these interrupts. 


Table 4-1. 82370 Internal Interrupt Requests 


Interrupt Request interrupt Source 


IRQ0 # Timer 3 Output (TOUTS) 
IRQ8 # Timer 0 Output (TOUTO) 
DMA Chaining Request 
DMA Terminal Count 
ICW2 Written 


IRQ1 # 
IRQ4# 
IRQ1.5# 


TIMER 0 AND TIMER 3 INTERRUPT REQUESTS 


IRQ8# and IRQO# interrupt requests are initiated 
by the output of Timers 0 and 3, respectively. Each 
of these requests is generated by an edge-detector 
flip-flop. 
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The flip-flops are activated by the following condi- 
tions: 


Set — Rising edge of timer output (TOUT); 


Clear — Interrupt acknowledge for this request; OR 
Request is masked (disabled); OR Hard- 
ware Reset. 


CHAINING AND TERMINAL COUNT INTERRUPTS 


These interrupt requests are generated by the 
82370 DMA Controller. The chaining request 
(IRQ1#) indicates that the DMA Base Register is 
not loaded. The Terminal Count request (IRQ4 #) in- 
dicates that a software DMA request was cleared. 


ICW2 INTERRUPT REQUEST 


Whenever an Initialization Control Word 2 (ICW2) is 
written to a Bank, a special |CW2 interrupt request is 
generated. The interrupt will be cleared when the 
newly programmed ICW2 Register is read. This in- 
terrupt request is in Bank A at level 1.5. This inter- 
rupt request is internally ORed with the Cascaded 
Request from Bank B and is always assigned a high- 
er priority than the Cascaded Request. 


This special interrupt is provided to support compati- 
bility with the original 82C59A. A detailed description 
of this interrupt is discussed in the Programming 
section. 


DEFAULT INTERRUPT (IRQ7#) 


During an Interrupt Acknowledge cycle, if there is no 
active pending request, the PIC will automatically 
generate a default vector. This vector corresponds 
to the IRQ7# vector in bank A. 


4.2.2 INTERRUPT OUTPUT (INT) 


The INT output pin is taken directly from bank A. 
This signal should be tied to the Maskable Interrupt 
Request (INTR) of the 80376. When this signal is 
active (HIGH), it indicates that one or more internal/ 
external interrupt requests are pending. The 80376 
is expected to respond with an interrupt acknowl- 
edge cycle. 


4.3 Bus Functional Description 


The INT output of bank A will be activated as a result 
of any unmasked interrupt request. This may be a 
non-cascaded or cascaded request. After the PIC 
has driven the INT signal HIGH, the 80376 will re- 
spond by performing two interrupt acknowledge cy- 
cles. The timing diagram in Figure 4-3 shows a typi- 
cal interrupt acknowledge process between the 
82370 and the 80376 CPU. 
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What is actually driven on the Data Bus depends on if the current interrupt request is a Slave Request. 
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Figure 4-3. Interrupt Acknowledge Cycle 


After activating the INT signal, the 82370 monitors 
the status lines (M/IO#, D/C#, W/R#) and waits 
for the 80376 to initiate the first interrupt acknowl- 
edge cycle. In the 80376 environment, two succes- 
sive interrupt acknowledge cycles (INTA) marked by 
M/IO# =LOW, D/C#=LOW, and W/R#=LOW 
are performed. During the first INTA cycle, the PIC 
will determine the highest priority request. Assuming 
this interrupt input has no external Slave Controller 
cascaded to it, the 82370 will drive the Data Bus 
with OOH in the first INTA cycle. During the second 
INTA cycle, the 82370 PIC will drive the Data Bus 
with the corresponding pre-programmed interrupt 
vector. 

If the PIC determines (from the ICW3) that this inter- 
rupt input has an external Slave Controller cascaded 
to it, it will drive the Data Bus with the specific Slave 
Cascade Address (instead of OOH) during the first 
INTA cycle. This Slave Cascade Address is the pre- 
programmed content in the corresponding Vector 
Register. This means that no Slave Address should 
be chosen to be OOH. Note that the Slave Address 
and Interrupt Vector are different interpretations of 
the same thing. They are both the contents of the 
programmable Vector Register. During the second 
INTA cycle, the Data Bus will be floated so that the 
external Slave Controller can drive its interrupt vec- 
tor on the bus. Since the Slave Interrupt Controller 
resides on the system bus, bus transceiver enable 
and direction control logic must take this into consid- 
eration. 


In order to have a successful interrupt service, the 
interrupt request input must be held valid (LOW) until 
the beginning of the first interrupt acknowledge cy- 
Cle. If there is no pending interrupt request when the 
first INTA cycle is generated, the PIC will generate a 
default vector, which is the IRQ7 vector (Bank A, 
level 7). 


According to the Bus Cycle definition of the 80376, 
there will be four Bus Idle States between the two 
interrupt acknowledge cycles. These idle bus cycles 
will be initiated by the 80376. Also, during each inter- 
rupt acknowledge cycle, the internal Wait State Gen- 
erator of the 82370 will automatically generate the 
required number of wait states for internal delays. 


4.4 Modes of Operation 


A variety of modes and commands are available for 
controlling the 82370 PIC. All of them are program- 
mable; that is, they may be changed dynamically un- 
der software control. In fact, each bank can be pro- 


_ grammed individually to operate in different modes. 


With these modes and commands, many possible 
configurations are conceivable, giving the user 
enough versatility for almost any interrupt controlled 
application. 


This section is not intended to show how the 82370 


PIC can be programmed. Rather, it describes the 
operation in different modes. 
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4.4.1 END-OF-INTERRUPT 


Upon completion of an interrupt service routine, the 
interrupted bank needs to be notified so its ISR can 
be updated. This allows the PIC to keep track of 
which interrupt levels are in the process of being 
serviced and their relative priorities. Three different 
End-Of-interrupt (EOI) formats are available. They 
are: Non-Specific EO| Command, Specific EOI Com- 
mand, and Automatic EOI Mode. Selection of which 
EOI to use is dependent upon the interrupt opera- 
tions the user wishes to perform. 


If the 82370 is NOT programmed in the Automatic 
EOI Mode, an EOI command must be issued by the 
80376 to the specific 82370 PIC Controller Bank. 
Also, if this controller bank is cascaded to another 
internal bank, an EOI command must also be sent to 
the bank to which this bank is cascaded. For exam- 
ple, if an interrupt request of Bank C in the 82370 
PIC is serviced, an EO! should be written into Bank 
C, Bank B and Bank A. If the request comes from an 
external interrupt controller cascaded to Bank C, 
then an EOI should be written into the external con- 
troller as well. 


NON-SPECIFIC EOI COMMAND 


A Non-Specific EO| command sent from the 80376 
lets the 82370 PIC bank know when a service rou- 
tine has been completed, without specification of its 
exact interrupt level. The respective interrupt bank 
automatically determines the interrupt level and re- 
sets the correct bit in the ISR. 


To take advantage of the Non-Specific EOI, the in- 
terrupt bank must be in a mode of operation in which 
it can predetermine its in-service routine levels. For 
this reason, the Non-Specific EO! command should 


only be used when the most recent level acknowl- 


edged and serviced is always the highest priority lev- 
el (i.e. in the Fully Nested Mode structure to be de- 
scribed below). When the interrupt bank receives a 
Non-Specific EOl command, it simply resets the 
highest priority ISR bit to indicate that the highest 
priority routine in service is finished. 


Special consideration should be taken when decid- 
ing to use the Non-Specific EO! command. Here are 
two operating conditions in which it is best NOT 
used since the Fully Nested Mode structure will be 
destroyed: 


— Using the Set Priority command within an inter- 
rupt service routine. 


— Using a Special Mask Mode. 


These conditions are covered in more detail in their 


own sections, but are listed here for reference. 


1-660 


intel. 


Unlike a Non-Specific EOI command which automat- 
ically resets the highest priority ISR bit, a Specific 
EOI command specifies an exact ISR bit to be reset. 
Any one of the IRQ levels of an interrupt bank can 
be specified in the command. 


SPECIFIC EO! COMMAND 


The Specific EO| command is needed to reset the 
ISR bit of a completed service routine whenever the 
interrupt bank is not able to automatically determine 
it. The Specific EO] command can be used in all 
conditions of operation, including those that prohibit 
Non-Specific EOl command usage mentioned 
above. 


AUTOMATIC EOI MODE 


When programmed in the Automatic EO! Mode, the 
80376 no longer needs to issue a command to notify 
the interrupt bank it has completed an interrupt rou- 
tine. The interrupt bank accomplishes this by per- 
forming a Non-Specific EO! automatically at the end 
of the second INTA cycle. 


Special consideration should be taken when decid- 
ing to use the Automatic EOI Mode because it may 
disturb the Fully Nested Mode structure. In the Auto- 
matic EO! Mode, the ISR bit of a routine in service is 
reset right after it is acknowledged, thus leaving no 
designation in the ISR that a service routine is being 
executed. If any interrupt request within the same 
bank occurs during this time and interrupts are en- 
abled, it will get serviced regardless of its priority. 
Therefore, when using this mode, the 80376 should 
keep its interrupt request input disabled during exe- 
cution of a service routine. By doing this, higher pri- 
ority interrupt levels will be serviced only after the 
completion of a routine in service. This guideline re- 
stores the Fully Nested Mode structure. However, in 
this scheme, a routine in service cannot be interrupt- 
ed since the host’s interrupt request input is dis- 
abled. 


4.4.2 INTERRUPT PRIORITIES 


The 82370 PIC provides various methods for arrang- 
ing the interrupt priorities of the interrupt request in- 
puts to suit different applications. The following sub- 
sections explain these methods in detail. 


4.4.2.1 Fully Nested Mode 


The Fully Nested Mode of operation is a general pur- 
pose priority mode. This mode supports a multi-level 
interrupt structure in which all of the Interrupt Re- 
quest (IRQ) inputs within one bank are arranged 
from highest to lowest. 
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Unless otherwise programmed, the Fully Nested 
Mode is entered by default upon initialization. At this 
time, IRQO# is assigned the highest priority (priori- 
ty=0) and IRQ7# the lowest (priority = 7). This de- 


fault priority can be changed, as will be explained 
later in the Rotating Priority Mode. 


When an interrupt is acknowledged, the highest pri- 
ority request is determined from the Interrupt Re- 
quest Register (IRR) and its vector is placed on the 
bus. In addition, the corresponding bit in the In-Serv- 
ice Register (ISR) is set to designate the routine in 
service. This ISR bit will remain set until the 80376 
issues an End Of Interrupt (EOI) command immedi- 
ately before returning from the service routine; or 
alternately, if the Automatic End Of Interrupt (AEOl) 
bit is set, the ISR bit will be reset at the end of the 
second INTA cycle. 


While the ISR bit is set, all further interrupts of the 
same or lower priority are inhibited. Higher level in- 
terrupts can still generate an interrupt, which will be 
acknowledged only if the 80376 internal interrupt en- 
able flip-flop has been reenabled (through software 
inside the current service routine). 


4.4.2.2 Automatic Rotation-Equal Priority 
Devices 


Automatic rotation of priorities serves in applications 
where the interrupting devices are of equal priority 
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within an interrupt bank. In this kind of environment, 
once a device is serviced, all other equal priority pe- 
ripherals should be given a chance to be serviced 
before the original device is serviced again. This is 
accomplished by automatically assigning a device 
the lowest priority after being serviced. Thus, in the 
worst case, the device would have to wait until all 
other peripherals connected to the same bank are 
serviced before it is serviced again. 


There are two methods of accomplishing automatic 
rotation. One is used in conjunction with the Non- 
Specific EOI] command and the other is used with 
the Automatic EOI mode. These two methods are 
discussed below. 


ROTATE ON NON-SPECIFIC EOI COMMAND 


When the Rotate On Non-Specific EO! command is 
issued, the highest ISR bit is reset as in a normal 
Non-Specific EOI command. However, after it is re- 
set, the corresponding Interrupt Request (IRQ) level 
is assigned the lowest priority. Other IRQ priorities 
rotate to conform to the Fully Nested Mode based 
on the newly assigned low priority. 


Figure 4-4 shows how the Rotate On Non-Specific 
EOI command affects the interrupt priorities. As- 
sume the IRQ priorities were assigned with IRQO the 
highest and IRQ7 the lowest. IRQ6 and IRQ4 are 
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Figure 4-4. Rotate On Non-Specific EOl Command 
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already in service but neither is completed. Being 
the higher priority routine, IRQ4 is necessarily the 
routine being executed. During the IRQ4 routine, a 
rotate on Non-Specific EO! command is executed. 
When this happens, Bit 4 in the ISR is reset. IRQ4 
then becomes the lowest priority and IRQ5 becomes 
the highest. 


ROTATE ON AUTOMATIC EOI! MODE 


The Rotate On Automatic EOI Mode works much 
like the Rotate On Non-Specific EO| Command. The 
main difference is that priority rotation is done auto- 
matically after the second INTA cycle of an interrupt 
request. To enter or exit this mode, a Rotate-On-Au- 
tomatic-EOI Set Command and Rotate-On-Automat- 
ic-EOI Clear Command is provided. After this mode 
is entered, no other commands are needed as in the 
normal Automatic EOI Mode. However, it must be 
noted again that when using any form of the Auto- 
matic EOI Mode, special consideration should be 
taken. The guideline presented in the Automatic EOI 
Mode also applies here. 


4.4.2.3 Specific Rotation-Specific Priority 


Specific rotation gives the user versatile capabilities 
in interrupt controlled operations. It serves in those 
applications in which a specific device’s interrupt pri- 
ority must be altered. As opposed to Automatic Ro- 
tation which will automatically set priorities after 
each interrupt request is serviced, specific rotation is 
completely user controlled. That is, the user selects 
which interrupt level is to receive the lowest or the 
highest priority. This can be done during the main 
program or within interrupt routines. Two specific ro- 
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tation commands are available to the user: Set Prior- 


ity Command and Rotate On Specific EO! Com- 
mand. 


SET PRIORITY COMMAND 


The Set Priority Command allows the programmer to 
assign an IRQ level the lowest priority. All other in- 
terrupt levels will conform to the Fully Nested Mode 
based on the newly assigned low priority. 


ROTATE ON SPECIFIC EOI COMMAND 


The Rotate On Specific EO! Command is literally a 
combination of the Set Priority Command and the 
Specific EO! Command. Like the Set Priority Com- 
mand, a specified IRQ level is assigned lowest priori- 
ty. Like the Specific EO| Command, a specified level 
will be reset in the ISR. Thus, this command accom- 
plishes both tasks in one single command. 


4.4.2.4 Interrupt Priority Mode Summary 


In order to simplify understanding the many modes 
of interrupt priority, Table 4-2 is provided to bring out 
their summary of operations. 

4.4.3 INTERRUPT MASKING 


VIA INTERRUPT MASK REGISTER 


Each bank in the 82370 PIC has an Interrupt Mask 
Register (IMR) which enhances interrupt control ca- 


Table 4-2. Interrupt Priority Mode Summary 


Interrupt 
Priority 
Mode 


Operation 
Summary 


Fully-Nested Mode 


Automatic Rotation 


Effect On Priority After EO! 


Non-Specific/Automatic | Specific 


IRQO # - Highest Priority | No change in priority. Not Applicable. 
IRQ7 # - Lowest Priority | Highest ISR bit is reset. 


Interrupt level just 
serviced is the lowest 
priority. 

Other priorities rotate to 
conform to Fully-Nested 
Mode. 


User specifies the 
lowest priority level. 


Other priorities rotate to 
conform to Fully-Nested 
Mode. 


Highest ISR bit is reset 
and the corresponding 
level becomes the lowest 


priority. 


Not Applicable. 
(Equal Priority Devices) 


Specific Rotation 
(Specific Priority Devices) 


As described under 
“Operation Summary”. 


Not Applicable. 
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pabilities. This IMR allows individual |RQ masking. 
When an IRQ is masked, its interrupt request is dis- 
abled until it is unmasked. Each bit in the 8-bit IMR 
disables one interrupt channel if it is'set (HIGH). Bit 
0 masks IRQO, Bit 1 masks IRQ1 and so forth. 
Masking an IRQ channel will only disable the corre- 


sponding channel and does not affect the others’ 
operations. 


The IMR acts only on the output of the IRR. That is, 
if an interrupt occurs while its IMR bit is set, this 
request is not “forgotten”. Even with an IRQ input 
masked, it is still possible to set the IRR. Therefore, 
when the IMR bit is reset, an interrupt request to the 
80376 will then be generated, providing that the IRQ 
request remains active. If the IRQ request is re- 
moved before the IMR is reset, the Default Interrupt 
Vector (Bank A, level 7) will be generated during the 
interrupt acknowledge cycle. 


SPECIAL MASK MODE 


In the Fully Nested Mode, all IRQ levels of lower 
priority than the routine in service are inhibited. How- 
ever, in some applications, it may be desirable to let 
a lower priority interrupt request to interrupt the rou- 
tine in service. One method to achieve this is by 
using the Special Mask Mode. Working in conjunc- 
tion with the IMR, the Special Mask Mode. enables 
interrupts from all levels except the level in service. 
This is usually done inside an interrupt service rou- 
tine by masking the level that is in service and then 
issuing the Special Mask Mode Command. Once the 
Special Mask Mode is enabled, it remains in effect 
until it is disabled. 


4.4.4 EDGE OR LEVEL INTERRUPT 
TRIGGERING 


Each bank in the 82370 PIC can be programmed 
independently for either edge or level sensing for the 


DATA BUS 


INTA# 
(FROM BUS CONTROLLER) 


82370 


interrupt request signals. Recall that all IRQ inputs 
are active LOW. Therefore, in the edge triggered 
mode, an active edge is defined as an input tran- 
sition from an inactive (HIGH) to active (LOW) state. 
The interrupt input may remain active without gener- 
ating another interrupt. During level triggered mode, 
an interrupt request will be recognized by an active 
(LOW) input, and there is no need for edge detec- 
tion. However, the interrupt request must be re- 
moved before the EOI Command is issued, or the 
80376 must be disabled to prevent a second false 
interrupt from occurring. 


In either modes, the interrupt request input must be 
active (LOW) during the first INTA cycle in order to 
be recognized. Otherwise, the Default Interrupt Vec- 
tor will be generated at level 7 of Bank A. 


4.4.5 INTERRUPT CASCADING 


As mentioned previously, the 82370 allows for exter- 
nal Slave interrupt controllers to be cascaded to any 
of its external interrupt request pins. The 82370 PIC 
indicates that an external Slave Controller is to be 
serviced by putting the contents of the Vector Regis- 
ter associated with the particular request on the 
80376 Data Bus during the first INTA cycle (instead 
of OOH during a non-slave service). The external log- 
ic should latch the vector on the Data Bus using the 
INTA status signals and use it to select the external 
Slave Controller to be serviced (see Figure 4-5). The 
selected Slave will then respond to the second INTA 
cycle and place its vector on the Data Bus. This 
method requires that if external Slave Controllers 
are used in the system, no vector should be pro- 
grammed to OOH. 


Since the external Slave Cascade Address is provid- 
ed on the Data Bus during INTA cycle 1, an external 
latch is required to capture this address for the Slave 
Controller. A simple scheme is depicted in Figure 
4-5 below. 


POSITIVE 
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Figure 4-5. Slave Cascade Address Capturing 
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4.4.5.1 Special Fully Nested Mode 


This mode will be used where cascading is em- 
ployed and the priority is to be conserved within 
each Slave Controller. The Special Fully Nested 
Mode is similar to the ‘regular’ Fully Nested Mode 
with the following exceptions: 


— When an interrupt request from a Slave Control- 
| ler is in service, this Slave Controller is not 
locked out from the Master’s priority logic. Fur- 
ther interrupt requests from the higher priority 
logic within the Slave Controller will be recog- 
nized by the 82370 PIC and will initiate interrupts 
to the 80376. In comparing to the “regular” Fully 
Nested Mode, the Slave Controller is masked out 
when its request is in service and no higher re- 
quests from the same Slave Controller can be 
serviced. 


— Before exiting the interrupt service routine, the 
software has to check whether the interrupt serv- 
iced was the only request from the Slave Con- 
troller. This is done by sending a Non-Specific 
EOI Command to the Slave Controller and then 
reading its In Service Register. If there are no 
requests in the Slave Controller, a Non-Specific 
EOI can be sent to the corresponding 82370 PIC 
bank also. Otherwise, no EO! should be sent. 


4.4.6 READING INTERRUPT STATUS 


The 82370 PIC provides several ways to read differ- 
ent status of each interrupt bank for more flexible 
interrupt control operations. These include polling 
the highest priority pending interrupt request and 
reading the contents of different interrupt status reg- 
isters. 


4.4.6.1 Poll Command 


The 82370 PIC supports status polling operations 
with the Poll Command. In a Poll Command, the 
pending interrupt request with the highest priority 
can be determined. To use this command, the INT 
output is not used, or the 80376 interrupt is disabled. 
Service to devices is achieved by software using the 
Poll Command. 
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This mode is useful if there is a routine command 
common to several levels so that the INTA se- 
quence is not needed. Another application is to use 


the Poll Command to expand the number of priority 
levels. 


Notice that the ICW2 mechanism is not supported 
for the Poll Command. However, if the Poll Com- 
mand is used, the programmable Vector Registers 
are of no concern since no INTA cycle will be gener- 
ated. 


4.4.6.2 Reading Interrupt Registers 


The contents of each interrupt register (IRR, ISR, 
and IMR) can be read to update the user’s program 
on the present status of the 82370 PIC. This can be 
a versatile tool in the decision making process of a 
service routine, giving the user more control over 
interrupt operations. 


The reading of the IRR and ISR contents can be 
performed via the Operation Control Word 3 by us- 
ing a Read Status Register Command and the con- 
tent of IMR can be read via a simple read operation 
of the register itself. 


4.5 Register Set Overview 


Each bank of the 82370 PIC consists of a set of 8-bit 
registers to control its operations. The address map 
of all the registers is shown in Table 4-3 below. 
Since all three register sets are identical in functions, 
only one set will be described. 


Functionally, each register set can be divided into 
five groups. They are: the four Initialization Com- 
mand Words (ICW’s), the three Operation Control 
Words (OCW’s), the Poll/interrupt Request/In-Serv- 
ice Register, the Interrupt Mask Register, and the 
Vector Registers. A description of each group fol- 
lows. 
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Table 4-3. interrupt Controller Register Address Map 


Write 
Read 


Write 

Read 

Read 

Read/Write 
Read/Write 
Read/Write 
Read/Write 
Read/Write 
Read/Write 
Read/Write 
Read/Write 


Write 
Read 


Write 
Read 
Read 
Read/Write 
Read/Write 
Read/Write 
Read/Write 
’ Read/Write 
Read/Write 
Read/Write 
Read/Write 


Write 
Read 


Write 

Read. 

Read 
Read/Write 
Read/Write 
Read/Write 
Read/Write 
Read/Write 
Read/Write 
Read/Write 
Read/Write 


Bank B ICW1, OCW2, or OCW3 

Bank B Poll, Request or In-Service 
Status Register 

Bank B ICW2, ICW3, ICW4, OCW1 

Bank B Mask Register 

Bank B ICW2 

IRQ8 Vector Register 

IRQ9 Vector Register 

Reserved 

IRQ11 Vector Register 

IRQ12 Vector Register 

IRQ13 Vector Register 

IRQ14 Vector Register 

IRQ15 Vector Register 


Bank C ICW1, OCW2, or OCW3 

Bank C Poll, Request or In-Service 
Status Register 

Bank C ICW2, ICW3, ICW4, OCW1 

Bank C Mask Register 

Bank C ICW2 

IRQ16 Vector Register 

IRQ17 Vector Register 

IRQ18 Vector Register 

IRQ19 Vector Register 

IRQ20 Vector Register 

IRQ21 Vector Register 

IRQ22 Vector Register 

IRQ23 Vector Register 


Bank A ICW1, OCW2, or OCW3 

Bank A Poll, Request or In-Service 
Status Register 

Bank A ICW2, ICW3, ICW4, OCW1 

Bank A Mask Register 

Bank ICW2 

IRQO Vector Register 

IRQ1 Vector Register 

IRQ1.5 Vector Register 

IRQ3 Vector Register 

IRQ4 Vector Register 

Reserved 

Reserved 

IRQ7 Vector Register 
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4.5.1 INITIALIZATION COMMAND WORDS (iICW) 


Before normal operation can begin, the 82370 PIC 
must be brought to a known state. There are four 
8-bit Initialization Command Words in each interrupt 
bank to setup the necessary conditions and modes 
for proper operation. Except for the second com- 
mand word (ICW2) which is a read/write register, the 
other three are write-only registers. Without going 
into detail of the bit definitions of the command 
words, the following subsections give a brief de- 
scription of what functions each command word 
controls. 


iCw1 


The ICW1 has three major functions. They are: 


— To select between the two IRQ input triggering 
modes (edge- or level-triggered); 


— To designate whether or not the interrupt bank is 
to be used alone or in the cascade mode. If the 
cascade mode is desired, the interrupt bank will 
accept ICW3 for further cascade mode program- 
ming. Otherwise, no ICW3 will be accepted; 


— To determine whether or not ICW4 will be issued; 
that is, if any of the ICW4 operations are to be 
used. 


iCW2 


ICW2 is provided for compatibility with the 82C59A 
only. Its contents do not affect the operation of the 
interrupt bank in any way. Whenever the ICW2 of 
any of the three banks is written into, an interrupt is 
generated from bank A at level 1.5. The interrupt 
request will be cleared after the |CW2 register has 
been read by the 80376. The user is expected to 
program the corresponding vector register or to use 
it as an indicator that an attempt was made to alter 
the contents. Note that each ICW2 register has dif- 
ferent addresses for read and write operations. 


ICW3 


The interrupt bank will only accept an ICWS3 if pro- 
grammed in the external cascade mode (as indicat- 
ed in ICW1). ICW3 is used for specific programming 
within the cascade mode. The bits in ICW3 indicate 
which interrupt request inputs have a Slave cascad- 
ed to them. This will subsequently affect the inter- 
rupt vector generation during the interrupt acknowl- 
edge cycles as described previously. 
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iCw4 


The ICW4 is accepted only if it was selected in 
ICW1. This command word register serves two func- 
tions: 


— To select either the Automatic EOI mode or soft- 
ware EOI! mode; 


— To select if the Special Nested mode is to be 
used in conjunction with the cascade mode. 


4.5.2 OPERATION CONTROL WORDS (OCW) 


Once initialized by the ICW’s, the interrupt banks will 
be operating in the Fully Nested Mode by default 
and they are ready to accept interrupt requests. 
However, the operations of each interrupt bank can 
be further controlled or modified by the use of 
OCW’s. Three OCW’s are available for programming 
various modes and commands. Note that all OCW’s 
are 8-bit write-only registers. 


The modes and operations controlled by the OCW’s 
are: 


— Fully Nested Mode; 

— Rotating Priority Mode; 
— Special Mask Mode; 

— Poll Mode; 

— EOI Commands; 

— Read Status Commands. 


ocw1 


OCW1 is used solely for masking operations. It pro- 
vides a direct link to the Internal Mask Register 
(IMR). The 80376 can write to this OCW register to 
enable or disable the interrupt inputs. Reading the 
pre-programmed mask can be done via the Interrupt 
Mask Register which will be discussed shortly. 


OCW2 


OCW2 is used to select End-Of-Interrupt, Automatic 
Priority Rotation, and Specific Priority Rotation oper- 
ations. Associated commands and modes of these 
operations are selected using the different combina- 
tions of bits in OCW2. 


Specifically, the OCW2 is used to: 


— Designate an interrupt level (0-7) to be used to 
reset a specific ISR bit or to set a specific priori- 
ty. This function can be enabled or disabled; 


— Select which software EOI command (if any) is to 
be executed (i.e. Non-Specific or Specific EOI); 


— Enable one of the priority rotation operations (i.e. 
Rotate On Non-Specific EOI, Rotate On Auto- 
matic EOI, or Rotate On Specific EOl). 
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There are three main categories of operation that 
OCWS controls. They are summarized as follows: 


— To select and execute the Read Status Register 
Commands, either reading the Interrupt Request 
Register (IRR) or the In-Service Register (ISR); 


— To issue the Poll Command. The Poll Command 
will override a Read Register Command if both 
functions are enabled simultaneously; 


— To set or reset the Special Mask Mode. 


4.5.3 POLL/INTERRUPT REQUEST/IN-SERVICE 
STATUS REGISTER 


As the name implies, this 8-bit read-only register has 
multiple functions. Depending on the command is- 
sued in the OCW3, the content of this register re- 
flects the result of the command executed. For a 
Poll Command, the register read contains the binary 
code of the highest priority level requesting service 
(if any). For a Read IRR Command, the register con- 
tent will show the current pending interrupt re- 
quest(s). Finally, for a Read ISR Command, this reg- 
ister will specify all interrupt levels which are bein 

serviced. ) 


4.5.4 INTERRUPT MASK REGISTER (IMR) 


This is a read-only 8-bit register which, when read, 
will specify all interrupt levels within the same bank 
that are masked. 


4.5.5 VECTOR REGISTERS (VR) 


Each interrupt request input has an 8-bit read/write 
programmable vector register associated with it. The 
registers should be programmed to contain the inter- 
rupt vector for the corresponding request. The con- 
tents of the Vector Register will be placed on the 
Data Bus during the INTA cycles as described previ- 
ously. 


82370 


4.6 Programming 


Programming the 82370 PIC is accomplished by us- 
ing two types of command words: ICW’s and 
OCW’s. All modes and commands explained in the 
previous sections are programmable using the 
ICW’s and OCW’s. The ICW’s are issued from the 
80376 in a sequential format and are used to setup 
the banks in the 82370 PIC in an initial state of oper- 
ation. The OCW’s are issued as needed to vary and 
control the 82370 PIC’s operations. 


Both ICW’s and OCW’s are sent by the 80376 to the 
interrupt banks via the Data Bus. Each bank distin- 
guishes between the different ICW’s and OCW’s by 
the I/O address map, the sequence they are issued 
(ICW’s only), and by some dedicated bits among the 
ICW’s and OCW’s. 


An example of programming the 82370 interrupt 
controllers is given in Appendix C (Programming the 
82370 Interrupt Controllers). 


All three interrupt banks are programmed in a similar 
way. Therefore, only a single bank will be described 
in the following sections. 


4.6.1 INITIALIZATION (ICW) 


Before normal operation can begin, each bank must 
be initialized by programming a sequence of two to 
four bytes written into the ICW’s. 


Figure 4-6 shows the initialization flow for an inter- 
rupt bank. Both ICW1 and ICW2 must be issued for 
any form of operation. However, ICW3 and ICW4 are 
used only if designated in ICW1. Once initialized, if 
any programming changes within the ICW’s are to 
be made, the entire ICW sequence must be repro- 
grammed, not just an individual ICW. 


Note that although the ICW2’s in the 82370 PIC do 
not effect the Bank’s operation, they still must be 
programmed in order to preserve the compatibility 
with the 82C59A. The contents programmed are not 
relevant to the overall operations of the interrupt 
banks. Also, whenever one of the three ICW2’s is 
programmed, an interrupt level 1.5 in Bank A will be 
generated. This interrupt request will be cleared 
upon reading of the ICW2 registers. Since the three 
ICW2’s share the same interrupt level and the sys- 
tem may not know the origin of the interrupt, all three 
ICW2’s must be read. 
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(ICW2 INTERRUPT GENERATED) 


(TO SET BIT 'D2’ FOR INTERNAL CASCADE 
BANK, OR EXTERNAL CASCADE MODE.) 


NO (IC4 = 0) 


YES (IC4=1) 


READ 1CW2 REGISTERS FOR ALL BANKS, 
AFTER ALL BANKS ARE INITIALIZED. 


ENABLE INTERRUPT 
READY TO ACCEPT 
INTERRUPT REQUESTS 


*|CW2 vector address must be programmed now. 
Other vector addresses may be programmed via ICW2 interrupt service routine. 
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Figure 4-6. Initialization Sequence 


Certain internal setup conditions occur automatically 
within the interrupt bank after the first ICW (ICW1) 
has been issued. These are: 


— The edge sensitive circuit is reset, which means 
that following initialization, an interrupt request 
input must make a HIGH-to-LOW transition to 
generate an interrupt; 


— The Interrupt Mask Register (IMR) is cleared; 
that is, all interrupt inputs are enabled; 


— IRQ7 input of each bank is assigned priority 7 
(lowest); 


— Special Mask Mode is cleared and Status Read 
is set to IRR; 


— If no ICW4 is needed, then no Automatic-EOI is 
selected. 
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4.6.2 VECTOR REGISTERS (VR) 


Each interrupt request input has a separate Vector 
Register. These Vector Registers are used to store 
the pre-programmed vector number corresponding 
to their interrupt sources. In order to guarantee prop- 
er interrupt handling, all Vector Registers must be 
programmed with the predefined vector numbers. 
Since an interrupt request will be generated whenev- 
er an ICW2 is written during the initialization se- 
quence, it is important that the Vector Register of 
IRQ1.5 in Bank A should be initialized and the inter- 
rupt service routine of this vector is set up before the 
ICW’s are written. 
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4.6.3 OPERATION CONTROL WORDS (OCW) 


After the ICW’s are programmed, the operations of 
each interrupt controller bank can be changed by 
writing into the OCW’s as explained before. There is 
no special programming sequence required for the 
OCW’s. Any OCW may be written at any time in or- 
der to change the mode of or to perform certain op- 
erations on the interrupt banks. 


4.6.3.1 Read Status and Poll Commands (OCW3) 


Since the reading of IRR and ISR status as well as 
the result of a Poll Command are available on the 
same read-only Status Register, a special Read 
Status/Poll Command must be issued before the 
Poll/Interrupt Request/In-Service Status Register is 
read. This command can be specified by writing the 
required control word into OCW3. As mentioned ear- 
lier, if both the Poll Command and the Status Read 
Command are enabled simultaneously, the Poll 
Command will override the Status Read. That is, af- 
ter the command execution, the Status Register will 
contain the result of the Poll Command. 


4.7 Register Bit Definition 
INITIALIZATION COMMAND WORD 1 (ICW1) 
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Note that for reading IRR and ISR, there is no need 
to issue a Read Status Command to the OCW3 ev- 
ery time the IRR or ISR is to be read. Once a Read 
Status Command is received by the interrupt bank, it 
“remembers” which register is selected. However, 
this is not true when the Poll Command is used. 


In the Poll Command, after the OCW3 is written, the 
82370 PIC treats the next read to the Status Regis- 
ter as an interrupt acknowledge. This will set the ap- 
propriate IS bit if there is a request and read the 
priority level. Interrupt Request input status remains 
unchanged from the Poll Command to the Status 
Read. 


In addition to the above read commands, the Inter- 
rupt Mask Register (IMR) can also be read. When 
read, this register reflects the contents of the pre- 
programmed OCW1 which contains information on 
which interrupt request(s) is(are) currently disabled. 


EES ES Re CORSE 


0 = EDGE TRIGGERED 
1 — LEVEL TRIGGERED 


INITIALIZATION COMMAND WORD 2 (iCW2) 


0 = NO ICW4 NEEDED 
1 — ICW4 NEEDED 


O = EXTERNAL CASCADE 


(ICW3 NEEDED) 


1 — NO EXTERNAL CASCADE 


(ICW3 NOT NEEDED) 
290164-54 


07 | 06 | 5 | 4 | 03 | 2 | 01 | 00 | 


CONTENT IS NOT RELEVANT TO THE ACTUAL 
OPERATION OF THE BANK BUT CAN BE READ 
BY THE INTERRUPT SERVICE ROUTINE TO 
DETERMINE WHERE THE INTERRUPT VECTORS 
OF EACH BANK START. 


290164-55 
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INITIALIZATION COMMAND WORD 3 (iICW3) 
ICW3 for Bank A: 


0 - NO SLAVE CASCADED TO BANK A 
1 - THERE IS A SLAVE CASCADED 
TO TOUT2#/IRQ3# PIN 


ICW3 for Bank B: 


0 - NO CASCADED REQUEST TO IRQN 

1 - THERE IS A CASCADED REQUEST 
CONNECTED TO IRQN (I.E. THE 
CORRESPONDING INTERRUPT 


REQUEST INPUTS) eer 


ICW3 for Bank C: 


S23 ] $22 | $21] S20] S19] $18] $17 [$16 | 


0 = NO CASCADED REQUEST TO IRQN 
1 — THERE IS A CASCADED REQUEST 


CONNECTED TO IRQN 
290164-58 


INITIALIZATION COMMAND WORD 4 (iC W4) 


0 =NORMAL EOI 
1 =AUTOMATIC EOI 


0 =NOT SPECIAL FULLY NESTED MODE 
1 = SPECIAL FULLY NESTED MODE 
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OPERATION CONTROL WORD 1 (OCW1) 


Mi=1 MASK SET (INTERRUPT DISABLED) 


Mi=0 MASK RESET (INTERRUPT ENABLED) 
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OPERATION CONTROL WORD 2 (OCW2) 


, Rf ) et | ope) eT 
eo Ee 


INTERRUPT LEVEL 


NON=SPECIFIC EO] COMMAND TO BE ACTED UPON 


SPECIFIC EO| COMMAND 
ROTATE ON NON=SPECIFIC EOI 
ROTATE ON AUTO=EOI MODE ore 
ROTATE ON AUTO=EO! MODE (CLEAR) 
ROTATE ON SPECIFIC EOI (L2—LO USED) 
SET PRIORITY (L2—LO USED) 

NO OPERATION 


68 sow OS 
oo=-400—68 — = 
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OPERATION CONTROL WORD 3 (OCW3) 


D7 D6 DS D4 D3 D2 DO 
po | esww | saw fo ft fr | me fs | 
ie Nebel 
ESMM SMM 
0 0 NO ACTION NO ACTION 


0 1 NO ACTION 1 = POLL COMMAND NO ACTION 
1 O RESET SPECIAL MASK 0O= NO POLL COMMAND READ IR REG. 
1 


1 SET SPECIAL MASK READ IS REG. 
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ESMM — Enable Special Mask Mode. When this bit is set to 1, it enables the SMM bit to set or reset the 
Special Mask Mode. When this bit is set to 0, SMM bit becomes don’t care. 


SMM — Special Mask Mode. If ESMM=1 and SMM = 1, the interrupt controller bank will enter Special Mask 
Mode. If ESMM= 1 and SMM=0, the bank will revert to normal mask mode. When ESMM=0, SMM 
has no effect. 
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POLL/INTERRUPT REQUEST/IN-SERVICE STATUS REGISTER 


Poll Command Status 


BINARY CODE OF 

THE HIGHEST PRIORITY 

LEVEL REQUESTING 
O-NO PENDING INTERRUPT 


- INTERRUPT 
1 — PENDING 290164-63 


Interrupt Request Status 


D7 D6 DS D4 D3 D2 D1 DO 
LIRQ7 | IRQ6 | IRQS | IRO4 | IRQS | IRQZ | IRQ1 | IRQO | 


IF IRQ BIT IS: 0 = NO REQUEST 
1 = REQUEST PENDING 


NOTE: 

Although all Interrupt Request inputs are active LOW, the internal logical will invert the state of the pins so that when there 
is a pending interrupt request at the input, the corresponding IRQ bit will be set to HIGH in the Interrupt Request Status 
register. 


In-Service Status 
D7 D6 DS D4 D3 D2 ODI vO 


LIS7 | sé ] ISS | IS4 } IS3 } 1S2 | St | ISO | 


IF IS BIT IS: 0 — NOT IN=SERVICE 


1 — REQUEST IS IN=SERVICE 
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VECTOR REGISTER (VR) 


07 | v6 | os | oa | os | 02 | ot | 0 
Nas REN ea er 


8-BIT VECTOR NUMBER 


290164-66 
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Table 4-4. Register Operational Summary 


Operational Command Bits 
Description Words 


Fully Nested Mode 
Non-specific EO| Command 
Specific EO| Command 
Automatic EOI Mode 
Rotate On Non-Specific 

EOI Command 
Rotate On Automatic 

EOI Mode 
Set Priority Command 
Rotate On Specific 

EOI Command 
Interrupt Mask Register 
Special Mask Mode 
Level Triggered Mode 
Edge Triggered Mode 
Read Register Command, IRR 
Read Register Command, ISR 
Read IMR 
Poll Command 
Special Fully Nested Mode 


4.8 Register Operational Summary 


For ease of reference, Table 4-4 gives a summary of 
the different operating modes and commands with 
their corresponding registers. - 


5.0 PROGRAMMABLE INTERVAL 
TIMER 


5.1 Functional Description 


The 82370 contains four independently Programma- 
ble Interval Timers: Timer 0-3. All four timers are 
functionally compatible to the Intel 82C54. The first 
three timers (Timer 0-2) have specific functions. 
The fourth timer, Timer 3, is a general purpose timer. 
Table 5-1 depicts the functions of each timer. A brief 
description of each timer’s function follows. 


Table 5-1. Programmable 
interval Timer Functions 


Out/IRQ3 # 


Gen. Purpose/IRQO 
Generator 


ICW1, ICW4 


ICW1, ICW4 


OCW-Default 


OCW2 EOI 
OCW2 SL, EOI, LO-L2 
IC4, AEOI 
OCW2 EOI 
OCW2 R, SL, EOI 


OCWe2 
OCW2 


LO-L2 
R, SL, EO! 


OCW1 MO-M7 

OCW3 ESMM, SMM 
ICW1 LTIM 
ICW1 LTIM 

OCW3 RR, RIS 

OCW3 RR, RIS 

IMR MO-M7 
OCW3 P 
IC4, SFNM 


TIMER 0—Event Based Interrupt Request 8 
Generator 


Timer 0 is intended to be used as an Event Counter. 
The output of this timer will generate an Interrupt 
Request 8 (IRQ8) upon a rising edge of the timer 
output (TOUTO). Normally, this timer is used to im- 
plement a time-of-day clock or system tick. The Tim- 
er 0 output is not available as an external signal. 


TIMER 1—General Purpose/DRAM Refresh 
Request 


The output of Timer 1, TOUT1, can be used as a 
general purpose timer or as a DRAM Refresh Re- 
quest signal. The rising edge of this output creates a 
DRAM refresh request to the 82370 DRAM Refresh 
Controller. Upon reset, the Refresh Request func- 
tion is disabled, and the output pin is the Timer 1 
output. 


TIMER 2—General Purpose/Speaker Out/IRQ3 # 


The Timer 2 output, TOUT2#, could be used to sup- 
port tone generation to an external speaker. This pin 
is a bidirectional signal. When used as an input, a 
logic LOW asserted at this pin will generate an Inter- 
rupt Request 3 (IRQ3#) (see Programmable Inter- 
rupt Controller). 
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DATA BUFFER 


ee & COUNTER 0 


8=— BIT 
INTERNAL BUS seins 


COUNTER 1 


CONTROL 
WORD 
REGISTER | 


COUNTER 2 


CONTROL 


WORD COUNTER 3. 


REGISTER Il 


IRQB 
(INTERNAL) 


REFRESH 
CONTROLLER 


REF # 


EDGE 
DETECTOR 


2=-TO=1 
4 MUX 


0 


TOUT1 /REF# 
select 


REF ENABLE 
OPEN COLLECTOR (INTERNAL) 


Re. e TOUT2#/IRQ3# 


TO IRQ3# (INTERNAL) 


EDGE IRQO 
DETECTOR (INTERNAL) 


ge ° TOUT3¥ 
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Figure 5-1. Block Diagram of Programmable Interval Timer 


TIMER 3—General Purpose/Interrupt Request 0 
Generator | 

The output of Timer 3 is fed to an edge detector and 

generates an Interrupt Request 0 (IRQO) in the 

82370. The inverted output of this timer (TOUT3 #) 

is also available as an external signal for general 

purpose use. 


5.1.1 INTERNAL ARCHITECTURE 


The functional block diagram of the Programmable 
Interval Timer section is shown in Figure 5-1. Follow- 
ing is a description of each block. 


DATA BUFFER & READ/WRITE LOGIC 
This part of the Programmable Interval Timer is used 
to interface the four timers to the 82370 internal bus. 


The Data Buffer is for transferring commands and 
data between the 8-bit internal bus and the timers. 
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The Read/Write Logic accepts inputs from the inter- 
nal bus and generates signals to control other func- 
tional blocks within the timer section. 


CONTROL WORD REGISTERS | & Il 


The Control Word Registers are write-only registers. 
They are used to control the operating modes of the 
timers. Control Word Register | controls Timers 0, 1 
and 2, and Control Word Register II controls Timer 
3. Detailed description of the Control Word Regis- 
ters will be included in the Register Set Overview 
section. 


COUNTER 0, COUNTER 1, COUNTER 2, 
COUNTER 3 


Counters 0, 1, 2, and 3 are the major parts of Timers 
0, 1, 2, and 3, respectively. These four functional 
blocks are identical in operation, so only a single 
counter will be described. The internal block dia- 
gram of one counter is shown in Figure 5-2. 


82370 


INTERNAL BUS 


CONTROL 
WORD 
REGISTER 


Figure 5-2. Internal Block Diagram of a Counter 


The four counters share a common clock input 
(CLKIN), but otherwise are fully independent. Each 
counter is programmable to operate in a different 
mode. 


Although the Control Word Register is shown in the 
figure, it is not part of the counter itself. Its pro- 
grammed contents are used to control the opera- 
tions of the counters. . 


The Status Register, when latched, contains the cur- 
rent contents of the Control Word Register and 
status of the output and Null Count Flag (see Read 
Back Command). 


The Counting Element (CE) is the actual counter. It 
is a 16-bit presettable synchronous down counter. 


The Output Latches (OL) contain two 8-bit latches 
(OLM and OLL). Normally, these latches “follow” 
the content of the CE. OLM contains the most signif- 
icant byte of the counter and OLL contains the least 
significant byte. If the Counter Latch Command is 
sent to the counter, OL will latch the present count 
until read by the 80376 and then return to follow the 
CE. One latch at a time is enabled by the timer’s 


Control Logic to drive the internal bus. This is how » 


the 16-bit Counter communicates over the 8-bit in- 
ternal bus. Note that CE cannot be read. Whenever 
the count is read, it is one of the OL’s that is being 
read. 


When a new count is written into the counter, the 
value will be stored in the Count Registers (CR), and 
transferred to CE. The transferring of the contents 
from CR’s to CE is defined as “loading”’ of the coun- 
ter. The Count Register contains two 8-bit registers: 
CRM (which contains the most significant byte) and 
CRL (which contains the least significant byte). Simi- 
lar to the OL’s, the Control Logic allows one register 
at a time to be loaded from the 8-bit internal bus. 
However, both bytes are transferred from the CR’s 
to the CE simultaneously. Both CR’s are cleared 
when the Counter is programmed. This way, if the 
Counter has been programmed for one byte count 
(either the most significant or the least significant 
byte only), the other byte will be zero. Note that CE 
cannot be written into directly. Whenever a count is 
written, it is the CR that is being written. 


As shown in the diagram, the Control Logic consists 
of three signals: CLKIN, GATE, and OUT. CLKIN 
and GATE will be discussed in detail in the section 
that follows. OUT is the internal output of the coun- 
ter. The external outputs of some timers (TOUT) are 
the inverted version of OUT (see TOUT1, TOUT2#, 
TOUT3#). The state of OUT depends on the mode 
of operation of the timer. 
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5.2 Interface Signals 


5.2.1 CLKIN 


CLKIN is an input signal used by all four timers for 
internal timing reference. This signal can be inde- 
pendent of the 82370 system clock, CLK2. In the 
following discussion, each “CLK Pulse” is defined 
as the time period between a rising edge and a fall- 
ing edge, in that order, of CLKIN. 


During the rising edge of CLKIN, the state of GATE 
is sampled. All new counts are loaded and counters 
are decremented on the falling edge of CLKIN. 


5.2.2 TOUT1, TOUT2#, TOUT3# 


TOUT1, TOUT2# and TOUT3# are the external 
output signals of Timer 1, Timer 2 and Timer 3, re- 
spectively. TOUT2# and TOUT3# are the inverted 
signals of their respective counter outputs, OUT. 
There is no external output for Timer 0. 


If Timer 2 is to be used as a tone generator of a 
speaker, external buffering must be used to provide 
sufficient drive capability. 


The Outputs of Timer 2 and 3 are dual function pins. 
The output pin of Timer 2 (TOUT2#/IRQ3#), which 
is a bidirectional open-collector signal, can also be 
used as interrupt request input. When the interrupt 
function is enabled (through the Programmable In- 
terrupt Controller), a LOW on this input will generate 
an Interrupt Request 3# to the 82370 Programma- 
ble Interrupt Controller. This pin has a weak internal 
pull-up resistor. To use the IRQ3# function, Timer 2 
should be programmed so that OUT2 is LOW. Addi- 
tionally, OUT3 of Timer 3 is connected to an edge 
detector which will generate an Interrupt Request 0 
(IRQO) to the 82370 after the rising edge of OUT3 
(see Figure 5-1). 


5.2.3 GATE 


GATE is not an externally controllable signal. Rath- 
er, it can be software controlled with the Internal 
Control Port. The state of GATE is always sampled 
on the rising edge of CLKIN. Depending on the 
mode of operation, GATE is used to enable/disable 
counting or trigger the start of an operation. 


For Timer 0 and 1, GATE is always enabled (HIGH). 
For Timer 2 and 3, GATE is connected to Bit 0 and 
6, respectively, of an Internal Control Port (at ad- 
dress 61H) of the 82370. After a hardware reset, the 
state of GATE of Timer 2 and 3 is disabled (LOW). 
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5.3 Modes of Operation 


Each timer can be independently programmed to 
operate in one of six different modes. Timers are 
programmed by writing a Control Word into the Con- 
trol Word Register followed by an Initial Count (see 
Programming). 


The following are defined for use in describing the 
different modes of operation. 


CLK Pulse—A rising edge, then a falling edge, in 
that order, of CLKIN. 


Trigger— A rising edge of a timer’s GATE input. 


Timer/Counter Loading— The transfer of a count 
from Count Register 
(CR) to Count Element 
(CE). 


5.3.1 MODE 0-INTERRUPT ON TERMINAL 
COUNT 


Mode 0 is typically used for event counting. After the 
Control Word is written, OUT is initially LOW, and will 
remain LOW until the counter reaches zero. OUT 
then goes HIGH and remains HIGH until a new 
count or a new Mode 0 Control Word is written into 
the counter. 


In this mode, GATE=HIGH enables counting; 
GATE = LOW disables counting. However, GATE 
has no effect on OUT. 


After the Control Word and initial count are written to 
a timer, the initial count will be loaded on the next 
CLK pulse. This CLK pulse does not decrement the 
count, so for an initial count of N, OUT does. not go 
HIGH until N+ 1 CLK pulses after the initial count is 
written. 


If a new count is written to the timer, it will be loaded 
on the next CLK pulse and counting will continue 
from the new count. If a two-byte count is written, 
the following happens: 


1. Writing the first byte disables counting, OUT is set 
LOW immediately (i.e. no CLK pulse required). 


2. Writing the second byte allows the new count to 
be loaded on the next CLK pulse. 


This allows the counting sequence to be synchroniz- 
ed by software. Again, OUT does not go HIGH until 
N+ 1 CLK pulses after the new count of N is written. 
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NOTES: 


The following conventions apply to all mode timing diagrams. 
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1. Counters are programmed for binary (not BCD) counting and for reading/writing least significant byte (LSB) only. 


2. The counter is always selected (CS# always low). 


3. CW stands for ‘Control Word”; CW = 10 means a control word of 10, Hex is written to the counter. 


4. LSB stands for ‘“‘Least significant byte” of count. 
5. Numbers below diagrams are count values. 
The lower number is the least significant byte. 


The upper number is the most significant byte. Since the counter is programmed to read/write LSB er the most 


significant byte cannot be read. 
N stands for an undefined count. 
Vertical lines show transitions between count values. 


Figure 5-3. Mode 0 


If an initial count is written while GATE is LOW, the 
counter will be loaded on the next CLK pulse. When 
GATE goes HIGH, OUT will go HIGH N CLK pulses 
later; no CLK pulse is needed to load the counter as 
this has already been done. 


5.3.2 MODE 1-GATE RETRIGGERABLE 
ONE-SHOT 


In this mode, OUT will be initially HIGH. OUT will go 
LOW on the CLK pulse following a trigger to start the 


one-shot operation. The OUT signal will then remain 
LOW until the timer reaches zero. At this point, OUT 
will stay HIGH until the next trigger comes in. Since 
the state of GATE signals of Timer 0 and 1 are inter- 
nally set to HIGH. 


After writing the Control Word and initial count, the 
timer is considered “armed”. A trigger results in 
loading the timer and setting OUT LOW on the next 
CLK pulse. Therefore, an initial count of N will result 
in a one-shot pulse width of N CLK cycles. Note 
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Figure 5-4. Mode 1 


that this one-shot operation is retriggerable; i.e. OUT 
will remain LOW for N CLK pulses after every trigger. 
The one-shot operation can be repeated without re- 
writing the same count into the timer. 


lf a new count is written to the timer during a one- 
shot operation, the current one-shot pulse width will 
not be affected until the timer is retriggered. This is 
because loading of the new count to CE will occur 
only when the one-shot is triggered. 


5.3.3 MODE 2-RATE GENERATOR 


This mode is a divide-by-N counter. It is typically 
used to generate a Real Time Clock interrupt. OUT 
will initially be HIGH. When the initial count has dec- 
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remented to 1, OUT goes LOW for one CLK pulse, 
then OUT goes HIGH again. Then the timer reloads 
the initial count and the process is repeated. In other 
words, this mode is periodic since the same se- 
quence is repeated itself indefinitely. For an initial 
count of N, the sequence repeats every N CLK cy- 
cles. 


Similar to Mode 0, GATE=HIGH enables counting, 
where GATE=LOW disables counting. If GATE 
goes LOW during an output pulse (LOW), OUT is set 
HIGH immediately. A trigger (rising edge on GATE) 
will reload the timer with the initial count on the next 
CLK pulse. Then, OUT will go LOW (for one CLK 
pulse) N CLK pulses after the new trigger. Thus, 
GATE can be used to synchronize the timer. 
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A GATE transition should not occur one clock prior to terminal count. 


Figure 5-5. Mode 2 


After writing a Control Word and initial count, the 
timer will be loaded on the next CLK pulse. OUT 
goes LOW (for one CLK pulse) N CLK pulses after 
the initial count is written. This is another way the 
timer may be synchronized by software. 


Writing a new count while counting does not affect 
the current counting sequence because the new 
count will not be loaded until the end of the current 
counting cycle. If a trigger is received after writing a 


new count but before the end of the current period, 
the timer will be loaded with the new count on the 
next CLK pulse after the trigger, and counting will 
continue with the new count. 


5.3.4 MODE 3-SQUARE WAVE GENERATOR 


Mode 3 is typically used for Baud Rate generation. 
Functionally, this mode is similar to Mode 2 except 
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for the duty cycle of OUT. In this mode, OUT will be 
initially HIGH. When half of the initial count has ex- 
pired, OUT goes low for the remainder of the count. 
The counting sequence will be repeated, thus this 
mode is also periodic. Note that an initial count of N 
results in a square wave with a period of N CLK 
pulses. 


The GATE input can be used to synchronize the tim- 
er. GATE=HIGH enables counting; GATE=LOW 
disables counting. If GATE goes LOW while OUT is 
LOW, OUT is set HIGH immediately (i.e. no CLK 
pulse is required). A trigger reloads the timer with the 
initial count on the next CLK pulse. 


After writing a Control Word and initial count, the 
timer will be loaded on the next CLK pulse. This al- 
lows the timer to be synchronized by software. 


Writing a new count while counting does not affect 
the current counting sequence. If a trigger is re- 
ceived after writing a new count but before the end 
of the current half-cycle of the square wave, the tim- 
er will be loaded with the new count on the next CLK 
pulse and counting will continue from the new count. 
Otherwise, the new count will be loaded at the end 
of the current half-cycle. 
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There is a slight difference in operation depending 
on whether the initial count is EVEN or ODD. The 
following description is to show exactly how this 
mode is implemented. 


EVEN COUNTS: 


OUT is initially HIGH. The initial count is loaded on 
one CLK pulse and is decremented by two on suc- 
ceeding CLK pulses. When the count expires (decre- 
mented to 2), OUT changes to LOW and the timer is 
reloaded with the initial count. The above process is 
repeated indefinitely. 


ODD COUNTS: 


OUT is initially HIGH. The initial count minus one 
(which is an even number) is loaded on one CLK 
pulse and is decremented by two on succeeding 
CLK pulses. One CLK pulse after the count expires 
(decremented to 2), OUT goes LOW and the timer is 
loaded with the initial count minus one again. Suc- 
ceeding CLK pulses decrement the count by two. 
When the count expires, OUT goes HIGH immedi- 
ately and the timer is reloaded with the initial count 
minus one. The above process is repeated indefi- 
nitely. So for ODD counts, OUT will HIGH or 
(N+ 1)/2 counts and LOW for (N—1)/2 counts. 
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A GATE transition should not occur one clock prior to terminal count. 


Figure 5-6. Mode 3 


5.3.5 MODE 4-INITIAL COUNT TRIGGERED 
STROBE 


This mode allows a strobe pulse to be generated by 
writing an initial count to the timer. Initially, OUT will 
be HIGH. When a new initial count is written into the 
timer, the counting sequence will begin. When the 
initial count expires (decremented to 1), OUT will go 
LOW for one CLK pulse and then go HIGH again. 


Again, GATE=HIGH enables’ counting while 
GATE = LOW disables counting. GATE has no ef- 
fect on OUT. 


After writing the Control Word and initial count, the 
timer will be loaded on the next CLK pulse. This CLK 
pulse does not decrement the count, so for an initial 
count of N, OUT does not strobe LOW until N+1 
CLK pulses after initial count is written. 


If a new count is written during counting, it will be 


loaded in the next CLK pulse and counting will con- 
tinue from the new count. 
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Figure 5-7. Mode 4 


If a two-byte count is written, the following will occur: 
1. Writing the first byte has no effect on counting. 


2. Writing the second byte allows the new count to 
be loaded on the next CLK pulse. 


OUT will strobe LOW N+1 CLK pulses after the 
new count of N is written. Therefore, when the 
strobe pulse will occur after a trigger depends on the 
value of the initial count loaded. 


5.3.6 MODE 5-GATE RETRIGGERABLE 
STROBE 


Mode 5 is very similar to Mode 4 except the count 
sequence is triggered by the gate signal instead of 
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by writing an initial count. Initially, OUT will be HIGH. 
Counting is triggered by a rising edge of GATE. 
When the initial count has expired (decremented to 
1), OUT will go LOW for one CLK pulse and then go 
HIGH again. 


After loading the Control Word and initial count, the 
Count Element will not be loaded until the CLK pulse 
after a trigger. This CLK pulse does not decrement 
the count. Therefore, for an initial count of N, OUT 
does not strobe LOW until N+ 1 CLK pulses after a 
trigger. 
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Figure 5-8. Mode 5 


The counting sequence is retriggerable. Every trig- 
ger will result in the timer being loaded with the initial 
count on the next CLK pulse. 


If the new count is written during counting, the cur- 
rent counting sequence will not be affected. If a trig- 
ger occurs after the new count is written but before 
the current count expires, the timer will be loaded 
with the new count on the next CLK pulse and a new 
count sequence will start from there. 
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5.3.7 OPERATION COMMON TO ALL MODES 


5.3.7.1 GATE 


The GATE input is always sampled on the rising 
edge of CLKIN. In Modes 0, 2, 3 and 4, the GATE 
input is level sensitive. The logic level is sampled on 
the rising edge of CLKIN. In Modes 1, 2, 3 and 5, the 
GATE input is rising edge sensitive. In these modes, 
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walt of Gate aia 


Disable count 
No Effect 


1. Disable count 


2. Sets output HIGH 
immediately 

1. Disable count 

2. Sets output HIGH 
immediately 

Disable count 

No Effect 


a rising edge of GATE (trigger) sets an edge sensi- 
tive flip-flop in the timer. The flip-flop is reset imme- 
diately after it is sampled. This way, a trigger will be 
detected no matter when it occurs; i.e. a HIGH logic 
level does not have to be maintained until the next 
rising edge of CLKIN. Note that in Modes 2 and 3, 
the GATE input is both edge and level sensitive. 


5.3.7.2 Counter 


New counts are loaded and counters are decre- 
mented on the falling edge of CLKIN. The largest 
possible initial count is 0. This is equivalent to 2**16 
for binary counting and 10**4 for BCD counting. 


Note that the counter does not stop when it reaches 
zero. In Modes 0, 1, 4 and 5, the counter ‘wraps 
around’ to the highest count: either FFFF Hex for 
binary counting or 9999 for BCD counting, and con- 
tinues counting. Modes 2 and 3 are periodic. The 
counter reloads itself with the initial count and con- 
tinues counting from there. 


The minimum and maximum initial count in each 
counter depends on the mode of operation. They 
are summarized below. 


5.4 Register Set Overview 


The Programmable Interval Timer module of the 
82370 contains a set of six registers. The port ad- 
‘dress map of these registers is shown in Table 5-2. 
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No Effect 

1. Initiate count 

2. Reset output 
after next clock 

Initiate count 


Enable count 
No Effect 


Enable count 
Enable count 


Initiate count 


No Effect 
Initiate count 


Enable count 
No Effect 


Table 5-2. Timer Register Port Address Map 


Port Address Description 


40H Counter 0 Register (read/write) 
41H Counter 1 Register (read/write) 
42H Counter 2 Register (read/write) 
43H Control Word Register | 


(Counter 0, 1 & 2) (write-only) 


44H Counter 3 Register (read/write) 

45H Reserved 

46H Reserved 

47H Control Word Register II 
(Counter 3) (write-only) 


5.4.1 COUNTER 0, 1, 2, 3 REGISTERS 


These four 8-bit registers are functionally identical. 
They are used to write the initial count value into the 
respective timer. Also, they can be used to read the 
latched count value of a timer. Since they are 8-bit 
registers, reading and writing of the 16-bit initial 
count must follow the count format specified in the 
Control Word Registers; i.e. least significant byte 
only, most significant byte only, or least significant 
byte then most significant byte (see Programming). 


5.4.2 CONTROL WORD REGISTER | & Il 


There are two Control Word Registers associated 
with the Timer section. One of the two registers 
(Control Word Register |) is used to control the oper- 
ations of Counters 0, 1 and 2 and the other (Control 
Word Register II) is for Counter 3. The major func- 
tions of both Control Word Registers are listed be- 
low: 


i . 
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— Select the timer to be programmed. 


— Define which mode the selected timer is to oper- 
ate in. 


— Define the count sequence; i.e. if the selected 
timer is to count as a Binary Counter or a Binary 
Coded Decimal (BCD) Counter. 


— Select the byte access sequence during timer 
read/write operations; i.e. least significant byte 
only, most significant only, or least significant 
byte first, then most significant byte. 


Also, the Control Word Registers can be pro- 
grammed to perform a Counter Latch Command or a 
Read Back Command which will be described later. 


5.5 Programming 


5.5.1 INITIALIZATION 


Upon power-up or reset, the state of all timers is 
undefined. The mode, count value, and output of all 
timers are random. From this point on, how each 
timer operates is determined solely by how it is pro- 
grammed. Each timer must be programmed before it 
can be used. Since the outputs of some timers can 
generate interrupt signals to the 82370, all timers 
should be initialized to a known state. 


Counters are programmed by writing a Control Word 
into their respective Control Word Registers. Then, 
an Initial Count can be written into the correspond- 
ing Count Register. In general, the programming pro- 
cedure is very flexible. Only two conventions need to 
be remembered: 


1. For each timer, the Control Word must be written 
before the initial count is written. 


2. The 16-bit initial count must follow the count for- 
mat specified in the Control Word (least significant 
byte only, most significant byte only, or least signifi- 
cant byte first, followed by most significant byte). 


Since the two Control Word Registers and the four 
Counter Registers have separate addresses, and 
each timer can be individually selected by the appro- 
priate Control Word Register, no special instruction 
sequence is required. Any programming sequence 
that follows the conventions above is acceptable. 


A new initial count may be written to a timer at any 
time without affecting the timer’s programmed mode 
in any way. Count sequence will be affected as de- 
scribed in the Modes of Operation section. Note that 
the new count must follow the programmed count 
format. 


82370 


lf a timer is previously programmed to read/write 
two-byte counts, the following precaution applies. A 
program must not transfer control between writing 
the first and second byte to another routine which 
also writes into the same timer. Otherwise, the read/ 
write will result in incorrect count. 


Whenever a Control Word is written to a timer, all 
control logic for that timer(s) is immediately reset 
(i.e. no CLK pulse is required). Also, the correspond- 
ing output in, TOUT #, goes to a known initial state. 


5.5.2 READ OPERATION 


Three methods are available to read the current 
count as well as the status of each timer. They are: 
Read Counter Registers, Counter Latch Command 
and Read Back Command. Below is a description of 
these methods. 


READ COUNTER REGISTERS 


The current count of a timer can be read by perform- 
ing a read operation on the corresponding Counter 
Register. The only restriction of this read operation 
is that the CLKIN of the timers must be inhibited by 
using external logic. Otherwise, the count may be in 
the process of changing when it is read, giving an 
undefined result. Note that since all four timers are 
sharing the same CLKIN signal, inhibiting CLKIN to 
read a timer will unavoidably disable the other timers 
also. This may prove to be impractical. Therefore, it 
is suggested that either the Counter Latch Com- 
mand or the Read Back Command can be used to 
read the current count of a timer. 


Another alternative is to temporarily disable a timer 
before reading its Counter Register by using the 
GATE input. Depending on the mode of operation, 
GATE=LOW will disable the counting operation. 
However, this option is available on Timer 2 and 3 
only, since the GATE signals of the other two timers 
are internally enabled all the time. 


COUNTER LATCH COMMAND 


A Counter Latch Command will be executed when- 


‘ever a special Control Word is written into a Control 


Word Register. Two bits written into the Control 
Word Register distinguish this command from a ‘reg- 
ular’ Control Word (see Register Bit Definition). Also, 
two other bits in the Control Word will select which 
counter is to be latched. 


Upon execution of this command, the selected 


counter’s Output Latch (OL) latches the count at the 
time the Counter Latch Command is received. This 
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count is held in the latch until it is read by the 80376, 
or until the timer is reprogrammed. The count is then 
unlatched automatically and the OL returns to ‘“‘fol- 
lowing” the Counting Element (CE). This allows 
reading the contents of the counters “on the fly” 
without affecting counting in progress. Multiple 
Counter Latch Commands may be used to latch 
more than one counter. Each latched count is held 
until it is read. Counter Latch Commands do not af- 
fect the programmed mode of the timer in any way. 


If a counter is latched, and at some time later, it is 
latched again before the prior latched count is read, 
the second Counter Latch Command is ignored. The 
count read will then be the count at the time the first 
command was issued. 


In any event, the latched count must be read ac- 
cording to the programmed format. Specifically, if 
the timer is programmed for two-byte counts, two 
bytes must be read. However, the two bytes do not 
have to be read right after the other. Read/write or 
programming operations of other timers may be per- 
formed between them. 


Another feature of this Counter Latch Command is 
that read and write operations of the same timer 
may be interleaved. For example, if the timer is pro- 
grammed for two-byte counts, the following se- 
quence is valid. 


1. Read least significant byte. 
2. Write new least significant byte. 
3. Read most significant byte. 
4. Write new most significant byte. 


If a timer is programmed to read/write two-byte 
counts, the following precaution applies. A program 
must not transfer control between reading the first 
and second byte to another routine which also reads 
from that same timer. Otherwise, an incorrect count 
will be read. 


READ BACK COMMAND 


The Read Back Command is another special Com- 
mand Word operation which allows the user to read 
the current count value and/or the status of the se- 
lected timer(s). Like the Counter Latch Command, 
two bits in the Command Word identify this as a 
Read Back Command (see Register Bit Definition). 


The Read Back Command may be used to latch 
multiple counter Output Latches (OL’s) by selecting 
more than one timer within a Command Word. This 
single command is functionally equivalent to several 
Counter Latch Commands, one for each counter to 
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be latched. Each counter’s latched count will be 
held until it is read by the 80376 or until the timer is 
reprogrammed. The counter is automatically un- 
latched when read, but other counters remain 
latched until they are read. If multiple Read Back 
commands are issued to the same timer without 
reading the count, all but the first are ignored; i.e. the 


count read will correspond to the very first Read 
Back Command issued. 


As mentioned previously, the Read Back Command 
may also be used to latch status information of the 
selected timer(s). When this function is enabled, the 
status of a timer can be read from the Counter Reg- 
ister after the Read Back Command is issued. The 
status information of a timer includes the following: 


1. Mode of timer: 


This allows the user to check the mode of opera- 
tion of the timer last programmed. 


2. State of TOUT pin of the timer: 


This allows the user to monitor the counter’s out- 
put pin via software, possibly eliminating some 
hardware from a system. 


3. Null Count/Count available: 


The Null Count Bit in the status byte indicates if 
the last count written to the Count Register (CR) 
has been loaded into the Counting Element (CE). 
The exact time this happens depends on the 
mode of the timer and is described in the Pro- 
gramming section. Until the count is loaded into 
the Counting Element (CE), it cannot be read from 
the timer. If the count is latched or read before 
this occurs, the count value will not reflect the 
new count just written. 


If multiple status latch operations of the timer(s) are 
performed without reading the status, all but the first 
command are ignored; i.e. the status read in will cor- 
respond to the first Read Back Command issued. 


Both the current count and status of the selected 
timer(s) may be latched simultaneously by enabling 
both functions in a single Read Back Command. 
This is functionally the same as issuing two separate 
Read Back Commands at once. Once again, if multi- 
ple read commands are issued to latch both the 
count and status of a timer, all but the first command 
will be ignored. 


If both count and status of a timer are latched, the 
first read operation of that timer will return the 
latched status, regardless of which was latched first. 
The next one or two (if two count bytes are to be 
read) read operations return the latched count. Note 
that subsequent read operations on the Counter 
Register will return the unlatched count (like the first 
read method discussed). 
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5.6 Register Bit Definitions Note that these 8-bit registers are for writing and 
reading of one byte of the 16-bit count value, either 
COUNTER 0, 1, 2, 3 REGISTER (READ/WRITE) the most significant or the least significant byte. 


Port Address CONTROL WORD REGISTER | & II (WRITE- 


Counter 0 Register (read/write) ONLY) 


Counter 1 Register (read/write) Port Address 


Counter 2 Register (read/write) 
Counter 3 Register (read/write) Control Word Register | 
(Counter 0, 1, 2 (write-only) 


Reserved | 
Reserved Control Word Register II 
(Counter 3) (write-only) 


07 | 06 | os | v4 | os | 2 | ot | 00 | 


LSB OF COUNT BYTE 


MSB OF COUNT BYTE 
290164-75 


Control Word Register | Control Word Register II 


SELECT COUNTER: 0 - 16=BiT BINARY SELECT COUNTER: 0 = 16=BIT BINARY 
00 SELECT COUNTER 0 COUNTER 00 SELECT COUNTER 3 COUNTER 
01 SELECT COUNTER 1 1 -BCD COUNTER 01 RESERVED 1=-BCD COUNTER 


10 SELECT COUNTER 2 (4 DECADES) 10 RESERVED (4 DECADES) 
11 READ BACK COMMAND 11 READ BACK COMMAND 
FOR COUNTER 0=2 FOR COUNTER 3 


MODE: MODE: 
READ/WRITE: 000 MODE 0 . READ/WRITE: 000 MODE 0 
00 COUNTER LATCH COMMAND 001 MODE 1 00 COUNTER LATCH COMMAND 001 MODE 1 
01 READ/WRITE LSB BYTE ONLY X10 MODE 2 01 READ/WRITE LSB BYTE ONLY X10 MODE 2 
10 READ/WRITE MSB BYTE ONLY X11 MODE 3 10 READ/WRITE MSB BYTE ONLY X11 MODE 3 
11 READ/WRITE LSB, THEN MSB BYTE 100 MODE 4 11 READ/WRITE LSB, THEN MSB BYTE 100 MODE 4 
101 MODE 5 101 MODE 5 


290164-76 290164-77 
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COUNTER LATCH COMMAND FORMAT 


(Write to Control Word Register) 


00 COUNTER 0 (OR 3) 
01 COUNTER 1 

10 COUNTER 2 

11 READ BACK COMMAND 
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READ BACK COMMAND FORMAT 


(Write to Control Word Register) 


rooney one [orm Towers] 0 
‘tide ees 


O= LATCH COUNT O=- COUNTER NOT 
1=- DO NOT LATCH SELECTED 
COUNT 1 = COUNTER IS 


SELECTED 
O= LATCH STATUS 


1 = DO NOT LATCH 
STATUS 


STATUS FORMAT 


(Returned from Read Back Command) 


D7 D6 DS D4 D3 D2 D1 DO 


Por Pou com] er [wo Te Pm [wo | om 


O = OUTPUT 
PIN=0 

1 — OUTPUT O= COUNT AVAILABLE 
PIN=1 FOR READING COUNTER 


1— NULL COUNT MODE 
290164-80 


1-688 


intel. 
6.0 WAIT STATE GENERATOR 


6.1 Functional Description 


The 82370 contains a programmable Wait State 
Generator which can generate a pre-programmed 
number of wait states during both CPU and DMA 
initiated bus cycles. This Wait State Generator is ca- 
pable of generating 1 to 16 wait states in no’ -pipe- 
lined mode, and 0 to 15 wait states in pipelined 
mode. Depending on the bus cycle type and the two 
Wait State Control inputs (WSC 0-1), a pre-pro- 
grammed number of wait states in the selected Wait 
State Register will be generated. 


The Wait State Generator can also be disabled to 
allow the use of devices capable. of generating their 
own READY # signals. Figure 6-1 is a block diagram 
of the Wait State Generator. | 


6.2 Interface Signals 


The following describes the interface signals which 
affect the operation of the Wait State Generator. 
The READY #, WSCO and WSC1 signals are inputs. 
READYO# is the ready output signal to the host 
processor. 


6.2.1 READY # 


READY # is an active LOW input signal which indi- 
cates to the 82370 the completion of a bus cycle. In 
the Master mode (e.g. 82370 initiated DMA transfer), 
this signal is monitored to determine whether a pe- 
ripheral or memory needs wait states inserted in the 


current bus cycle. In the Slave mode, it is used (to- | 


gether with the ADS# signal) to trace CPU bus cy- 
cles to determine if the current cycle is pipelined. 


INTERNAL WAIT STATE 
REQUIREMENT 


D7 


REGISTER 
SELECT 
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6.2.2 READYO# 


READYO# (Ready Out#) is an active LOW output 
signal and is the output of the Wait State Generator. 
The number of wait states generated depends on 
the WSC(0-1) inputs. Note that special cases are 
handled for access to the 82370 internal registers 
and for the Refresh cycles. For 82370 internal regis- 
ter access, READYO# will be delayed to take into 
the command recovery time of the register. One or 
more wait states will be generated in a pipelined cy- 
cle. During refresh, the number of wait states will be 
determined by the preprogrammed value in the Re- 
fresh Wait State ‘Register. 


In the simplest configuration, READYO# can be 
connected to the READY # input of the 82370 and 
the 80376 CPU. This is, however, not always the 
case. If external circuitry is to control the READY # 
inputs as well, additional logic will be required (see 
Application Issues). 


6.2.3 WSC(0-1) 


These two Wait State Control inputs, together with 
the M/lO# input, select one of the three pre-pro- 
grammed 8-bit Wait State Registers which deter- 
mines the number of wait states to be generated. 
The most significant half of the three Wait State 
Registers corresponds to memory accesses, the 
least significant half to |1/O accesses. The combina- 
tion WSC(0-1) = 11 disables the Wait State Gener- 
ator. 


READYO# 


D4 D3 * DO 


MEMORY 0 1/0 0 


‘gee a MEMORY 1 1/0 1 
mae MEMORY 2 1/0 2 
(RESERVED) REFRESH 


PROGRAMMABLE WAIT STATE 
REGISTERS 
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Figure 6-1. Wait State Generator Block Diagram 
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6.3 Bus Function 


6.3.1 WAIT STATES IN NON-PIPELINED CYCLE 


The timing diagram of two typical non-pipelined cy- 
cles with 82370 generated wait states is shown in 
Figure 6-2. In this diagram, it is assumed that the 
internal registers of the 82370 are not addressed. 
During the first T2 state of each bus cycle, the Wait 
State Control and the M/IO# inputs are sampled to 
determine which Wait State Register (if any) is se- 
lected. If the WSC inputs are active (i.e. not both are 
driven HIGH), the pre-programmed number of wait 
states corresponding to the selected Wait State 
Register will be requested. This is done by driving 
the READYO# output HIGH during the end of each 
T2 state. 


The WSC (0-1) inputs need only be valid during the 
very first T2 state of each non-pipelined cycle. As a 
general rule, the WSC inputs are sampled on the 
rising edge of the next clock (82384 CLK) after the 
last state when ADS# (Address Status) is asserted. 


The number of wait states generated depends on 
the type of bus cycle, and the number of wait states 
requested. The various combinations are discussed 
below. 


1. Access the 82370 internal registers: 2 to 5 wait 
states, depending upon the specific register ad- 
dressed. Some back-to-back sequences to the Inter- 
rupt Controller will require 7 wait states. 


CLK2 
CLK 

A(1 = 23) 
M/l0# 
BLE#, BHE# 
WSC(0 =1) 
ADS# 
READY# 


READYO# 


ONE WAIT STATE 
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2. Interrupt Acknowledge to the 82370: 5 wait states. 


3. Refresh: As programmed in the Refresh Wait 
State Register (see Register Set Overview). Note 
that if WCS (0-1) = 11, READYO# will stay inac- 
tive. 


4. Other bus cycles: Depending on WCS (0-1) and 
M/lO# inputs, these inputs select a Wait State Reg- 
ister in which the number of wait states will be equal 
to the pre-programmed wait state count in the regis- 
ter plus 1. The Wait State Register selection is de- 
fined as follows (Table 6-1). 


Table 6-1. Wait State Register Selection 


WAIT REG 0 (I/O half) 
WAIT REG 1 (I/O half) 
WAIT REG 2 (I/O half) 


WAIT REG 0 (MEM half) 
WAIT REG 1 (MEM half) 
WAIT REG 2 (MEM half) 
Wait State Gen. Disabled 


The Wait State Control signals, WSC (0-1), can be 
generated with the address decode and the Read/ 
Write control signals as shown in Figure 6-3. 


TWO WAIT STATES 
290164-82 


Figure 6-2. Wait States in Non-Pipelined Cycles 
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Address Decode 
W/R# Logic WSC (0-1) 


290164-83 


Figure 6-3. WSC (0-1) Generation 


Note that during HALT and SHUTDOWN, the num- 
ber of wait states will depend on the WSC (0-1) 
inputs, which will select the memory half of one of 
the Wait State Registers (see CPU Reset and Shut- 
down Detect). 


6.3.2 WAIT STATES IN PIPELINED CYCLES 


The timing diagram of two typical pipelined cycles 
with 82370 generated wait states is shown in Figure 
6-4. Again, in this diagram, it is assumed that the 
82370 internal registers are not addressed. As de- 
fined in the timing of the 80376 processor, the Ad- 
dress (A1-23), Byte Enable (BHE#, BLE#), and 
other control signals (M/IO#, ADS#) are asserted 
one T-state earlier than in a non-pipelined cycle; i.e. 
they are asserted at T2P. Similar to the non-pipe- 
lined case, the Wait State Control (WSC) inputs are 
sampled in the middle of the state after the last state 
the ADS# signal is asserted. Therefore, the WSC 
inputs should be asserted during the T1P state of 
each pipelined cycle (which is one T-state earlier 
than in the non-pipelined cycle). 


CLK2 


CLK 
A(1 = 23) 


M/lo# 
BLE#, BHE# 


WSC(0 <1) 


ADS# 


READY# 


READYO# 
ONE WAIT STATE 
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The number of wait states generated in a pipelined 
cycle is selected in a similar manner as in the non- 
pipelined case discussed in the previous section. 
The only difference here is that the actual number of 
wait states generated will be one less than that of 
the non-pipelined cycle. This is done automatically 
by the Wait State Generator. 


6.3.3 EXTENDING AND EARLY TERMINATING 
BUS CYCLE 


The 82370 allows external logic to either add wait 
states or cause early termination of a bus cycle by 
controlling the READY # input to the 82370 and the 
host processor. A possible configuration is shown in 
Figure 6-5. 


EXTERNAL READY# 
(EARLY TERMINATION) 


80376 


READY# 


EXTERNAL 

NOT READY 

(CYCLE EXTENSION) 
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Figure 6-5. External ‘READY’ Control Logic 


TWO WAIT STATES 
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Figure 6-4. Wait States in Pipelined Cycles 
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The EXT. RDY # (External Ready) signal of Figure 6- 
5 allows external devices to cause early termination 
of a bus cycle. When this signal is asserted LOW, 
the output of the circuit will also go LOW (even 
though the READYO# of the 82370 may still be 
HIGH). This output is fed to the READY # input of 
the 80376 and the 82370 to indicate the completion 
of the current bus cycle. 


Similarly, the EXT. NOT READY (External Not 
Ready) signal is used to delay the READY # input of 
the processor and the 82370. As long as this signal 
is driven HIGH, the output of the circuit will drive the 
READY # input HIGH. This will effectively extend the 
duration of a bus cycle. However, it is important to 


CLK2 


CLK 
A(1 = 23) 


M/lO# 
BLE¥, BHE# 


ADS# 
READY# 


READYO# 


CLK2 


CLK 
A(1 = 23) 


M/l0# 
BLE#, BHE# 


ADS# 


READY# 


READYO# 
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note that if the two-level logic is not fast enough to 
satisfy the READY # setup time, the OR gate should 
be eliminated. Instead, the 82370 Wait State Gener- 
ator can be disabled by driving both WSC (0-1) 
HIGH. In this case, the addressed memory or I/O 
device should activate the external READY # input 
whenever it is ready to terminate the current bus 
cycle. | 


Figures 6-6 and 6-7 show the timing relationships of 
the ready signals for the early termination and exten- 
sion of the bus cycles. Section 6-7, Application Is- 
sues, contains a detailed timing analysis of the ex- 
ternal circuit. 


290164-86 


' 290164-87 


Figure 6-7. Extending Bus Cycle by ‘READY #’ 
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Due to the following implications, it should be noted 
that early termination of bus cycles in which 82370 


internal registers are accessed is not recommended. 


1. Erroneous data may be read from or written into 
the addressed register. 


2. The 82370 must be allowed to recover either be- 


fore HLDA (Hold Acknowledge) is asserted or before | 


another bus cycle into an 82370 internal register is 
initiated. 


The recovery time, in clock periods, equals the re- 
maining wait states that were avoided plus 4. 


6.4 Register Set Overview 


Altogether, there are four 8-bit internal registers as- 

sociated with the Wait State Genertor. The port ad- 

dress map of these registers is shown below in Ta- 

ble 6-2. A detailed description of each follows. 
Table 6-2. Register Address Map 


72H Wait State Reg 0 (read/write) 
73H Wait State Reg 1 (read/write) 
74H Wait State Reg 2 (read/write) 


75H Ref. Wait State Reg (read/write) 


WAIT STATE REGISTER 0, 1, 2 


These three 8-bit read/write registers are functional- 
ly identical. They are used to store the pre-pro- 
grammed wait state count. One half of each register 
contains the wait state count for |/O accesses while 
the other half contains the count for memory ac- 
cesses. The total number of wait states generated 
will depend on the type of bus cycle. For a non-pipe- 
lined cycle, the actual number of wait states request- 
ed is equal to the wait state count plus 1. For a 
pipelined cycle, the number of wait states will be 
equal to the wait state count in the selected register. 
Therefore, the Wait State Generator is capable of 
generating 1 to 16 wait states in non-pipelined 
mode, and 0 to 15 wait states in pipelined mode. 


Note that the minimum wait state count in each reg- 
ister is 0. This is equivalent to 0 wait states for a 
pipelined cycle and 1 wait state for a non-pipelined 
cycle. 


REFRESH WAIT STATE REGISTER 
Similar to the Wait State Registers discussed above, 


this 4-bit register is used to store the number of wait 
states to be generated during a DRAM refresh cycle. 
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Note that the Refresh Wait State Register is not se- 
lected by the WSC inputs. It will automatically be 
chosen whenever a DRAM refresh cycle occurs. If 
the Wait State Generator is disabled during the re- 
fresh cycle (WSC (0-1) = 11), READYO# will stay 
inactive and the Refresh Wait State Register is ig- 
nored. 


6.5 Programming 


Using the Wait State Generator is relatively straight- 
forward. No special programming sequence is re- 
quired. In order to ensure the expected number of 
wait states will be generated when a register is se- 
lected, the registers to, be used must be pro- 
grammed after power-up by writing the appropriate 
wait state count into each register. Note that upon 
hardware reset, all Wait State Registers are initial- 
ized with the value FFH, giving the maximum num- 
ber of wait states possible. Also, each register can 
be read to check the wait state count previously 
stored in the register. 


6.6 Register Bit Definition 


WAIT STATE REGISTER 0, 1, 2 


72H Wait State Register 0 (read/write) 
73H Wait State Register 1 (read/write) 
Wait State Register 2 (read/write) 


1/0 WAIT 
STATE COUNT 


MEMORY WAIT STATE COUNT 
290164-88 


REFRESH WAIT STATE REGISTER 


Port Address: 75H (Read/Write) 


ee Se 


REFRESH WAIT 
STATE COUNT 


MUST BE ZERO 


290164-89 
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6.7 Application Issues 


6.7.1 EXTERNAL ‘READY’ CONTROL LOGIC 


As mentioned in section 6.3.3, wait state cycles gen- 
erated by the 82370 can be terminated early or ex- 
tended longer by means of additional external logic 
(see Figure 6-5). In order to ensure that the 
READY # input timing requirement of the 80376 and 
the 82370 is satisfied, special care must be taken 
when designing this external control logic. This sec- 
tion addresses the design requirements. 


A simplified block diagram of the external logic along 
with the READY # timing diagram is shown in Figure 
6-8. The purpose is to determine the maximum delay 


EXT. READY# 


80376=- 16 


intel. — 


time allowed in the external control logic in order to 
satisfy the READY # setup time. 


First, it will be assumed that the 80376 is running at 
16 MHz (i.e. CLK2 is 32 MHz). Therefore, one bus 
state (two CLK2 periods) will be equivalent to 
62.5 ns. According to the AC specifications of the 
82370, the maximum delay time for valid READYO # 
signal is 31 ns after the rising edge of CLK2 in the 
beginning of T2 (for non-pipelined cycle) or T2P (for 
pipelined cycle). Also, the minimum READY # setup 
time of the 80376 and the 82370 should be 19 ns 
before the rising edge of CLK2 at the beginning of 
the next bus state. This limits the total delay time for 
the external READY # control logic to be 12.5 ns 
(62.5—31-19) in order to meet the READY # setup 
timing requirement. 


EXT. NOT READY 


Se a 


READYO# 


READY# 


PHI1 + PH12 = 62.5 ns 
Maximum READYO# Valid Delay = 35 ns 
READY # Setup Time = 20 ns 


0OW> 


C 
_ SEORR TORO 
| 
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Maximum Ready Control Logic Delay = A-B-C = 7.5ns 


Figure 6-8. ‘READY’ Timing Consideration 
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7.0 DRAM REFRESH CONTROLLER 


7.1 Functional Description 


The 82370 DRAM Refresh Controller consists of a 
24-bit Refresh Address Counter and Refresh Re- 
quest logic for DRAM refresh operations (see Figure 
7-1). TIMER 1 can be used as a trigger signal to the 
DRAM Refresh Request logic. The Refresh Bus Size 
can be programmed to be 8- or 16-bit wide. Depend- 
ing on the Refresh Bus Size, the Refresh Address 
Counter will be incremented with the appropriate val- 
ue after every refresh cycle. The internal logic of the 
82370 will give the Refresh operation the highest 
priority in the bus control arbitration process. Bus 
control is not released and re-requested if the 82370 
is already a bus master. 


7.2 Interface Signals 


7.2.1 TOUT1/REF # 


The dual function output pin of TIMER 1 
(TOUT1/REF#) can be programmed to generate 
DRAM Refresh signal. If this feature is enabled, the 
rising edge of TIMER 1 output (TOUT1 #) will trigger 
the DRAM Refresh Request logic. After some delay 
for gaining access of the bus, the 82370 DRAM Con- 
troller will generate a DRAM Refresh signal by driv- 
ing REF # output LOW. This signal is cleared after 
the refresh cycle has taken place, or by a hardware 
reset. 


TOUT1 


82370 


lf the DRAM Refresh feature is disabled, the 
TOUT1/REF # output pin is simply the TIMER 1 out- 
put. Detailed information of how TIMER 1 operates 
is discussed in section 6—Programmable Interval 
Timer, and will not be repeated here. 


7.3 Bus Function 


7.3.1 ARBITRATION 


In order to ensure data integrity of the DRAMs, the 
82370 gives the DRAM Refresh signal the highest 
priority in the arbitration logic. It allows DRAM Re- 
fresh to interrupt DMA in progress in order to per- 
form the DRAM Refresh cycle. The DMA service will 
be resumed after the refresh is done. 


In case of a DRAM Refresh during a DMA process, 
the cascaded device will be requested to get off the 
bus. This is done by de-asserting the EDACK signal. 
Once DREQn goes inactive, the 82370 will perform 
the refresh operation. Note that the DMA controller 
does not completely relinquish the system bus dur- 
ing refresh. The Refresh Generator simply “steals” 
a bus cycle between DMA accesses. 


Figure 7-2 shows the timing diagram of a Refresh 
Cycle. Upon expiration of TIMER 1, the 82370 will try 
to take control of the system bus by asserting 
HOLD. As soon as the 82370 see HLDA go active, 
the DRAM Refresh Cycle will be carried out by acti- 
vating the REF # signal as well.as the address and 
control signals on the system bus (Note that REF # 
will not be active until two CLK periods HLDA is as- 
serted). The address bus will contain the 24-bit ad- 
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Figure 7-1. DRAM Refresh Controller 
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dress currently in the Refresh Address Counter. The 
control signals are driven the same way as in a 
Memory Read cycle. This “read” operation is com- 
plete when the READY# signal is driven LOW. 
Then, the 82370 will relinquish the bus by de-assert- 
ing HOLD. Typically, a Refresh Cycle without wait 
states will take five bus states to execute. If ‘‘n’” wait 
states are added, the Refresh Cycle will last for five 
plus “n’ bus states. 


How often the Refresh Generator will initiate a re- 
fresh cycle depends on the frequency of CLKIN as 
will as TIMER 1’s programmed mode of operation. 
For this specific application, TIMER 1 should be pro- 
grammed to operate in Mode 2 to generate a con- 
stant clock rate. See section 6—Programmable In- 
terval Timer for more information on programming 
the timer. One DRAM Refresh Cycle will be generat- 
ed each time TIMER 1 expires (when TOUT1 chang- 
es from LOW to HIGH). 


The Wait State Generator can be used to insert wait 
states during a refresh cycle. The 82370 will auto- 
matically insert the desired number of wait states as 
programmed in the Refresh Wait State Register (see 
Wait State Generator). 
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HOLD 

HLDA 
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BLE¥,D/C# XXXXXXXXXXXXXXKM 
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7.4.1 WORD SIZE AND REFRESH ADDRESS 
COUNTER 


The 82370 supports 8- and 16-bit refresh cycle. The 
bus width during a refresh cycle is programmable 
(see Programming). The bus size can be pro- 
grammed via the Refresh Control Register (see Reg- 
ister Overview). If the DRAM bus size is 8- or 16-bits, 
the Refresh Address Counter will be incremented by 
1 or 2, respectively. 


7.4 Modes of Operation 


The Refresh Address Counter is cleared by a hard- 
ware reset. 


7.5 Register Set Overview 


The Refresh Generator has two internal registers to 
control its operation. They are the Refresh Control 
Register and the Refresh Wait State Register. Their 
port address map is shown in Table 7-1. 
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Figure 7-2. 82370 Refresh Cycle 
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Table 7-1. Register Address Map 


Port Address Description 
1CH Refresh Control Reg. (read/write) 
75H Ref. Wait State Reg. (read/write) 
The Refresh Wait State Register is not part of the 
Refresh Generator. It is only used to program the 
number of wait states to be inserted during a refresh 
cycle. This register is discussed in detailed in section 


7 (Wait State Generator) and will not be repeated 
here. 


REFRESH CONTROL REGISTER 


This 2-bit register serves two functions. First, it is 
used to enable/disable the DRAM Refresh function 
output. If disabled, the output of TIMER 1 is simply 
used as a general purpose timer. The second func- 
tion of this register is to program the DRAM bus size 
for the refresh operation. The programmed bus size 
also determines how the Refresh Address Counter 
will be incremented after each refresh operation. 


7.6 Programming 


Upon hardware reset, the DRAM Refresh function is 
disabled (the Refresh Control Register is cleared). 
The following programming steps are needed before 
the Refresh Generator can be used. Since the rate 
of refresh cycles depends on how TIMER 1 is pro- 
grammed, this timer must be initialized with the de- 
sired mode of operation as well as the correct 
refresh interval (see Programming Interval Timer). 
Whether or not wait states are to be generated dur- 
ing a refresh cycle, the Refresh Wait State Register 
must also be programmed with the appropriate val- 
ue. Then, the DRAM Refresh feature must be en- 
abled and the DRAM bus width should be defined. 
These can be done in one step by writing the appro- 
priate control word into the Refresh Control Register 


82370 


(see Register Bit Definition). After these steps are 
done, the refresh operation will automatically be in- 
voked by the Refresh Generator upon expiration of 
Timer 1. 


In addition to the above programming steps, it 
should be noted that after reset, although the 
TOUT1/REF# becomes the Time 1 output, the 
state of this pin in undefined. This is because the 
Timer module has not been initialized yet. Therefore, 
if this output is used as a DRAM Refresh signal, this 
pin should be disqualified by external logic until the 
Refresh function is enabled. One simple solution is 
to logically AND this output with HLDA, since HLDA 
should not be active after reset. 


7.7 Register Bit Definition 
REFRESH CONTROL REGISTER 


Port Address: 1CH (Read/Write) 


8.0 RELOCATION REGISTER, 
ADDRESS DECODE, AND 
CHIP-SELECT (CHPSEL #) 


8.1 Relocation Register 


All the integrated peripheral devices in the 82370 
are controlled by a set of internal registers. These 
registers span a total of 256 consecutive address 
locations (although not all the 256 locations are 
used). The 82370 provides a Relocation Register 
which allows the user to map this set of internal reg- 
isters into either the memory or I/O address space. 
The function of the Relocation Register is to define 
the base address of the internal register set of the 
82370 as well as if the registers are to be memory- 
or |/O-mapped. The format of the Relocation Regis- 
ter is depicted in Figure 8-1. 


Beery 
iLemeiigt Karte 


MUST BE ZERO 


00 REF. DISABLED 
01 INTEL RESERVED 
10 BUS SIZE = 16 


11 BUS SIZE =8 
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FOR 1/0 MAPPED: A15=A9 
FOR MEMORY MAPPED: A23-A16 


Port Address: 7FH (Read/Write) 


D1 


D7 D6 DS D4 D3 bo 
A23/]A22/]A21/1A20/]A19/]A18/] A17/|M/lO# 
A15 | A141A13/]A12/]A11/] A10 | AQ 


0-1/0 MAPPED 
1 — MEMORY 
MAPPED 


Figure 8-1. Relocation Register 


Note that the Relocation Register is part of the inter- 
nal register set of the 82370. It has a port address of 
7FH. Therefore, any time the content of the Reloca- 
tion Register is changed, the physical location of this 
register will also be moved. Upon reset of the 82370, 
the content of the Relocation Register will be 
cleared. This implies that the 82370 will respond to 
its |/O addresses in the range of OO00H to OOFFH. 


8.1.1 1/O-MAPPED 82370 


As shown in the figure, Bit 0 of the Relocation Regis- 
ter determines whether the 82370 registers are to be 
memory-mapped or I/O mapped. When Bit 0 is set 
to ‘0’, the 82370 will respond to |/O Addresses. Ad- 
dress signals BHE#, BLE#, A1-A7 will be used to 
select one of the internal registers to be accessed. 
Bit 1 to Bit 7 of the Relocation Register will corre- 
spond to AQ to A15 of the Address bus, respectively. 
Together with A8 implied to be ‘0’, A15 to A8 will be 
fully decoded by the 82370. The following shows 
how the 82370 is mapped into the |/O address 
space. 


Example 
Relocation Register = 11001110 (OCEH) 


82370 will respond to I/O address range from 
OCEOOH to OCEFFH. 


Therefore, this |1/O mapping mechanism allows the 
82370 internal registers to be located on any even, 
contiguous, 256 byte boundary of the system I/O 
space. 

8.1.2 MEMORY-MAPPED 82370 


When Bit 0 of the Relocation Register is set to ‘1’, 
the 82370 will respond to memory addresses. Again, 
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Address signals BHE#, BLE#, A1-A7 will be used 
to select one of the internal registers to be ac- 
cessed. Bit 1 to Bit 7 of the Relocation Register will 
correspond to A17-A23, respectively. A16 is as- 
sumed to be ‘0’, and A8-A15 are ignored. Consider 
the following example. 


Example 


Relocation Register = 10100111 (0A7H) 

The 82370 will respond to memory addresses in 
the range of AGXX00H to A60XXFFH (where ‘xX’ is 
don’t care). 


This scheme implies that the internal registers can 
be located in any even, contiguous, 2**16 byte page 
of the memory space. 


8.2 Address Decoding 


As mentioned previously, the 82370 internal regis- 
ters do not occupy the entire contiguous 256 ad- 
dress locations. Some of the locations are ‘unoccu- 
pied’. The 82370 always decodes the lower 8 ad- 
dress signals (BHE#, BLE#, A1—A7) to determine if 
any one of its registers is being accessed. If the ad- 
dress does not correspond to any of its registers, the 
82370 will not respond. This allows external devices 
to be located within the ‘holes’ in the 82370 address 
space. Note that there are several unused address- 
es reserved for future Intel peripheral devices. 


8.3 Chip-Select (CHPSEL #) 


The Chip-Select signal (CHPSEL#) will go active 
when the 82370 is addressed in a Slave bus 


82370 
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Figure 8-2. CHPSEL # Timing 


cycle (either read or write), or in an interrupt ac- 
knowledge cycle in which the 82370 will drive the 
Data Bus. For a given bus cycle, CHPSEL# be- 
comes active and valid in the first T2 (in a non-pipe- 
lined cycle) or in T1P (in a pipelined cycle). It will 
stay valid until the cycle is terminated by READY # 
driven active. As CHPSEL# becomes valid well be- 
fore the 82370 drives the Data Bus, it can be used to 
control the transceivers that connect the local CPU 
bus to the system bus. The timing diagram of 
CHPSEL # is shown in Figure 8-2. 


9.0 CPU RESET AND SHUTDOWN 
DETECT 


The 82370 will activate the CPURST signal to reset 
the host processor when one of the following condi- 
tions occurs: 


— 82370 RESET is active; 


— 82370 detects a 80376 Shutdown cycle (this fea- 
ture can be disabled); 


— CPURST software command is issued to 80376. 


Whenever the CPURST signal is activated, the 
82370 will reset its own internal Slave-Bus state ma- 
chine. 


9.1 Hardware Reset 


Following a hardware reset, the 82370 will assert its 
CPURST output to reset the host processor. This, 
output will stay active for as long as the RESET input 
is active. During a hardware reset, the 82370 internal 
registers will be initialized as defined in the corre- 
sponding functional descriptions. 


9.2 Software Reset 


CPURST can be generated by writing the following 
bit pattern into 82370 register location 64H. 


D7 4%, DO 
1111XXX0 


The Write operation into this port is considered as 
an 82370 access and the internal Wait State Gener- 
ator will automatically determine the required num- 
ber of wait states. The CPURST will be active follow- 
ing the completion of the Write cycle to this port. 
This signal will last for 80 CLK2 periods. The 82370 
should not be accessed until the CPURST is deacti- 
vated. 


This internal port is Write-Only and the 82370 will 
not respond to a Read operation to this location. 
Also, during a software reset command, the 82370 
will reset its Slave-Bus state machine. However, its 
internal registers remain unchanged. This allows the 
operating system to distinguish a ‘warm’ reset by 
reading any 82370 internal register previously pro- 
grammed for a non-default value. The Diagnostic 
registers can be used for this purpose (see Internal 
Control and Diagnostic Ports). 


9.3 Shutdown Detect 


The 82370 is constantly monitoring the Bus Cycle 
Definition signals (M/IO#, D/C#, W/R#) and is 
able to detect when the 80376 is in a Shutdown bus 
cycle. Upon detection of a processor shutdown, the 
82370 will activate the CPURST output for 62 CLK2 
periods to reset the host processor. This signal is 
generated after the Shutdown cycle is terminated by 
the READY # signal. 
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_ Although the 82370 Wait State Generator will not 
automatically respond to a Shutdown (or Halt) cycle, 
the Wait State Control inputs (WSCO, WSC1) can be 
used to determine the number of wait states in the 
same manner as other non-82370 bus cycles. 


This Shutdown Detect feature can be enabled or dis- 
abled by writing a control bit in the Internal Control 
Port at address 61H (see Internal Control and Diag- 
nostic Ports). This feature is disabled upon a hard- 
ware reset of the 82370. As in the case of Software 
Reset, the 82370 will reset its Slave-Bus state ma- 
chine but will not change any of its internal register 
contents. 


10.0 INTERNAL CONTROL AND 
DIAGNOSTIC PORTS 


10.1 Internal Control Port 


The format of the Internal Control Port of the 82370 
is shown in Figure 10-1. This Control Port is used to 
enable/disable the Processor Shutdown Detect 
mechanism as well as controlling the Gate inputs of 
the Timer 2 and 3. Note that this is a Write-Only port. 
Therefore, the 82370 will not respond to a read op- 
eration to this port. Upon hardware reset, this port 
will be cleared; i.e., the Shutdown Detect feature 
and the Gate inputs of Timer 2 and 3 are disabled. 


Port Address: 61H = (Write only) 


10.2 Diagnostic Ports 


Two 8-bit read/write Diagnostic Ports are provided 
in the 82370. These are two storage registers and 
have no effect on the operation of the 82370. They 
can be used to store checkpoint data or error codes 
in the power-on sequence and in the diagnostic 
service routines. As mentioned in the CPU RESET 
AND SHUTDOWN DETECT section, these Diagnos- 
tic Ports can be used to distinguish between ‘cold’ 
and ‘warm’ reset. Upon hardware reset, both Diag- 
nostic Ports are cleared. The address map of these 
Diagnostic Ports is shown in Figure 10-2. 


a ee 


Diagnostic Port1 (Read/Write) 
88H 


Diagnostic Port2 (Read/Write) 
Figure 10-2. Address Map of Diagnostic Ports 


11.0 INTEL RESERVED I/O PORTS 


There are nineteen I/O ports in the 82370 address 
space which are reserved for Intel future peripheral 
device use only. Their address locations are: 10H, 
12H, 14H, 16H, 2AH, 3DH, 3EH, 45H, 46H, 76H, 
77H, 7DH, 7EH, CCH, CDH, DOH, D2H, D4H, and 
D6H. These addresses should not be used in the 
system since the 82370 will respond to read/write 
operations to these locations and bus contention 
may occur if any peripheral is assigned to the same 
address location. 


DS D4 D3 D2 ODI 


SHUTDOWN 


COUNTER 3 COUNTER 2 
ENABLE / GATE GATE 
DISABLE INPUT INPUT 


SHUTDOWN COUNTER 3 
DETECT GATE 
O= DISABLE O= DISABLE 
1 — ENABLE 1— ENABLE 


COUNTER 2 
NOT USED GATE 
O=- DISABLE 


1=- ENABLE 
290164-96 


Figure 10-1. Internal Control Port 
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12.0 PACKAGE THERMAL 
SPECIFICATIONS 


The intel 82370 Integrated System Peripheral is 
specified for operation when case temperature is 
within the range of O°C to 96°C for the ceramic 
132-pin PGA package, and 94°C for the 100-pin 
plastic package. The case temperature may be mea- 
sured in any environment, to determine whether the 
82370 is within specified operating range. The case 
temperature should be measured at the center of 
the top surface opposite the pins. 


The ambient temperature is guaranteed as long as 
T, is not violated. The ambient temperature can be 


82370 


é 


calculated from the 6j, and 4jq from the following 
equations: 


Ty = Te + P*6ic 
Ta = Tj _ P* Oia 
To = Ta + P*[6ia snd Bic] 


Values for 6) and 6), are given in Table 12.1 for the 
100-lead fine pitch. 8jq is given at various airflows. 
Table 12.2 shows the maximum Tg, allowable (with- 
out exceeding T,) at various airflows. Note that Tg 
can be improved further by attaching ‘fins’ or a 
“heat sink” to the package. P is calculated using the 
maximum fot loc. 


Table 12.1 82370 Package Thermal Characteristics 
Thermal Resistances (°C/Watt) 9j¢ and 9ja 


PE 


3 3 


6ja Versus Airflow-ft3/min (m3/sec) 


raot Fine Pach] 7 [oa] 27 | 24 | 2 
raaceca [2 [ail 17 | 14 


Table 12.2 82370 Maximum Allowable Ambient 
Temperature at Various Airflows 


ean 


reo Fine ich] 7 [ea] 74 | 7 


raetrca [2 [ral eo | 8 


100L PQFP Pkg: 

To = Ta + P* (Gia = 9c) 
Te = 63 + 1.21(33 — 7) 
Te = 63 + 1.21(26) 

To = 63 + 31.46 

Te = 94°C 


132L PGA Pkg: 

Te = Ta + P*(8jq — Gic) 
To = 74 +1.21(21 — 2) 
To = 74 + 1.21(19) 

T, = 74 + 22.99 

T; = 96°C 
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13.0 ELECTRICAL SPECIFICATIONS | 


82370 D.C. Specifications Functional Operating Range: 
Voc = 5.0V +10%; Tcase = 0°C to 96°C for 132-pin PGA, 0°C to 94°C for 100-pin plastic 


|_Parameter Description | Min 
[InputLow Voltage | -0.8 

[InputHigh Voltage | 2.0 | oo $0.9 

Muc | CLK2InputLowVoltage | 0.3 | 08 | 


V 
V 
V 
V 


ae, es (een v 
Blige sane v 
V 
Output Low Voltage 
lol. = 4mA: . 0.45 V 
Ai-23, Do-15, BHE#, BLE# 
lo. = 5mA: 0.45 V 
All Others 


IL 
IH 
OL 
Output High Voltage hot ai 
lu 
LO 
CC 
| 


Ree 
Azg~Ar,Dis-Do, BHE#,BLE# | 24 | 
ou = =02mA | Ags~Ar, Dig Dp SHE, BLE® | Vagos] 
= ao [Alte a 
[lon = —0.18mA | allothers | Voc S| 


V 

Input Leakage Current pA 
All Inputs Except: 

IRQ11#-IRQ23# 

EOP #, TOUT2/IRQ3# 

DREQ4/IRQ9 # 

loi Input Leakage Current 

Inputs: 

IRQ11#-IRQ23# 

EOP #, TOUT2/IRQ3 

DREQ4/IRQ9 


[ua | Output sakage Goren | | 28 | wa [0<Vny<Voo 
leo | Sunply Curent Cue = semi) | | 220 | ma | (Notes) 
: ae aun 

oe! 


0 < Vin < Voc 
(Note 3) 


| 
| 
C 


NOTES: 

1. Minimum value is not 100% tested. 

2. f¢ = 1 MHz; sampled only. 

_ 3. These pins have weak internal pullups. They sould not be left floating. 

4. Icc is specified with inputs driven to CMOS levels, and outputs driving CMOS loads. Ico may be higher if inputs are driven 
to TTL levels, or if outputs are driving TTL loads. 

5. Tested at the minimum operating frequency of the part. 
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MIN MAX 


VALID \\ \W VALID 
OUTPUT n | A\\ \ OUTPUT n#1 


Vv VALID 
INPUT 


290164-97 


LEGEND: : 
A—Maximum output delay specification 
B—Minimum output delay specification 
C—Minimum input setup specification 
D—Minimum input hold specification 


Figure 13-1. Drive Levels and Measurement Points for A.C. Specification 


82370 A.C. Specifications These A.C. timings are tested at 1.5V thresholds, except as noted. » 
Functional Operating Range: Vcc = 5.0V +10%; Tcase = 0°C to 96°C for 132-pin PGA, 0°C to 94°C for 
100-pin plastic 


Parameter Description 
Operating Frequency 1/(t1a x 2) 


CLK2 Period 


CLK2 High Time 

CLK2 High Time At Voc — 0.8V 
CLK2 Low Time At 2.0V 

CLK2 Low Time At 0.8V 

CLK2 Fall Time Voc — 0.8V to 0.8V 


CLK2 Rise Time 0.8V to Vcc — 0.8V 


A1-A23, BHE#, BLE# CL = 120 pF 
EDACKO-EDACk2 Valid Delay 

A1-—A23, BHE#, BLE# (Note 1) 
EDACKO-—EDACKS3 Float Delay 


A1-A23, BHE#, BLE# Setup Time 
A1-A23, BHE #, BLE# Hold Time 

W/R#, M/IO#, D/C# Valid Delay 4 
W/R#, M/IO#, D/C# Float Delay 4 
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82370 A.C. Specifications These A.C. timings are tested at 1.5V thresholds, except as noted. 
Functional Operating Range: Voc = 5.0V +10%; Tcase = 0°C to 96°C for 132-pin PGA, 0°C to 94°C for 
100-pin plastic (Continued) 


CL = 50 pF 
(Note 1) 

CL = 120 pF 
(Note 1) 

CL = 120 pF 
(Note 1) 


t16 ADS # Setup Time 21 
t17 ADS # Hold Time 4 
Slave Mode DO-D15 Write Setup 
Slave Mode DO-D15 Write Hold 
t24 
t25 


Master Mode DO-—D15 Write Valid 4 40 
Master Mode DO-—D15 Write Float 4 35 
Master Mode DO-D15 Read Setup 

Master Mode DO-—D15 Read Hold 


4 
WSCO-WSC1 Setup Time 6 
WSCO-WSC1 Hold Time 21 

t30 RESET Setup Time 13 

t31 RESET Hold Time 


> # 
“I OD 
DD 
m mm. 
> > 
she. 
<< 
4 4 
In 
o ® 
as 
3s 
os 

@O 

© 


CL = 25pF 


CL = 50 pF 
C. = 100 pF 


CL = 100 pF 
(Note 1) 


READYO¥ Valid Delay 

CPURST Valid Delay (Falling Edge Only) | 2 | 

HOLD Valid Delay i 
2 


t35 HLDA Setup Time 

t36 HLDA Hold Time 

t37a EOP # Setup (Synchronous) 21 
t38a EOP # Hold (Synchronous) 

t37b EOP # Setup (Asynchronous) 11 
t38b EOP # Hold (Asynchronous) 11 
EOP# Valid Delay (Falling Edge Only) 

EOP# Float Delay 

t41a DREQ Setup (Synchronous) 21 
t42a DREQ Hold (Synchronous) 4 
t41b DREQ Setup (Asynchronous) se 
t42b DREQ Hold (Asynchronous) ¥ 
143 INT Valid Delay from IRQn Becay 


t44 
t45 


-& ® 
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82370 A.C. Specifications These A.C. timings are tested at 1.5V thresholds, except as noted. 
Functional Operating Range: Vcc = 5.0V +10%; Tcasge = 0°C to 96°C for 132-pin PGA, 0°C to 94°C for 
100-pin plastic (Continued) 


Se ae a a 


CLKIN Frequency 

CLKIN High Time 2.0V 

CLKIN Low Time 0.8V 

CLKIN Rise Time 0.8V to 3.7V 


CLKIN Fall Time 


TOUT1#/REF# Valid Delay 
from CLK2 (Refresh) CL = 120 pF 
from CLKIN (Timer) C. = 120 pF 


TOUT2# Valid Delay CL = 120 pf 
(from CLKIN, Falling Edge Only) 
TOUT2# Float Delay | (Note 1) 


TOUT3# Valid Delay C. = 120 pF 
(from CLKIN) 


CHPSEL # Valid Delay Sea | oe. | We ok OL ROpr 
NOTE: 


1. Float condition occurs when the maximum output current becomes less than I_o in magnitude. Float delay is not tested. 
For testing purposes, the float condition occurs when the dynamic output driven voltage changes with current loads. 


3.7V to 0.8V 


82370 


OUTPUT 


CL 


290164-98 


C, indicates all parasitic capacitances. 


290164-99 


Figure 13-2. A.C. Test Load Figure 13-3 
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INPUT SET= UP AND HOLD TIMING (CONT.) 


CLK2 


NA# 


WSC(0 = 1) 


CLK2 


= 
© 


A(1=A23), BHE#, BLE¥ 


W/R#, M/10#, D/CH 


| 
La) 
N 


READY# 


ADS# 


D(O0 = 15) (DMA Read) 


D(O0 = 15) (CPU Write) 


EOP# 


a 
= 
= 
= 
ua 
ue 
a 
aa 


JUS Us Use 


DREQ(0 = 7) 


290164—A0 


Figure 13-4. Input Setup and Hold Timing 
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Hold | Setup 


CLK2 


T33 MIN. 
CPURST iad 


| T33 MAX. 
290164-A1 


Figure 13-5. Reset Timing 


CLK2 


A1—-23, BHE#, BLE¥ 


Al - 23, BHE#, BLE# 
EDACK(0 = 2) 


Al = 23, BHE#, BLE# os 


me iy 


a 


WY) 


CHPSEL# 


TS6Max 
290164-—A2 


Figure 13-6. Address Output Delays 


d 1 -707 


82370 


D(0=15) (CPU READ) 


D(0-15) (DMA WRITE) 


D(0-15) (DMA WRITE) 


'D(0=15) (DMA WRITE) 


CLK2 


W/R#, M/l0#,D/C# 


W/R#, M/10#,D/C# 


W/R#, M/10#,D/C# 


READYO# 
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Tx 


Tx T 
PHI 2 | PHI 1 PHI 2 PHI 1 | 


ens ae am 


oo) a SRS, roads: 
os an Prarie. er ae 
— 


T18Max 


T22Max 
aan 


XXX) 


wa board a 
LA/ 
<a XXX 


T23Max 


Figure 13-7. Data Bus Output Delays | 


i) 


mF 


i 


=S. 


T10Max 


wala} 


S< 


T32Max 


= 

al 
es 
BS 


T39Max 


T40Max 


» 
a 
> 


TS 1Max 


Figure 13-8. Control Output Delays 


290164-A3 


290164-—A4 
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CLKIN 


TOUT1 


TOUT2# 


TOUT2# 


TOUT3# 


290164-A5 


Figure 13-9. Timer Output Delays 
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APPENDIX A 
PORTS LISTED BY ADDRESS 


Read/Write DMA Channel 0 Target Address, AO-A15 
Read/Write DMA Channel 0 Byte Count, BO-B15 
Read/Write DMA Channel 1 Target Address, AO-A15 
Read/Write DMA Channel 1 Byte Count, BO-B15 
Read/Write DMA Channel 2 Target Address, AO-A15 
Read/Write DMA Channel 2 Byte Count, BO-B15 
Read/Write DMA Channel 3 Target Address, AO-A15 
Read/Write DMA Channel 3 Byte Count, BO-B15 
Read/Write DMA Channel 0-3 Status/Command | Register 
Read/Write DMA Channel 0-3 Software Request Register 
Write DMA Channel 0-3 Set-Reset Mask Register 
Write DMA Channel 0-3 Mode Register | 

Write Clear Byte-Pointer FF 

Write DMA Master-Clear 

Write DMA Channel 0-3 Clear Mask Register 
Read/Write DMA Channel 0-3 Mask Register 

Intel Reserved 

Read/Write DMA Channel 0 Byte Count, B16-B23 
Intel Reserved 

Read/Write DMA Channel 1 Byte Count, B16-B23 
Intel Reserved 

Read/Write DMA Channel 2 Byte Count, B16-B23 
Intel Reserved 

Read/Write DMA Channel 3 Byte Count, B16-B23 
Write DMA Channel 0-3 Bus Size Register 
Read/Write DMA Channel 0-3 Chaining Register 
Write DMA Channel 0-3 Command Register II 

Write DMA Channel 0-3 Mode Register II 
Read/Write Refresh Control Register 

Reset Software Request Interrupt 

Write Bank B ICW1, OCW2 or OCW3 

Read Bank B Poll, Interrupt Request or In-Service 
Status Register | 

Write Bank B ICW2, ICW3, ICW4 or OCW1 

Read Bank B Interrupt Mask Register 

Read Bank B ICW2 

Read/Write IRQ8 Vector Register 

Read/Write IRQ9 Vector Register 

Reserved 
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Read/Write |IRQ11 Vector Register 
Read/Write |IRQ12 Vector Register 
Read/Write |RQ13 Vector Register 
Read/Write IRQ14 Vector Register 
Read/Write IRQ15 Vector Register 

Write Bank A ICW1, OCW2 or OCW3 
Read Bank A Poll, Interrupt Request or In-Service 
Status Register 

Write Bank A ICW2, ICW3, ICW4 or OCW1 
Read Bank A Interrupt Mask Register 
Read Bank A ICW2 

Read/Write IRQO Vector Register 
Read/Write IRQ1 Vector Register 
Read/Write IRQ1.5 Vector Register 
Read/Write |IRQ3 Vector Register 
Read/Write IRQ4 Vector Register 
Reserved 

Reserved 

Read/Write |RQ7 Vector Register 
Read/Write Counter 0 Register 
Read/Write Counter 1 Register 
Read/Write Counter 2 Register 

Write Control Word Register |—Counter 0, 1, 2 
Read/Write Counter 3 Register 

Reserved 

Reserved 

Write Word Register II—Counter 3 

Write Internal Control Port 

Write CPU Reset Register (Data—1111XXX0H) 
Read/Write Wait State Register 0 
Read/Write Wait State Register 1 
Read/Write Wait State Register 2 
Read/Write Refresh Wait State Register 
Reserved 

Reserved 


’ Reserved 


Reserved 

Read/Write Relocation Register 

Read/Write Internal Diagnostic Port 0 

Read/Write DMA Channel 2 Target Address, A16-A23 
Read/Write DMA Channel 3 Target Address, A16-A23 
Read/Write DMA Channel 1 Target Address, A16-A23 
Read/Write DMA Channel 0 Target Address, A16-A23 
Read/Write Internal Diagnostic Port 1 

Read/Write DMA Channel 6 Target Address, A16-—A23 
Read/Write DMA Channel 7 Target Address, A16-A23 
Read/Write DMA Channel 5 Target Address, A16-—A23 
Read/Write DMA Channel 4 Target Address, A16-A23 
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Port Address 


Read/Write DMA Channel 0 Requester Address, AO-A15 
Read/Write DMA Channel 0 Requester Address, A16—A23 
Read/Write DMA Channel 1 Requester Address, AO-A15 
Read/Write DMA Channel 1 Requester Address, A16—A23 
Read/Write DMA Channel 2 Requester Address, AO—A15 
Read/Write DMA Channel 2 Requester Address, A16—A23 
Read/Write DMA Channel 3 Requester Address, AO—A15 
Read/Write DMA Channel 3 Requester Address, A16—A23 
Read/Write DMA Channel 4 Requester Address, AO-A15 
Read/Write DMA Channel 4 Requester Address, A16-A23 
Read/Write DMA Channel 5 Requester Address, AO—A15 
Read/Write DMA Channel 5 Requester Address, A16-A23 
Read/Write DMA Channel 6 Requester Address, AO-A15 
Read/Write DMA Channel 6 Requester Address, A16-—A23 
Read/Write DMA Channel 7 Requester Address, AO—A15 
Read/Write DMA Channel 7 Requester Address, A16-—A23 
Write Bank C ICW1, OCW2 or OCW3 

Read Bank C Poll, Interrupt Request or In-Service 

Status Register 

Write Bank C ICW2, ICW3, ICW4 or OCW1 

Read Bank C Interrupt Mask Register 

Read Bank C ICW2 

Read/Write IRQ16 Vector Register 

Read/Write IRQ17 Vector Register 

Read/Write IRQ18 Vector Register 

Read/Write IRQ19 Vector Register 

Read/Write IRQ20 Vector Register 

Read/Write IRQ21 Vector Register 

Read/Write IRQ22 Vector Register 

Read/Write IRQ23 Vector Register 

Read/Write DMA Channel 4 Target Address, AO-A15 
Read/Write DMA Channel 4 Byte Count, BO—B15 
Read/Write DMA Channel 5 Target Address, AO-A15 
Read/Write DMA Channel 5 Byte Count, BO-B15 
Read/Write DMA Channel 6 Target Address, AO—A15 
Read/Write DMA Channel 6 Byte Count, BO-B15 
Read/Write DMA Channel 7 Target Address, AO-A15 
Read/Write DMA Channel 7 Byte Count, BO-B15 

Read DMA Channel 4-7 Status/Command | Register 
Read/Write DMA Channel 4-7 Software Request Register 
Write DMA Channel 4-7 Set-Reset Mask Register 
Write DMA Channel 4-7 Mode Register | 
Reserved 

Reserved 

Write DMA Channel 4-7 Clear Mask Register 
Read/Write DMA Channel 4-7 Mask Register 
Intel Reserved 

Read/Write DMA Channel 4 Byte Count, B16-—B23 
Intel Reserved 

Read/Write DMA Channel 5 Byte Count, B16-—B23 
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Intel Reserved 
Read/Write DMA Channel 6 Byte Count, B16-B23 
Intel Reserved : 


Read/Write DMA Channel 7 Byte Count, B16-B23 
Write DMA Channel 4-7 Bus Size Register 
Read/Write DMA Channel 4-7 Chaining Register 
Write DMA Channel 4-—7 Command Register II 
Write DMA Channel 4-7 Mode Register II 
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APPENDIX B 
PORTS LISTED BY FUNCTION 


Port Address Description 
(HEX) J 


DMA CONTROLLER : 7 


Write DMA Master-Clear 
Write DMA Clear Byte-Pointer FF 


Read/Write DMA Channel 0-3 Status/Command | Register 
Read/Write DMA Channel 4-7 Status/Command | Register 
Write DMA Channel 0-3 Command Register II 
Write DMA Channel 4-7 Command Register II 


Write DMA Channel 0-3 Mode Register | 
Write DMA Channel 4-7 Mode Register | 
Write DMA Channel 0-3 Mode Register II 
Write DMA Channel 4-7 Mode Register II 


Read/Write DMA Channel 0-3 Software Request Register 
Read/Write DMA Channel 4-7 Software Request Register 
Reset Software Request Interrupt 


Write DMA Channel 0-3 Clear Mask Register 
Write DMA Channel 4-7 Clear Mask Register 
Read/Write DMA Channel 0-3 Mask Register 
Read/Write DMA Channel 4-7 Mask Register 
Write DMA Channel 0-3 Set-Reset Mask Register 
Write DMA Channel 4-7 Set-Reset Mask Register 


Write DMA Channel 0-3 Bus Size Register 
Write DMA Channel 4-7 Bus Size Register 


Read/Write DMA Channel 0-3 Chaining Register. 
Read/Write DMA Channel 4-7 Chaining Register 


Read/Write DMA Channel 0 Target Address, AO-A15 
Read/Write DMA Channel 0 Target Address, A16-A23 
Read/Write DMA Channel 0 Byte Count, BO-B15 
Read/Write DMA Channel 0 Byte Count, B16-—B23 
Read/Write DMA Channel 0 Requester Address, AO-A15 
Read/Write DMA Channel 0 Requester Address, A16—A23 
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Port Address 
(HEX) | Description 


DMA CONTROLLER (Continued) 


Read/Write DMA Channel 1 Target Address, AO-A15 
Read/Write DMA Channel 1 Target Address, A16-—A23 
Read/Write DMA Channel 1 Byte Count, BO-B15 
Read/Write DMA Channel 1 Byte Count, B16-B23 
Read/Write DMA Channel 1 Requester Address, AO-A15 
Read/Write DMA Channel 1 Requester Address, A16—A23 


Read/Write DMA Channel 2 Target Address, AO-A15 
Read/Write DMA Channel 2 Target Address, A16—A23 
Read/Write DMA Channel 2 Byte Count, BO-B15 
Read/Write DMA Channel 2 Byte Count, B16-B23 
Read/Write DMA Channel 2 Requester Address, AO-A15 
Read/Write DMA Channel 2 Requester Address, A16-A23 


Read/Write DMA Channel 3 Target Address, AO-A15 
Read/Write DMA Channel 3 Target Address, A16-A23 
Read/Write DMA Channel 3 Byte Count, BO-B15 
Read/Write DMA Channel 3 Byte Count, B16-B23 
Read/Write DMA Channel 3 Requester Address, AO-A15 
Read/Write DMA Channel 3 Requester Address, A16—A23 


Read/Write DMA Channel 4 Target Address, AO-A15 
Read/Write DMA Channel 4 Target Address, A16-A23 
Read/Write DMA Channel 4 Byte Count, BO—-B15 
Read/Write DMA Channel 4 Byte Count, B16-—B23 
Read/Write DMA Channel 4 Requester Address, AO—A15 
Read/Write DMA Channel 4 Requester Address, A16—A23 


Read/Write DMA Channel 5 Target Address, AO-A15 
Read/Write DMA Channel 5 Target Address, A16-A23 
Read/Write DMA Channel 5 Byte Count, BO-B15 
Read/Write DMA Channel 5 Byte Count, B16-B23 
Read/Write DMA Channel 5 Requester Address, AO-A15 
Read/Write DMA Channel 5 Requester Address, A16-—A23 


Read/Write DMA Channel 6 Target Address, AO-A15 
Read/Write DMA Channel 6 Target Address, A16-—A23 
Read/Write DMA Channel 6 Byte Count, BO-B15 
Read/Write DMA Channel 6 Byte Count, B16-B23 
Read/Write DMA Channel 6 Requester Address, AO-—A15 
Read/Write DMA Channel 6 Requester Address, A16-A23 


Read/Write DMA Channel 7 Target Address, AO-A15 
Read/Write DMA Channel 7 Target Address, A16-—A23 
Read/Write DMA Channel 7 Byte Count, BO-B15 
Read/Write DMA Channel 7 Byte Count, B16-B23 
Read/Write DMA Channel 7 Requester Address, AO-A15 
Read/Write DMA Channel 7 Requester Address, A16-—A23 
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Port Address Description 
(HEX) : 


INTERRUPT CONTROLLER 
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Write Bank B ICW1, OCW2 or OCW3 
Read Bank B Poll, Interrupt Request or In-Service 
Status Register 

Write Bank B ICW2, ICW3, ICW4 or OCW1 
Read Bank B Interrupt Mask Register 
Read Bank B ICW2 

Read/Write IRQ8 Vector Register 
Read/Write IRQ9 Vector Register 
Reserved 

Read/Write IRQ11 Vector Register 
Read/Write IRQ12 Vector Register 
Read/Write |IRQ13 Vector Register 
Read/Write IRQ14 Vector Register 
Read/Write IRQ15 Vector Register 


Write Bank C ICW1, OCW2 or OCW3 
Read Bank C Poll, Interrupt Request or In-Service 
Status Register 

Write Bank C ICW2, ICW3, ICW4 or OCW1 
Read Bank C Interrupt Mask Register 
Read Bank C ICW2 

Read/Write IRQ16 Vector Register 
Read/Write IRQ17 Vector Register 
Read/Write |RQ18 Vector Register 
Read/Write IRQ19 Vector Register 
Read/Write IRQ20 Vector Register 
Read/Write IRQ21 Vector Register 
Read/Write IRQ22 Vector Register 
Read/Write |IRQ23 Vector Register 


Write Bank A ICW1, OCW2 or OCW3 
Read Bank A Poll, Interrupt Request or In-Service 
Status Register 

Write Bank A ICW2, ICW3, ICW4 or OCW1 
Read Bank A Interrupt Mask Register 
Read Bank A ICW2 

Read/Write IRQO Vector Register 
Read/Write IRQ1 Vector Register 
Read/Write IRQ1.5 Vector Register 
Read/Write |IRQ3 Vector Register 
Read/Write IRQ4 Vector Register 
Reserved 

Reserved 

Read/Write IRQ7 Vector Register 


B 
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(HEX) escription 


PROGRAMMABLE INTERVAL TIMER 


Read/Write Counter 0 Register 

Read/Write Counter 1 Register 

Read/Write Counter 2 Register 

Write Control Word Register |—Counter 0, 1, 2 
Read/Write Counter 3 Register 

Write Word Register II—Counter 3 


CPU RESET 


Write CPU Reset Register (Data—1111XXX0H) 


WAIT STATE GENERATOR 


Read/Write Wait State Register 0 
Read/Write Wait State Register 1 
Read/Write Wait State Register 2 
Read/Write Refresh Wait State Register 


DRAM REFRESH CONTROLLER 
Rs oe ae ene ee Read/Write Refresh Control Register 
INTERNAL CONTROL AND DIAGNOSTIC PORTS 


Write Internal Control Port 
Read/Write Internal Diagnostic Port 0 
Read/Write Internal Diagnostic Port 1 


RELOCATION REGISTER 
Pees, ae ee Read/Write Relocation Register 
INTEL RESERVED PORTS 


Reserved 
Reserved 
Reserved 
Reserved 
Reserved 
Reserved 
Reserved 
Reserved 
Reserved 
Reserved 
Reserved 
Reserved 
Reserved 
Reserved 
Reserved 
Reserved 
Reserved 
Reserved 
Reserved 
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APPENDIX C 
SYSTEM NOTES 


1. BHE# IN MASTER MODE. 
In Master Mode, BHE # will be activated during DMA to/from 8-bit devices residing at even locations when 
the remaining byte count is greater than 1. 


For example, if an 8-bit device is located at 00000000 Hex and the number of bytes to be transferred is > 1, 
the first address/BHE # combination will be 00000000/0. In some systems this will cause the bus controller 
to perform two 8-bit accesses, the first to OOO0000 Hex and the second to 00000001 Hex. However, the 
82370’s DMA will only read/write one byte. This may or may not cause a problem in the system depending 
on what is located at 00000001 Hex. 


Solution: 


There are two solutions if BH# active is unacceptable. Of the two, number 2 is the cleanest and most 
recommended. 


1. If there is an 8-bit device that uses DMA located at an even address, do not use that address + 1. The 
limitation of this solution is that the user must have complete control over what addresses will be used in 
the end system. 


2. Do not allow the Bus Controller to split cycles for the DMA. 


82370 TIMER UNIT NOTES 


The 82370 DMA Controller with Integrated System Peripherals is functionally inconsistent with the data sheet. 
This document explains the behavior of the 82370 Timer Unit and outlines subsequent limitations of the timer 
unit. This document also provides recommended workarounds. 


1.0 WRITE CYCLES TO THE 82370 TIMER UNIT: 


This errata applies only to SLAVE WRITE cycles to the 82370 timer unit. During these cycles, the data being 
written into the 82370 timer unit may be corrupted if asynchronous CLKIN is not inhibited during a certain 
“window” of the write cycle. 


1-718 : 


: ntel | ; | 82370 


1.1 Description 


Please refer to Figure C-2. 


During write cycles to the 82370 timer unit, the 82370 translates the 80376 interface signals such as #ADS, 
#W/R, #M/IO, and #D/C into several internal signals that control the operation of the internal sub-blocks 
(e.g. Timer Unit). 


The 82370 timer uint is controlled by such internal signals. These internal signals are generated and sampled 
with respect to two separate clock signals: CLK2 (the system clock) and CLKIN (the 82370 timer unit clock). 


Since the CLKIN and CLK2 clock signals are used internally to generate control signals for the interface to the 
timer unit, some timing parameters must be met in order for the interface logic to function properly. 


Those timing parameters are met by inhibiting the CLKIN signal for a specific window during Write Cycles to 
the 82370 Timer Unit. 


The CLKIN signal must be inhibited using external logic, as the GATE function of the 82370 timer unit is not . 
guaranteed to totally inhibit CLKIN. 


1.2 Consequences 


This CLKIN inhibits circuitry guarantees proper write cycles to the 82370 timer unit. 


Without this solution, write cycles to the 82370 timer unit could place corrupted data into the timer unit 
registers. This, in turn, could yield inaccurate results and improper timer operation. 


The proposed solution would involve a hardware modification for existing systems. 


1.3 Solution 


A timing waveform (Figure C-3) shows the specific window during which CLKIN must be inhibited. Please note 
that CLKIN must only be inhibited during the window shown in Figure C-3. This window is defined by two AC 
timing parameters: 


tg = 9ns 


th = 28 ns 


The proposed solution provides a certain amount of system “guardband” to make sure that this window is 
avoided. 


PAL equations for a suggested workaround are also included. Please refer to the comments in the PAL codes 
for stated assumptions of this particular workaround. A state diagram (Figure C-4) is provided to help clarify 
how this PAL is designed. 


Figure C-5 shows how this PAL would fit into a system workaround. In order to show the effect of this work- 
around on the CLKIN signal, Figure C-6 shows how CLKIN is inhibited. Note that you must still meet the CLKIN 
AC timing parameters (e.g. t47 (min), t4g (min)) in order for the timer unit to function properly. 


Please note that this workaround has not been tested. It is provided as a suggested solution. Actual solutions 
will vary from system to system. 
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1.4 Long Term Plans 


Intel has no plans to fix this behavior in the 82370 timer unit. 


module Timer_82370_Fix 
flag '-r2', ‘-q2', '=-fl', ‘=t4', '-wl,3,6,5,4,16,7,12,17,18,15,14' 
title '82370 Timer Unit CLKIN 
INHIBIT signal PAL Solution ' 
Timer_Unit_Fix device 'P16R6'; 


"This PAL inhibits the CLKIN signal (that comes from an oscillator) 
"during Slave Writes to the 82370 Timer unit. 
" 


"ASSUMPTION: This PAL assumes that an external system address 
decoder provides a signal to indicate that an 82370 
Timer Unit access is taking place. This input 
Signal is called TMR in this PAL. This PAL also 
assumes that this TMR signal occurs during a 
specific T-State. Please see Figure 2 of this 
document to see when this signal is expected to 

be active by this PAL. 


"NOTE: This PAL does not support pipelined 82570 SLAVE 

. cycles. 

" 

"(c) Intel Corporation 1989. This PAL is provided as a proposed 
"method of solving a certain 82370 Timer Unit problem. This PAL 
"has not been tested or validated. Please validate this solution 
"for your system and application. 

fn 


"Input Pins" 


CLK2 pin 1; "System Clock 

RESET pin 2; "Microprocessor RESET signal 

TMR pin 3; "Input from Address Decoder, indicating 
"an access to the timer unit of the 
"82370. 

'RDY pin 4; "End of Cycle indicator 

!ADS pin 5; "Address and control strobe 

CLK pin 6; *PHI2 clock 

W_R pin 7; "Write/Read Signal" 

nel pin 8; "No Connect 0* 

nce3 pin 9; "No Connect 1* 

GNDa pin 10; "Tied to ground, documentation only 

GNDb pin 11; "Output enable, documentation only 

CLKIN_IN pin 12; "Input-CLKIN directly from oscillator 

"Output Pins" 

Q_0 pin 18; "Internal signal only, fed back to 
"PAL logic" 

CLKIN_OUT pin 17; "CLKIN signal fed to 82370 Timer Unit 

INHIBIT pin 16; "CLKIN Inhibit signal 

SO pin 15; "Unused State Indicator Pin 

SL pin 14; "Unused State Indicator Pin 


"Declarations" 
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Valid_ADS = ADS & CLK ; "#ADS sampled in PHI1 of 80376 T-State 
Valid_RDY = RDY & CLK ; "#RDY sampled in PHI1l of 80376 T=-State 
Timer_Acc = TMR & CLK ; "Timer Unit Access, as provided by 


"external Address Decoder" 
State_Diagram [INHIBIT, Sl, SO] 


State 000: if RESET then 000 
else if Valid_ADS & W_R then 001 
else 000; 


State 001: if RESET then 000 
else if Timer_Acc then 010 
else if !Timer_Acc then 000 
else O01; 


State 010: if RESET then 000 
else if CLK then 110 
else 010; 


state 110: if RESET then 000 
else if CLK then 11l 
else 110; 


state lll: if RESET then 000 
else if CLK then Oll 
else 111; 7 


State Oll: if RESET then 000 
else if Valid_RDY then 000 
else O11; | 


state 100: if RESET then 000 
else 000; 


State 101: if RESET then 000 
else 000; 


EQUATIONS 


Q_0 := CLKIN_IN; "Latched incoming clock. This signal is used 
"internally to feed into the MUX-ing logic" 


CLKIN_OUT := (INHIBIT & CLKIN_OUT & !RESET) 
+ {INHIBIT & Q_O & !RESET) ; 


"Equation for CLKIN_OUT. This 
"feeds directly to the 823570 Timer Unit." 


END 
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82370 Timer Unit CLKIN 
INHIBIT signal PAL Solution 
Equations for Module Timer__82370__Fix 


Device Timer__Unit__Fix 
—Reduced Equations: 
INHIBIT := (ICLK & INHIBIT # CLK & SO # RESET # !S1); 


IS1 := (RESET 
# INHIBIT & !S1 
# CLK & !INHIBIT & !~ RDY & SO & S1 
# ICLK & !S1 
# 'S1 & !TMR 
# 'SO & !S1); 


ISO := (RESET 
# INHIBIT & !S1 
# CLK & !INHIBIT & !~RDY & S1 
#IINHIBIT & ISO & S1 
# ICLK & !SO 
# INHIBIT & ISO & S1 
# SO & ISI 
#1S1&IW_R 
# ~ADS & IS1); 


1Q__0 := (!CLKIN_IN); 
ICLKIN__OUT := (RESET # !CLKIN__OUT & INHIBIT # !INHIBIT & !Q__0); 
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82370 Timer Unit CLKIN 
INHIBIT signal PAL Solution 
Chip diagram for Module Timer__82370__Fix 


Device Timer__Unit__Fix 


P16R6 


1 
2 
3 
4 
) 
6 
7 
8 
9 
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end of module Timer__82370__Fix 
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other internal signals 
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Figure C-2. Translation of 80376 Signals to Internal 82370 Timer Unit Signals 
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ADS# 


W/R# 


M/l0# 


ADDR2=31 


\/ 


CLKIN XXXXXXXXAXKXARAXAKAAARARA | stapee veven AK 


290164-B1 


Figure C-3. 82370 Timer Unit Write Cycle 


(INHIBIT, S1, SO] 


RDY#.CLK 


(INHIBIT) 


290164-—B2 


Figure C-4. State Diagram for Inhibit Signal 
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NOTE: 


CLK2/CLK 
CIRCUIT 


CLK 


of TIMER@=PAL 


CLK2 


ADDR DECODER 


2 r 


CLKIN OSC 


This solution does not support pipelined 82370 SLAVE Cycles. 


Figure C-5. System with 82370 Timer Unit “INHIBIT” Circuitry 


INHIBIT 


Should have gone 
HIGH here, but was 
inhibited. .» sea e 


CLKIN (derived) a 


CLKIN (original) 


FIGURE D=5 (a): Inhibited CLKIN in an 82370 Timer Unit & CLKIN Minimum HIGH time. 


CLKIN (derived) Should have gone % 


LOW here, but wos 
Inhibited. 


CLKIN (original) \ 


Figure C-6. Inhibited CLKIN in an 82370 Timer Unit and CLKIN Minimum LOW Time 
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intel. 
80C286 
CHMOS MICROPROCESSOR WITH 
MEMORY MANAGEMENT AND PROTECTION 


m@ High Speed CHMOS Ill Technology m@ 12.5 MHz Clock Rate 
m@ Pin for Pin, Clock for Clock, and m Available in a Variety of Packages: 
Functionally Compatible with the HMOS — 68 Pin PLCC (Plastic Leaded Chip 
80286 Carrier) 
(See 80286 Data Sheet, Order #210253) — 68 Pin PGA (Pin Grid Array) 
* Stop Clock Capability (See Packaging Spec., Order #231369) 
— Uses Less Power (see Iccs 
Specification) 
INTRODUCTION 


The 80C286 is an advanced 16 bit CHMOS Ill microprocessor designed for multi-user and multi-tasking 
applications that require low power and high performance. The 80C286 is fully compatible with its predecessor 
the HMOS 80286 and object-code compatible with the 8086 and 80386 family of products. In addition, the 
80C286 has a power down mode which uses less power, making it ideal for mobile applications. The 80C286 
has built-in memory protection that maintains a four level protection mechanism for task isolation, a hardware 
task switching facility and memory management capabilities that map 239 bytes (one gigabyte) of virtual 
address space per task (per user) into 224 bytes (16 megabytes) of physical memory. 


The 80C286 is upward compatible with 8086 and 8088 software. Using 8086 real address mode, the 80C286 
is object code compatible with existing 8086, 8088 software. In protected virtual address mode, the 80C286 is 
source code compatible with 8086, 8088 software which may require upgrading to use virtual addresses 
supported by the 80C286’s integrated memory management and protection mechanism. Both modes operate 
at full 80C286 performance and execute a superset of the 8086 and 8088 instructions. 


The 80C286 provides special operations to support the efficient implementation and execution of operating 
systems. For example, one instruction can end execution of one task, save its state, switch to a new task, load 
its state, and start execution of the new task. The 80C286 also supports virtual memory systems by providing a 
segment-not-present exception and restartable instructions. 


ADDRESS A23 - Ao. 
LATCHES AND DRIVERS BHE, M/10 


PROCESSOR 
PREFETCHER EXTENSION PERCK 
SEGMENT INTERFACE PEREQ 
BASES 


ae BUS CONTROL 37, 50, COD/INTA 
SEGMENT 
Lear SEGMENT 


CHECKER SIZES 
DATA TRANSCEIVERS Dis - Dp 


6 BYTE 


PREFETCH 
QUEUE BUS UNIT (BU) 


RESET 


3 DECODED INSTRUCTION ! CLK 
INSTRUCTION | Nor Roe UNIT (IU) | Vss 

QUEUE Vec 
CaP 


231923-1 
Figure 1. 80C286 Internal Block Diagram 
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Component Pad Views—As viewed from underside of P.C. Board Views—As viewed from the component 
component when mounted on the board. side of the P.C. board. 


Plastic Leaded Chip Carrier 


Plastic Leaded Chip Carrier 


PIN NO.1 MARK 
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NOTE: Pin Grid Array 
N.C. signals must not be connected 
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ERROR CAP CAP ERROR 
N.C. BUSY BUSY N.C. 

Vog CLK INTR N.C. N.C. 

A3 RESET NMI N.C. N.C. 
PEREQ Vs Vss 
READY Voc Voc 
HLDA HOLD HOLD 

Ail AO M/10 COD/INTA COD/INTA 

AIS) A12 N.C. LOCK LOCK 


PIN NO.1 MARK 


Aig AISI@® 
Ais AI71@@® 
A20 A1I91©Q@® 
Vss_ A21 [© © 


SO PEACK 


N.C 


co 


BHE 
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Figure 2. 80C286 Pin Configuration 


Table 1. Pin Description 
The following pin function descriptions are for the 8OC286 microprocessor : 


Name and Function 


SYSTEM CLOCK provides the fundamental timing for 80C286 systems. It is 
divided by two inside the 80C286 to generate the processor clock. The internal 
divide-by-two circuitry can be synchronized to an external clock generator by a 
LOW to HIGH transition on the RESET input. 


DATA BUS inputs data during memory, I/O, and interrupt acknowledge read 
cycles; outputs data during memory and I/O write cycles. The data bus is active 
HIGH and floats to 3-state OFF* during bus hold acknowledge. 


ADDRESS BUS outputs physical memory and I/O port addresses. AO is LOW 
when data is to be transferred on pins D7_o9. A23—A16 are LOW during I/O 
transfers. The address bus is active HIGH and floats to 3-state OFF* during bus 
hold acknowledge. 


BUS HIGH ENABLE indicates transfer or data on the upper byte of the data bus. 
D15~8. Eight-bit oriented devices assigned to the upper byte of the data bus would 
normally use BHE to condition chip select functions. BHE is active LOW and floats 
to 3-state OFF* during bus hold acknowledge. 


*See bus hold circuitry section. 
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Table |. Pin Description (Continued) 


Name and Function 
BHE and AO Encodings 

G.., Word transfer 

0 Transfer on upper half of data bus (D;5-—Dg) 

1 

1 Will never occur 
BUS CYCLE STATUS indicates initiation of a bus cycle and, along with M/IO and COD/ 
Si and SO are active LOW and float to 3-state OFF* during bus hold acknowledge. 

80C286 Bus Cycle Status Definition 


| BHEValue | AoVaue | Function = 
Byte transfer on lower half of data bus (D7—Do) 

INTA, defines the type of bus cycle. The bus is in a T, state whenever one or both are LOW, 

| cop/INTA | m/iO_ | Si | 80 |  BusCycleinitiated 


0 (LOW) 0 0 0 Interrupt acknowledge 
0 0 0 1 Will not occur 

0 0 1 0 Will not occur 

0 0 1 1 None; not a status cycle 
0 1 0 0 IF Ai = 1 then halt; else shutdown 
0 1 0 1 Memory data read 

0 1 1 0 Memory data write 

0 1 1 1 None; not a status cycle 
1 0 0 0 Will not occur 

1 0 0 1 1/O read 

1 0 1 0 I/O write 

1 0 1 1 None; not a status cycle 
1 1 0 0 Will not occur 

1 1 0 1 Memory instruction read 
1 1 1 0 Will not occur 

1 1 1 1 


None; not a status cycle 


MEMORY I/O SELECT distinguishes memory access from I/O access. If HIGH during Ts, a 
memory cycle or a halt/shutdown cycle is in progress. If LOW, an I/O cycle or an interrupt 
acknowledge cycle is in progress. M/IO floats to 3-state OFF* during bus hold 
acknowledge. 


CODE/INTERRUPT ACKNOWLEDGE distinguishes instruction fetch cycles from memory 
data read cycles. Also distinguishes interrupt acknowledge cycles from I/O cycles. COD/ 
INTA floats to 3-state OFF* during bus hold acknowledge. Its timing is the same as M/1O. 


BUS LOCK indicates that other system bus masters are not to gain control of the system 
bus for the current and the following bus cycle. The LOCK signal may be activated explicitly 
by the “LOCK” instruction prefix or automatically by 80C286 hardware during memory 

XCHG instructions, interrupt acknowledge, or descriptor table access. LOCK is active LOW 
and floats to 3-state OFF* during bus hold acknowledge. 


BUS READY terminates a bus cycle. Bus cycles are extended without limit until terminated 
by READY LOW. READY is an active LOW synchronous input requiring setup and hold 
times relative to the system clock be met for correct operation. READY is ignored during 
bus hold acknowledge. 


BUS HOLD REQUEST AND HOLD ACKNOWLEDGE control ownership of the 80C286 — 
local bus. The HOLD input allows another local bus master to request control of the local 
bus. When control is granted, the 80C286 will float it: bus drivers to 3-state OFF* and then 
activate HLDA, thus entering the bus hold acknowledge condition. The local bus will remain 
granted to the requesting master until HOLD becomes inactive which results in the 80C286 
deactivating HLDA and regaining control of the local bus. This terminates the bus hold 
acknowledge condition. HOLD may be asynchronous to the system clock. These signals 
are active HIGH. 


INTERRUPT REQUEST requests the 80C286 to suspend its current program execution 
and service a pending external request. Interrupt requests are masked whenever the 
interrupt enable bit in the flag word is cleared. When the 80C286 responds to an interrupt 
request, it performs two interrupt acknowledge bus cycles to read an 8-bit interrupt vector 
that identifies the source of the interrupt. To assure program interruption, INTR must remain 
active until the first interrupt acknowledge cycle is completed. INTR is sampled at the 
beginning of each processor cycle and must be active HIGH at least two processor cycles 
before the current instruction ends in order to interrupt before the next instruction. INTR is 
level sensitive, active HIGH, and may be asynchronous to the system clock. 


re ee 
Gas 
READY 


HOLD 
HLDA 
ae 


*See bus hold circuitry section. 
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Table 1. Pin Description (Continued) 
| Symbol | Type 
PEREQ 
PEACK 
RESET which remains active for more than 16 system clock cycles. During 


USY 
ERROR 
RESET active, the output pins of the 80C286 enter the state shown below: 


RESET 
-80C286 Pin State During Reset 
Pin Value 

1 (HIGH) SO, $1, PEACK, A23-A0, BHE, LOCK 
0 (LOW) M/IO, COD/INTA, HLDA (Note 1) 
3-state OFF* Di5-Do 
Operation of the 80C286 begins after a HIGH to LOW transition on RESET. 
The HIGH to LOW transition of RESET must be synchronous to the system 
clock. Approximately 38 CLK cycles from the trailing edge of RESET are 
required by the 80C286 for internal initialization before the first bus cycle, to 
fetch code from the power-on execution address, occurs. 
A LOW to HIGH transition of RESET synchronous to the system clock will 

' end a processor cycle at the second HIGH to LOW transition of the system 
clock. The LOW to HIGH transition of RESET may be asynchronous to the 
system clock; however, in this case it cannot be predetermined which phase 
of the processor clock will occur during the next system clock period. 
Synchronous LOW to HIGH transitions of RESET are required only for 


systems where the processor clock must be phase synchronous to another 


clock. 
*See bus hold circuitry section. 


SYSTEM GROUND: 0 Volts. 

SYSTEM POWER: + 5 Volt Power Supply. 
NOTE: 
1. HLDA is only Low if HOLD is inactive (Low). 


Name and Function 


NON-MASKABLE INTERRUPT REQUEST interrupts the 80C286 with an 
internally supplied vector value of 2. No interrupt acknowledge cycles are 
performed. The interrupt enable bit in the 80C286 flag word does not affect 
this input. The NMI input is active HIGH, may be asynchronous to the system 
clock, and is edge triggered after internal synchronization. For proper 
recognition, the input must have been previously LOW for at least four system 
clock cycles and remain HIGH for at least four system clock cycles. 


PROCESSOR EXTENSION OPERAND REQUEST AND ACKNOWLEDGE 
extend the memory management and protection capabilities of the 80C286 to 
processor extensions. The PEREQ input requests the 80C286 to perform a 
data operand transfer for a processor extension. The PEACK output signals 
the processor extension when the requested operand is being transferred. 
PEREQ is active HIGH and floats to 3-state OFF* during bus hold 
acknowledge. PEACK may be asynchronous to the system clock. PEACK is 
active LOW. 


PROCESSOR EXTENSION BUSY AND ERROR indicate the operating 
condition of a processor extension to the 80C286. An active BUSY input 
stops 80C286 program execution on WAIT and some ESC instructions until 
BUSY becomes inactive (HIGH). The 80C286 may be interrupted while 
waiting for BUSY to become inactive. An active ERROR input causes the 
80C286 to perform a processor extension interrupt when executing WAIT or 
some ESC instructions. These inputs are active LOW and may be 
asynchronous to the system clock. These inputs have internal pull-up 
resistors. 


SYSTEM RESET clears the internal logic of the 80C286 and is active HIGH. 
The 80C286 may be reinitialized at any time with a LOW to HIGH transition on 


188) 


SUBSTRATE FILTER CAPACITOR: a 0.047 uF + 20% 12V capacitor can 
be connected between this pin and ground for compatibility with the HMOS 
80286. For systems using only an 80C286, this pin can be left floating. 
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Introduction 


The 80C286 is an advanced, high-performance mi- 
croprocessor with specially optimized capabilities for 
multiple user and multi-tasking systems. Depending 
on the application, a 12 MHz 80C286’s performance 
is up to ten times faster than the standard 5 MHz 
8086’s, while providing complete upward software 
compatibility with Intel’s 8086, 88, and 186 family of 
CPU’s. 


The 80C286 operates in two modes: 8086 real ad- 
dress mode and protected virtual address mode. 
Both modes execute a superset of the 8086 and 88 
instruction set. 


In 8086 real address mode programs use real ad- 
dresses with up to one megabyte of address space. 
Programs use virtual addresses in protected virtual 
address mode, also called protected mode. In pro- 
tected mode, the 80C286 CPU automatically maps 1 
gigabyte of virtual addresses per task into a 16 
megabyte real address space. This mode also pro- 
vides memory protection to isolate the operating 
system-and ensure privacy of each tasks’ programs 
and data. Both modes provide the same base in- 
struction set, registers, and addressing modes. 


The following Functional Description describes first, 
the base 80C286 architecture common to both 
modes, second, 8086 real address mode, and third, 
protected mode. 


80C286 BASE ARCHITECTURE 


The 8086, 88, 186, and 286 CPU family all contain 
the same basic set of registers, instructions, and 


16-BIT SPECIAL 
REGISTER REGISTER 
FUNCTIONS 


BYTE 
ADDRESSABLE 
(8-BIT 
REGISTER 
NAMES 
SHOWN) 


MULTIPLY/DIVIDE 
1/0 INSTRUCTIONS 
\ 


BASE REGISTERS 


INDEX REGISTERS 


STACK POINTER 


GENERAL 
REGISTERS 


Figure 3. 


LOOP/SHIFT/REPEAT/COUNT 


80C286 


addressing modes. The 80C286 processor is up- 
ward compatible with the 8086, 8088, and 80186 
CPU’s and fully compatible with the HMOS 80286. 


Register Set 


The 80C286 base architecture has fifteen registers 
as shown in Figure 3. These registers are grouped 
into the following four categories: 


General Registers: Eight 16-bit general purpose 
registers used to contain arithmetic and logical oper- 
ands. Four of these (AX, BX, CX, and DX) can be 
used either in their entirety as 16-bit words or split 
into pairs of separate 8-bit registers. 


Segment Registers: Four 16-bit special purpose 
registers select, at any given time, the segments of 
memory that are immediately addressable for code, 
stack, and data. (For usage, refer to Memory Organi- 
zation.) 


Base and Index Registers: Four of the general pur- 
pose registers may also be used to determine offset 
addresses of operands in memory. These registers 
may contain base addresses or indexes to particular 
locations within a segment. The addressing mode 
determines the specific registers used for operand 
address calculations. 


Status and Control Registers: The 3 16-bit special 
purpose registers in figure 3A record or control cer- 
tain aspects of the 80C286 processor state including 
the Instruction Pointer, which contains the offset ad- 
dress of the next sequential instruction to be execut- 
ed. 


CODE SEGMENT SELECTOR 
DATA SEGMENT SELECTOR 
STACK SEGMENT SELECTOR 
EXTRA SEGMENT SELECTOR 


SEGMENT REGISTERS 


0 
STATUS WORD 
INSTRUCTION POINTER 


STATUS AND CONTROL 
REGISTERS 


Register Set 
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noe WL om lelele [> lel= hl Ml MUL! 


CONTROL FLAGS: 
TRAP FLAG 
INTERRUPT ENABLE 
DIRECTION FLAG 


SPECIAL FIELDS: 
VO PRIVILEGE LEVEL 
NESTED TASK FLAG 


NAN ANWANNN' ANNU NAN ANTANNVUANANGANNN ANNAN NNN ES cH 


\\\\\) were Reserven 
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Figure 3a. Status and Control Register Bit Functions 


Flags Word Description 


The Flags word (Flags) records specific characteris- 
tics of the result of logical and arithmetic instructions 
(bits 0, 2, 4, 6, 7, and 11) and controls the operation 
of the 80C286 within a given operating mode (bits 8 
and 9). Flags is a 16-bit register. The function of the 
flag bits is given in Table 2. 


Instruction Set 


The instruction set is divided into seven categories: 
data transfer, arithmetic, shift/rotate/logical, string 
manipulation, control transfer, high level instruc- 
tions, and processor control. These categories are 
summarized in Figure 4. 


An 80C286 instruction can reference zero, one, or 
two operands; where an operand resides in a regis- 
ter, in the instruction itself, or in memory. Zero-oper- 
and instructions (e.g. NOP and HLT) are usually one 
byte long. One-operand instructions (e.g. INC and 
DEC) are usually two bytes long but some are en- 
coded in only one byte. One-operand instructions 
may reference a register or memory location. Two- 
operand instructions permit the following six types of 
instruction operations: 


—Register to Register 
—Memory to Register 
—Immediate to Register 
—Memory to Memory 
—Register to Memory 
—Immediate to Memory 
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4 AF | Setoncarry from or borrow to the 
low order four bits of AL; cleared 
otherwise 
Cade hand 


Table 2. Flags Word Bit Functions 


Bit 
Position 
CF | Carry Flag—Set on high-order bit 
Carry or borrow; cleared otherwise 


PF | Parity Flag—Set if low-order 8 bits 
of result contain an even number of 


1-bits; cleared otherwise 


Zero Flag—Set if result is zero; 
cleared otherwise 


SF | Sign Flag—Set equal to high-order 
bit of result (0 if positive, 1:if negative) 


11 OF | Overflow Flag—Set if result is a too- 
large positive number or a too-small 
negative number (excluding sign-bit) 
to fit in destination operand; cleared 
otherwise 
Single Step Flag—Once set, a sin- 
gle step interrupt occurs after the 
next instruction executes. TF is 
cleared by the single step interrupt. 


Interrupt-enable Flag—When set, 
maskable interrupts will cause the 
CPU to transfer control to an inter- 
rupt vector specified location. 


Direction Flag—Causes string 
instructions to auto decrement 
the appropriate index registers 
when set. Clearing DF causes 
auto increment. 
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Two-operand instructions (e.g. MOV and ADD) are 
usually three to six bytes long. Memory to memory 
operations are provided by a special class of string 
instructions requiring one to three bytes. For de- 
tailed instruction formats and encodings refer to the 
instruction set summary at the end of this document. 


For detailed operation and usage of each instruc- 
tion, see Appendix B of the 80286/80287 Program- 
mer’s Reference Manual (Order No. 210498). 


GENERAL PURPOSE 


MOV Move byte or word 


PUSH Push word onto stack 


XCHG 

XLAT 

OUT Output byte or word 

LEA 

LDS 

LES 
Store AH register in flags 


Figure 4a. Data Transfer Instructions 


INS input bytesorwordstring | 
Store byte or word string 
2 eS Sa ee 


Figure 4c. String Instructions 


PUSHA 
POPA 
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Decimal adjust for addition 


|__Comparebyteorword 


Compare byte or word 


Decimal adjust for subtraction 


Divide byte or word unsigned 


Integer divide byte or word 


ASCIl adjust for division 


Convert byte to word 
Convert word to doubleword 


“Exclusive or” byte or word 
RRR eee 
SAR Shift arithmetic right byte or word 
| ROR | Rotate right byte or word 


Figure 4d. Shift/Rotate Logical Instructions 
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Jump if less or equal/not greater 
Jump if not carry 

Jump if not equal/not zero 

Jump if not overflow 

Jump if not parity/parity odd 


I 
CLI 


| Cli | Clearinterruptenableflag 
ONO, a. i engin TOLLS | 


Figure 4f. Processor Control Instructions 


ENTER Format stack for procedure entry 
LEAVE Restore stack for procedure exit 
BOUND Detects values outside prescribed range 


Figure 4g. High Level Instructions 
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Call procedure 
Return from procedure 
Jump 


ITERATION CONTROLS 


LOOPE/LOOPZ Loop if equal/zero 
Loop if not equal/not zero 


LOOPNE/LOOPNZ 


Memory Organization 


Memory is organized as sets of variable length seg- 
ments. Each segment is a linear contiguous se- 
quence of up to 64K (216) 8-bit bytes. Memory is 
addressed using a two component address (a point- 
er) that consists of a 16-bit segment selector, and a 
16-bit offset. The segment selector indicates the de- 
sired segment in memory. The offset component in- 
dicates the desired byte address within the segment. 


32-BIT POINTER 


OPERAND 
SELECTED SELECTED 
SEGMENT 


~ 


MEMORY 
231923-5 


Figure 5. Two Component Address 
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Table 3. Segment Register Selection Rules 


Segment Register implicit Segment 
Used Selection Rule 


Code (CS) Automatic with instruction prefetch 


Stack (SS) All stack pushes and pops. Any memory reference which uses BP 
as a base register. 


Data(DS) 


All data references except when relative to stack or 


string destination 


Extra (ES) 


All instructions that address operands in memory 
must specify the segment and the offset. For speed 
and compact instruction encoding, segment selec- 
tors are usually stored in the high speed segment 
registers. An instruction need specify only the de- 
sired segment register and an offset in order to ad- 
dress a memory operand. 


Most instructions need not explicitly specify which 
segment register is used. The correct segment reg- 
ister is automatically chosen according to the rules 
of Table 3. These rules follow the way programs are 
written (see Figure 6) as independent modules that 
require areas for code and data, a stack, and access 
to external data areas. 


Special segment override instruction prefixes allow 
the implicit segment register selection rules to be 
overridden for special cases. The stack, data, and 
extra segments may coincide for simple programs. 
To access operands not residing in one of the four 
immediately available segments, a full 32-bit pointer 
or a new segment selector must be loaded. 


Addressing Modes 


The 80C286 provides a. total of eight addressing 
modes for instructions to specify operands. Two ad- 
dressing modes are provided for instructions that 
operate on register or immediate operands: 


Register Operand Mode: The operand is locat- 
ed in one of the 8 or 16-bit general registers. 


immediate Operand Mode: The operand is in- 
cluded in the instruction. 


Six modes are provided to specify the location of an 
operand in a memory segment. A memory operand 
address consists of two 16-bit components: seg- 
ment selector and offset. The segment selector is 
supplied by a segment register either implicitly cho- 
sen by the addressing mode or explicitly chosen by 
a segment override prefix. The offset is calculated 
by summing any combination of the following three 
address elements: 


the displacement (an 8 or 16-bit immediate val- 
ue contained in the instruction) 


the base (contents of either the BX or BP base 
registers) 


Alternate data segment and destination of string operation 
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Figure 6. Segmented Memory Helps 
Structure Software 


the index (contents of either the SI or DI index 
registers) 


Any carry out from the 16-bit addition is ignored. 
Eight-bit displacements are sign extended to 16-bit 
values. 


Combinations of these three address elements de- 
fine the six memory addressing modes, described 
below. 


Direct Mode: The operand’s offset is contained in 
the instruction as an 8 or 16-bit displacement ele- 
ment. ) 


Register Indirect Mode: The operand’s offset is in 
one of the registers SI, DI, BX, or BP. 


Based Mode: The operand’s offset is the sum of an 


8 or 16-bit displacement and the contents of a base 
register (BX or BP). 
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Indexed Mode: The operand’s offset is the sum of 
an 8 or 16-bit displacement and the contents of an 
index register (SI or Di). 


Based Indexed Mode: The operand’s offset is the 
sum of the contents of a base register and an index 
register. 


Based Indexed Mode with Displacement: The op- 
erand’s offset is the sum of a base register’s con- 
tents, an index register’s contents, and an 8 or 16-bit 
displacement. 


Data Types 


The 80C286 directly supports the following data 
types: 


Integer: A signed binary numeric value con- 
tained in an 8-bit byte or a 16-bit 
word. All operations assume a 2’s 
complement representation. Signed 
32 and 64-bit integers are supported 
using the Numeric Data Processor, 


the 80287. 


An unsigned binary numeric value 
contained in an 8-bit byte or 16-bit 
word. 


A 32-bit quantity, composed of a 
segment selector component and an 
offset component. Each component 
is a 16-bit word. 


A contiguous sequence of bytes or 
words. A string may contain from 1 
byte to 64K bytes. 


A byte representation of alphanu- 
meric and control characters using 
the ASCII standard of character rep- 
resentation. 


BCD: A byte (unpacked) representation of 
the decimal digits 0-9. 


Packed BCD: A byte (packed) representation of 
two decimal digits 0-9 storing one 
digit in each nibble of the byte. 


Floating Point: A signed 32, 64, or 80-bit real num- 
ber representation. (Floating point 
operands are supported using the 
80287 Numeric Processor). 


Ordinal: 


Pointer: 


String: 


ASCII: 


Figure 7 graphically represents the data types sup- 
ported by the 80C286. 


I/O Space 


The I/O space consists of 64K 8-bit or 32K 16-bit 
ports. |/O instructions address the |/O space with 
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either an 8-bit port address, specified in the instruc- 
tion, or a 16-bit port address in the DX register. 8-bit 
port addresses are zero extended such that A;5-Ag 


are LOW. I/O port addresses OOF8(H) through 
OOFF(H) are reserved. 


OFFSET 

nt+9 +8 +7 +6 +5 +4 +3 
FLOATING 
POINT’ 


SIGN BIT~ 


EXPONENT MAGNITUDE 


“Supported by |APX 286/20 Numeric Date Processor Configuration 
231923-7 


Figure 7. 80C286 Supported Data Types 
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Table 4. Interrupt Vector Assignments 


Interrupt 
Number 


Does Return Address 
Point to Instruction 
Causing Exception? 


Related 
instructions 


a 


7 


iia | 
ane ae 
se] 
pee | BOUND 2) 
ie es 
ee a 
| 815 
ek ae 


INT 2 or NMI pin 
INT 3 
INTO 


ESC or WAIT 
ESC or WAIT 


Any undefined opcode 


tie ee eda 
eae 


interrupts 


An interrupt transfers execution to a new program 
location. The old program address (CS:IP) and ma- 
chine state (Flags) are saved on the stack to allow 
resumption of the interrupted program. Interrupts fall 
into three classes: hardware initiated, INT instruc- 
tions, and instruction exceptions. Hardware initiated 
interrupts occur in response to an external input and 
are classified as non-maskable or maskable. Pro- 
grams may cause an interrupt with an INT instruc- 
tion. Instruction exceptions occur when an unusual 
condition, which prevents further instruction pro- 
cessing, is detected while attempting to execute an 
instruction. The return address from an exception 
will always point at the instruction causing the ex- 
ception and include any leading instruction prefixes. 


A table containing up to 256 pointers defines the 
proper interrupt service routine for each interrupt. In- 
terrupts 0-31, some of which are used for instruc- 
tion exceptions, are reserved. For each interrupt, an 
8-bit vector must be supplied to the 80C286 which 
identifies the appropriate table entry. Exceptions 
supply the interrupt vector internally. INT instructions 
contain or imply the vector and allow access to all 
256 interrupts. Maskable hardware initiated inter- 
rupts supply the 8-bit vector to the CPU during an 
interrupt acknowledge bus sequence. Non-maska- 
ble hardware interrupts use a predefined internally 
supplied vector. 


MASKABLE INTERRUPT (INTR) 


The 80C286 provides a maskable hardware interrupt 
request pin, INTR. Software enables this input by 


setting the interrupt flag bit (IF) in the flag word. All 
224 user-defined interrupt sources can share this in- 
put, yet they can retain separate interrupt handlers. 
An 8-bit vector read by the CPU during the interrupt 
acknowledge sequence (discussed in System Inter- 
face section) identifies the source of the interrupt. 


Further maskable interrupts are disabled while serv- 
icing an interrupt by resetting the IF but as part of 
the response to an interrupt or exception. The saved 
flag word will reflect the enable status of the proces- 
sor prior to the interrupt. Until the flag word is re- 
stored to the flag register, the interrupt flag will be 
zero unless specifically set. The interrupt return in- 
struction includes restoring the flag word, thereby 
restoring the original status of IF. | 


NON-MASKABLE INTERRUPT REQUEST (NMI) 


A non-maskable interrupt input (NMI) is also provid- 
ed. NMI has higher priority than INTR. A typical use 
of NMI would be to activate a power failure routine. 
The activation of this input causes an interrupt with 
an internally supplied vector value of 2. No external 
interrupt acknowledge sequence is performed. 


While executing the NMI servicing procedure, the 
80C286 will service neither further NMI requests, 
INTR requests, nor the processor extension seg- 
ment overrun interrupt until an interrupt return (IRET) 
instruction is executed or the CPU is reset. If NMI 
occurs while currently servicing an NMI, its presence 
will be saved for servicing after executing the first 
IRET instruction. IF is cleared at the beginning of an 
NMI interrupt to inhibit INTR interrupts. 
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SINGLE STEP INTERRUPT 


The 80C286 has an internal interrupt that allows pro- 
grams to execute one instruction at a time. It is 
called the single step interrupt and is controlled by 
the single step flag bit (TF) in the flag word. Once 
this bit is set, an internal single step interrupt will 
occur after the next instruction has been executed. 
The interrupt clears the TF bit and uses an internally 
supplied vector of 1. The IRET instruction is used to 
set the TF bit and transfer control to the next instruc- 
tion to be single stepped. 


Interrupt Priorities 


When simultaneous interrupt requests occur, they 
are processed in a fixed order as shown in Table 5. 
Interrupt processing involves saving the flags, return 
address, and setting CS:IP to point at the first in- 
struction of the interrupt handler. If other interrupts 
remain enabled they are processed before the first 
instruction of the current interrupt handler is execut- 
ed. The last interrupt processed is therefore the first 
one serviced. 


Table 5. Interrupt Processing Order 


Instruction exception 
| 2 (| Single step 


INTR 


Initialization and Processor Reset 


Processor extension segment overrun 


Processor initialization or start up is accomplished 
by driving the RESET input pin HIGH. RESET forces 
the 80C286 to terminate all execution and local bus 
activity. No instruction or bus activity will occur as 
long as RESET is active. After RESET becomes in- 
active and an internal processing interval elapses, 
the 80C286 begins execution in real address mode 
with the instruction at physical location FFFFFO(H). 
RESET also sets some registers to predefined val- 
ues as shown in Table 6. 


Table 8. Recommended MSW Encodings For Processor Extension Control 


; Instructions 
TS Recommended Use Causing 
Exception 7 


Cre ees Initial encoding after RESET. 80C286 operation is identical to 8086, 88. 
oy x No processor extension is available. Software will emulate its function. 


1 No processor extension is available. Software will emulate its function. The current ESC 
processor extension context may belong to another task. 


1 


as 
eae 


A processor extension exists. 


from a previous processor extension operation. 


A processor extension exists. The current processor extension context may belong to | ESCor 
another task. The Exception 7 on WAIT allows software to test for an error pending WAIT 


ie | 
intel. 
Table 6. 80C286 Initial Register State after RESET 


0002(H) 
FFFO(H) 
FFFO(H) 
FO00(H) 
0000(H) 
0000(H) 
0000(H) 


Flag word 
Machine Status Word 
Instruction pointer 


Code segment 
Data segment 

Extra segment 
Stack segment 


HOLD must not be active during the time from the 
leading edge of RESET to 34 CLKs after the trailing 
edge of RESET. 


Machine Status Word Description 


The machine status word (MSW) records when a 
task switch takes place and controls the operating 
mode of the 80C286. It is a 16-bit register of which 
the lower four bits are used. One bit places the CPU 
into protected mode, while the other three bits, as 
shown in Table 7, control the processor extension 
interface. After RESET, this register contains 
FFFO(H) which places the 80C286 in 8086 real ad- 
dress mode. 


Table 7. MSW Bit Functions 


Protected mode enable places the 
80C286 into protected mode and cannot 
be cleared except by RESET. 


Monitor processor extension allows 
WAIT instructions to cause a processor 
extension not present exception 
(number 7). 


Emulate processor extension causes a 
processor extension not present 
exception (number 7) on ESC 
instructions to allow emulating a 
processor extension. 


Task switched indicates the next 
instruction using a processor extension 
will cause exception 7, allowing software 
to test whether the current processor 
extension context belongs to the current 
task. 


The LMSW and SMSW instructions can load and 


_ store the MSW in real address mode. The recom- 


mended use of TS, EM, and MP is shown in Table 8. 
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Halt 


The HLT instruction stops program execution and 
prevents the CPU from using the local bus until re- 
started. Either NMI, INTR with IF = 1, or RESET will 
force the 80C286 out of halt. If interrupted, the 
saved CS:IP will point to the next instruction after 
the HLT. 


8086 REAL ADDRESS MODE 


The 80C286 executes a fully upward-compatible su- 
perset of the 8086 instruction set in real address 
mode. In real address mode the 80C286 is object 
code compatible with 8086 and 8088 software. The 
real address mode architecture (registers and ad- 
dressing modes) is exactly as described in the 
80C286 Base Architecture section of this Functional 
Description. 


Memory Size 


Physical memory is a contiguous array of up to 
1,048,576 bytes (one megabyte) addressed by pins 
Ao through Ay9 and BHE. Ago through Aoa3 should be 
ignored. 


Memory Addressing 


In real address mode physical memory is a contigu- 


Ous array of up to 1,048,576 bytes (one megabyte) 
addressed by pins Ap through Aig and BHE. Ad- 
dress bits Az9p—Agg3 may not always be zero in real 
mode. Azg—-A23 should not be used by the system 
while the 80C286 is operating in Real Mode. 


The selector portion of a pointer is interpreted as the 
upper 16 bits of a 20-bit segment address. The lower 
four bits of the 20-bit segment address are always 
zero. Segment addresses, therefore, begin on multi- 
ples of 16 bytes. See Figure 8 for a graphic repre- 
sentation of address information. 


All segments in real address mode are 64K bytes in 
size and may be read, written, or executed. An ex- 
ception or interrupt can occur if data operands or 
instructions attempt to wrap around the end of a 
segment (e.g. a word with its low order byte at offset 
FFFF(H) and its high order byte at offset O000(H). If, 
in real address mode, the information contained in a 
segment does not use the full 64K bytes, the unused 
end of the segment may be overlayed by another 
segment to reduce physical memory requirements. 


Reserved Memory Locations 


The 80C286 reserves two fixed areas of memory in 
real address mode (see Figure 9); system initializa- 
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tion area and interrupt table area. Locations from 
addresses FFFFO(H) through FFFFF(H) are re- 
served for system initialization. Initial execution be- 
gins at location FFFFO(H). Locations O0000(H) 
through OO3FF(H) are reserved for interrupt vectors. 


15 


OFFSET 
000) OFFSET ADDRESS 


SEGMENT 
ADDRESS 


20-BIT PHYSICAL 
MEMORY ADDRESS 
231923-8 


Figure 8. 8086 Real Address Mode 
Address Calculation 


FFFFFH 
RESET BOOTSTRAP 


PROGRAM JUMP 
FFFFOH 


INTERRUPT POINTER 
FOR VECTOR 255 


INTERRUPT POINTER 
FOR VECTOR 1 


INTERRUPT POINTER 
FOR VECTOR 0 


INITIAL CS:IP VALUE IS F000:FFFO. 
231923-9 


Figure 9. 8086 Real Address Mode Initially 
Reserved Memory Locations 
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Table 9. Real Address Mode Addressing Interrupts 


Interrupt table limit too small exception 


Segment overrun exception 


Interrupts 


Table 9 shows the interrupt vectors reserved for ex- 
ceptions and interrupts which indicate an addressing 
error. The exceptions leave the CPU in the state ex- 
isting before attempting to execute the failing in- 
struction (except for PUSH, POP, PUSHA, or POPA). 
Refer to the next section on protected mode initiali- 
zation for a discussion on exception 8. 


Protected Mode Initialization 


To prepare the 80C286 for protected mode, the 
LIDT instruction is used to load the 24-bit interrupt 
table base and 16-bit limit for the protected mode 
interrupt table. This instruction can also set a base 
and limit for the interrupt vector table in real address 
mode. After reset, the interrupt table base is initial- 
ized to O0O0000(H) and its size set to OS3FF(H). These 
values are compatible with 8086, 88 software. LIDT 
should only be executed in preparation for protected 
mode. ° 


Shutdown 


Shutdown occurs when a severe error is detected 
that prevents further instruction processing by the 
CPU. Shutdown and halt are externally signalled via 
a halt bus operation. They can be distinguished by 
A; HIGH for halt and A; LOW for shutdown. In real 
address mode, shutdown can occur under two con- 
ditions: 

e Exceptions 8 or 13 happen and the IDT limit does 

not include the interrupt vector. 


@ ACALL INT or PUSH instruction attempts to wrap 
around the stack segment when SP is not even. 


An NMI input can bring the CPU out of shutdown if 
the IDT limit is at least OOOF(H) and SP is greater 
than 0005(H), otherwise shutdown can only be exit- 
ed via the RESET input. 


Interrupt Related Return Address 

Number instructions Before Instruction? 
ee ee INT vector is not within table limit 
Processor extension segment overrun ESC with memory operand extend- 
interrupt ing beyond offset FFFF(H) 
ee 


Word memory reference with offset 
= FFFF(H) or an attempt to exe- 
cute past the end of a segment 


PROTECTED VIRTUAL ADDRESS 
MODE 


The 80C286 executes a fully upward-compatible su- 
perset of the 8086 instruction set in protected virtual 
address mode (protected mode). Protected mode 
also provides memory management and protection 
mechanisms and associated instructions. 


The 80C286 enters protected virtual address mode 
from real address mode by setting the PE (Protec- 
tion Enable) bit of the machine status word with the 
Load Machine Status Word (LMSW) instruction. Pro- 
tected mode offers extended physical and virtual 
memory address space, memory protection mecha- 
nisms, and new operations to support operating sys- 
tems and virtual memory. 


All registers, instructions, and addressing modes de- 
scribed in the 80C286 Base Architecture section of 
this Functional Description remain the same. Pro- 
grams for the 8086, 88, 186, and real address mode 
80C286 can be run in protected mode; however, em- 
bedded constants for segment selectors are differ- 
ent. 


Memory Size 


The protected mode 80C286 provides a 1 gigabyte 
virtual address space per task mapped into a 16 
megabyte physical address space defined by the ad- 
dress pin Ao3_Ap and BHE. The virtual address 
space may be larger than the physical address 
space since any use of an address that does not 
map to a physical memory location will cause a re- 
startable exception. 


Memory Addressing 


As in real address mode, protected mode uses 32- 
bit pointers, consisting of 16-bit selector and offset 


~ components. The selector, however, specifies an in-. 


dex into a memory resident table rather than the up- 
per 16-bits of a real memory address. The 24-bit 
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base address of the desired segment is obtained 
from the tables in memory. The 16-bit offset is add- 
ed to the segment base address to form the physical 
address as shown in Figure 10. The tables are auto- 
matically referenced by the CPU whenever a seg- 
ment register is loaded with a selector. All 80C286 
instructions which load a segment register will refer- 
ence the memory based tables without additional 
software. The memory based tables contain 8 byte 
values called descriptors. 


POINTER 


ce] oe 


| PHYSICAL MEMORY 
~ Ns 


Descriptor Privilege 
Level (DPL) 
Segment Descrip- 
tor (S) 

Executable (E) 
Expansion Direc- 
tion (ED) 

Writeable (W) 


Type 
Field 
Definition 


Executable (E) 
Conforming (C) 
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DESCRIPTORS 


Descriptors define the use of memory. Special types 
of descriptors also define new functions for transfer 
of control and task switching. The 80C286 has seg- 
ment descriptors for code, stack and data segments, 
and system control descriptors for special system 
data segments and control transfer operations. De- 
scriptor accesses are performed as locked bus op- 
erations to assure descriptor integrity in multi-proc- 
essor systems. 


CODE AND DATA SEGMENT DESCRIPTORS 

(S = 1) 

Besides segment base addresses, code and data 
descriptors contain other segment attributes includ- 
ing segment size (1 to 64K bytes), access rights 
(read only, read/write, execute only, and execute/ 
read), and presence in memory (for virtual memory 
systems) (See Figure 11). Any segment usage vio- 
lating a segment attribute indicated by the segment 
descriptor will prevent the memory cycle and cause 
an exception or interrupt. 


Code or Data Segment Descriptor 


ACCESS 
RIGHTS BYTE 


231923-11 
*Must be set to 0 for compatibility with 80386. 


Segment is mapped into physical memory. 

No mapping to physical memory exits, base and limit are 
not used. 

Segment privilege attribute used in privilege tests. 


Code or Data (includes stacks) segment descriptor 
System Segment Descriptor or Gate Descriptor 


Data segment descriptor type is: 

Expand up segment, offsets must be < limit. 
Expand down segment, offsets must be > limit. 
Data segment may not be written into. 

Data segment may be written into. 


Code Segment Descriptor type is: 
Code segment may only be executed 
when CPL = DPL and CPL 

remains unchanged. 

Code segment may not be read 
Code segment may be read. 


Segment 


(S=1, 
E = 1) 


Figure 11. Code and Data Segment Descriptor Formats 
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Code and data (including stack data) are stored in 
two types of segments: code segments and data 
segments. Both types are identified and defined by 
segment descriptors (S = 1). Code segments are 
identified by the executable (E) bit set to 7 in the 
descriptor access rights byte. The access rights byte 
of both code and data segment descriptor types 
have three fields in common: present (P) bit, De- 
scriptor Privilege Level (DPL), and accessed (A) bit. 
If P = 0, any attempted use of this segment will 
cause a not-present exception. DPL specifies the 
privilege level of the segment descriptor. DPL con- 
trols when the descriptor may be used by a task 
(refer to privilege discussion below). The A bit shows 
whether the segment has been previously accessed 
for usage profiling, a necessity for virtual memory 
systems. The CPU will always set this bit when ac- 
cessing the descriptor. | 


Data segments (S = 1, E = 0) may be either read- 
only or read-write as controlled by the W bit of the 
access rights byte. Read-only (W = 0) data seg- 
ments may not be written into. Data segments may 
grow in two directions, as determined by the Expan- 
sion Direction (ED) bit: upwards (ED = 0) for data 
segments, and downwards (ED = 1) for a segment 
containing a stack. The limit field for a data segment 
descriptor is interpreted differently depending on the 
ED bit (see Figure 11). 


A code segment (S = 1, E = 1) may be execute- 
only or execute/read as determined by the Read- 
able (R) bit. Code segments may never be written 
into and execute-only code segments (R = 0) may 
not be read. A code segment may also have an attri- 
bute called conforming (C). A conforming code seg- 
ment may be shared by programs that execute at 
different privilege levels. The DPL of a conforming 
code segment defines the range of privilege levels 
at which the segment may be executed (refer to priv- 
ilege discussion below). The limit field identifies the 
last byte of a code segment. 


SYSTEM SEGMENT DESCRIPTORS (S = 0, 
TYPE = 1-3) 


In addition to code and data segment descriptors, 
the protected mode 80C286 defines System Seg- 
ment Descriptors. These descriptors define special 
system data segments which contain a table of de- 
scriptors (Local Descriptor Table Descriptor) or seg- 
ments which contain the execution state of a task 
(Task State Segment Descriptor). 


Figure 12 gives the formats for the special system 
data segment descriptors. The descriptors contain a 
24-bit base address of the segment and a 16-bit lim- 
it. The access byte defines the type of descriptor, its 
state and privilege level. The descriptor contents are 
valid and the segment is in physical memory if P =1. 
lf P = 0, the segment is not valid. The DPL field is 
only used in Task State Segment descriptors and 
indicates the privilege level at which the descrip- 
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tor may be used (see Privilege). Since the Local De- 
scriptor Table descriptor may only be used by a spe- 
cial privileged instruction, the DPL field is not used. 
Bit 4 of the access byte is 0 to indicate that it is a 
system control descriptor. The type field specifies 
the descriptor type as indicated in Figure 12. 


System Segment Descriptor 


231923-12 


*Must be set to 0 for compatibility with 80386. 


Available Task State Segment (TSS) 
Local Descriptor Table 
Busy Task State Segment (TSS) 


Descriptor contents are not valid 
Descriptor contents are valid 
Descriptor Privilege Level 
Base Address of special system data 
segment in real memory 
LIMIT | 16-bit | Offset of last byte in segment 
number | 


Figure 12. System Segment Descriptor Format 


GATE DESCRIPTORS (S = 0, TYPE = 4-7) 


Gates are used to control access to entry points 
within the target code segment. The gate descrip- 
tors are call gates, task gates, interrupt gates and 
trap gates. Gates provide a level of indirection be- 
tween the source and destination of the control 
transfer. This indirection allows the CPU to automati- 
cally perform protection checks and control entry 
point of the destination. Call gates are used to 
change privilege levels (see Privilege), task gates 
are used to perform a task switch, and interrupt and 
trap gates are used to specify interrupt service rou- 
tines. The interrupt gate disables interrupts (resets 
IF) while the trap gate does not. 


Gate Descriptor 


INTEL RESERVED* 
WORD 
lor [aL See Deal ees 
DESTINATION SELECTORs_2 x x] 


DESTINATION OFFSET i559 


18 87 


231923-13 
*Must be set to 0 for compatibility with 80386 (X is don’t care) 
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Gate Descriptor Fields 


| _Name | Value | Description 


—Call Gate 
—Task Gate 
—Interrupt Gate 
-Trap Gate 


—Descriptor Contents are not 
valid 

—Descriptor Contents are 
valid 


Descriptor Privilege Level 


WORD Number of words to copy 
COUNT 0-31 


from callers stack to called 
procedures stack. Only used 
DESTINATION 
SELECTOR 


with call gate. 


Selector to the target code 
segment (Call, Interrupt or ° 
Trap Gate) 

Selector to the target task 
state segment (Task Gate) 


DESTINATION | 16-bit | Entry point within the target 
OFFSET offset | code segment 


Figure 13. Gate Descriptor Format 


16-bit 
selector 


Figure 13 shows the format of the gate descriptors. 
The descriptor contains a destination pointer that 
points to the descriptor of the target segment and 
the entry point offset. The destination selector in an 
interrupt gate, trap gate, and call gate must refer to a 
code segment descriptor. These gate descriptors 
contain the entry point to prevent a program from 
constructing and using an illegal entry point. Task 
gates may only refer to a task state segment. Since 
task gates invoke a task switch, the destination off- 
set is not used in the task gate. 


Exception 13 is generated when the gate is used if a 
destination selector does not refer to the correct de- 
scriptor type. The word count field is used in the call 
gate descriptor to indicate the number of parameters 
(O-—31 words) to be automatically copied from the 
caller’s stack to the stack of the called routine when 
a control transfer changes privilege levels. The word 
count field is not used by any other gate descriptor. 


The access byte format is the same for all gate de- 
scriptors. P = 1 indicates that the gate contents are 
valid. P = 0 indicates the contents are not valid and 
causes exception 11 if referenced. DPL is the de- 


PROGRAM VISIBLE 


SEGMENT SELECTORS 


15 0 


SEGMENT REGISTERS 
(LOADED BY PROGRAM) 


RIGHTS SEGMENT PHYSICAL BASE ADDRESS 
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scriptor privilege level and specifies when this de- 
scriptor may be used by a task (refer to privilege 
discussion below). Bit 4 must equal 0 to indicate a 
system control descriptor. The type field specifies 
the descriptor type as indicated in Figure 13. 


SEGMENT DESCRIPTOR CACHE REGISTERS 


A segment descriptor cache register is assigned to 
each of the four segment registers (CS, SS, DS, ES). 
Segment descriptors are automatically loaded 
(cached) into a segment descriptor cache register 
(Figure 14) whenever the associated segment regis- 
ter is loaded with a selector. Only segment descrip- 
tors may be loaded into segment descriptor cache 
registers. Once loaded, all references to that seg- 
ment of memory use the cached descriptor informa- 
tion instead of reaccessing the descriptor. The de- 
scriptor cache registers are not visible to programs. 
No instructions exist to store their contents. They 
only change when a segment register is loaded. 


SELECTOR FIELDS 


A protected mode selector has three fields: descrip- 
tor entry index, local or global descriptor table indi- 
cator (Tl), and selector privilege (RPL) as shown in 
Figure 15. These fields select one. of two memory 
based tables of descriptors, select the appropriate 
table entry and allow highspeed testing of the selec- 
tor’s privilege attribute (refer to privilege discussion 
below). 


SELECTOR 


FUNCTION 


REQUESTED | INDICATES SELECTOR PRIVILEGE 
PRIVILEGE LEVEL DESIRED 

LEVEL 

(RPL) 


INDICATOR GDT) 
(TI) = 1 USE LOCAL DESCRIPTOR TABLE 
: (LOT) 


iwoex | SELECT DESCRIPTOR ENTRY IN TABLE 
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TABLE Tl = 0 USE GLOBAL DESCRIPTOR TABLE 
(GD 
Tl 


Figure 15. Selector Fields 


PROGRAM INVISIBLE 


SEGMENT SIZE 


16 15 


SEGMENT DESCRIPTOR CACHE REGISTERS 
(AUTOMATICALLY LOADED BY CPU) 


231923-14 


Figure 14. Descriptor Cache Registers 


2-17 


80C286 


LOCAL AND GLOBAL DESCRIPTOR TABLES 


Two tables of descriptors, called descriptor tables, 
contain all descriptors accessible by a task at any 
given time. A descriptor table is a linear array of up 
to 8192 descriptors. The upper 13 bits of the selec- 
tor value are an index into a descriptor table. Each 
table has a 24-bit base register to locate the descrip- 
tor table in physical memory and a 16-bit limit regis- 
ter that confine descriptor access to the defined lim- 
its of the table as shown in Figure 16. A restartable 
exception (13) will occur if an attempt is made to 
reference a descriptor outside the table limits. 


One table, called the Global Descriptor table (GDT), 
contains descriptors available to all tasks. The other 
table, called the Local Descriptor Table (LDT), con- 
tains descriptors that can be private to a task. Each 
task may have its own private LDT. The GDT may 
contain all descriptor types except interrupt and trap 
descriptors. The LDT may contain only segment, 
task gate, and call gate descriptors. A segment can- 
not be accessed by a task if its segment descriptor 
does not exist in either descriptor table at the time of 
access. 


15 


0 
GOT LIMIT ee 
0 


GDT BASE 
24-BIT PHYS AD. 


ee 


LDT LIMIT re 


| 
FROM LDT DESCR. | 
WITHINGDT) | 
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Figure 16. Local and Global 
Descriptor Table Definition 


The LGDT and LLDT instructions load the base and 
limit of the global and local descriptor tables. LGDT 
and LLDT are privileged, i.e. they may only be exe- 
cuted by trusted programs operating at level 0. The 
LGDT instruction loads a six byte field containing the 
16-bit table limit and 24-bit physical base address of 
the Global Descriptor Table as shown in Figure 17. 
The LDT instruction loads a selector which refers to 
a Local Descriptor Table descriptor containing the 
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base address and limit for an LDT, as shown in Fig- 
ure 12. 


231923-17 
*Must be set to 0 for compatibility with 80386. 


Figure 17. Global Descriptor Table and 
interrupt Descriptor Table Data Type 


INTERRUPT DESCRIPTOR TABLE 


The protected mode 80C286 has a third descriptor 
table, called the Interrupt Descriptor Table (IDT) 
(see Figure 18), used to define up to 256 interrupts. 
It may contain only task gates, interrupt gates and 
trap gates. The IDT (Interrupt Descriptor Table) has 
a 24-bit physical base and 16-bit limit register in the 
CPU. The privileged LIDT instruction loads these 
registers with a six byte value of identical form to 
that of the LGDT instruction (see Figure 17 and Pro- 
tected Mode Initialization). 


GATE FOR 
INTERRUPT #n 
GATE FOR 
INTERRUPT #n-1 


INTERRUPT 
DESCRIPTOR 
TABLE 

(10T) 


GATE FOR 
INTERRUPT #1 
GATE FOR 
INTERRUPT #0 


IDT LIMIT g 
IDT BASE 


231923-18 
Figure 18. Interrupt Descriptor Table Definition 


References to IDT entries are made via INT instruc- 
tions, external interrupt vectors, or exceptions. The 
IDT must be at least 256 bytes in size to allocate 
space for all reserved interrupts. 


Privilege 

The 80C286 has a four-level hierarchical privilege 
system which controls the use of privileged instruc- 
tions and access to descriptors (and their associat- 
ed segments) within a task. Four-level privilege, as 
shown in Figure 19, is an extension of the user/su- 
pervisor mode commonly found in minicomputers. 
The privilege levels are numbered 0 through 3. 


CPU 
ENFORCED 


SOFTWARE 
INTERFACES OS EXTENSIONS 


SYSTEM 
SERVICES 
PL 


NOTE: PL BECOMES NUMERICALLY LOWER AS PRIVILEGE LEVEL 
INCREASES 
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Figure 19 


Level 0 is the most privileged level. Privilege levels 
provide protection within a task. (Tasks are isolated 
by providing private LDT’s for each task.) Operating 
system routines, interrupt handlers, and other sys- 
tem software can be included and protected within 
the virtual address space of each task using the four 
levels of privilege. Each task in the system has a 
separate stack for each of its privilege levels. 


Tasks, descriptors, and selectors have a privilege 
level attribute that determines whether the descrip- 
tor may be used. Task privilege effects the use of 
instructions and descriptors. Descriptor and selector 
privilege only effect access to the descriptor. 


TASK PRIVILEGE 


A task always executes at one of the four privilege 
levels. The task privilege level at any specific instant 
is called the Current Privilege Level (CPL) and is de- 
fined by the lower two bits of the CS register. CPL 
cannot change during execution in a single code 
segment. A task’s CPL may only be changed by con- 
trol transfers through gate descriptors to a new code 
segment (See Control Transfer). Tasks begin exe- 
cuting at the CPL value specified by the code seg- 
ment selector within TSS when the task is initiated 
via a task switch operation (See Figure 20). A task 
executing at Level 0 can access all data segments 
defined in the GDT and the task’s LDT and is con- 
sidered the most trusted level. A task executing a 
Level 3 has the most restricted access to data and is 
considered the least trusted level. 


DESCRIPTOR PRIVILEGE 


Descriptor privilege is specified by the Descriptor 
Privilege Level (DPL) field of the descriptor access 
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byte. DPL specifies the least trusted task privilege 
level (CPL) at which a task may access the descrip- 
tor. Descriptors with DPL = 0 are the most protect- 
ed. Only tasks executing at privilege level 0 
(CPL = 0) may access them. Descriptors with DPL 
= 3 are the least protected (i.e. have the least re- 
stricted access) since tasks can access them when 
CPL = 0, 1, 2, or 3. This rule applies to all descrip- 
tors, except LDT descriptors. 


SELECTOR PRIVILEGE 


Selector privilege is specified by the Requested Priv- 
ilege Level (RPL) field in the least significant two bits 
of a selector. Selector RPL may establish a less 
trusted privilege level than the current privilege level 
for the use of a selector. This level is called the 
task’s effective privilege level (EPL). RPL can only 
reduce the scope of a task’s access to data with this 
selector. A task’s effective privilege is the numeric 
maximum of RPL and CPL. A selector with RPL = 0 
imposes no additional restriction on its use while a 
selector with RPL = 3 can only refer to segments at 
privilege Level 3 regardless of the task’s CPL. RPL 
is generally used to verify that pointer parameters 
passed to a more trusted procedure are not allowed 
to use data at a more privileged level than the caller 
(refer to pointer testing instructions). 


Descriptor Access and Privilege 
Validation 


Determining the ability of a task to access a seg- 
ment involves the type of segment to be accessed, 
the instruction used, the type of descriptor used and 
CPL, RPL, and DPL. The two basic types of segment 
accesses are control transfer (selectors loaded into 
CS) and data (selectors loaded into DS, ES or SS). 


DATA SEGMENT ACCESS 


Instructions that load selectors into DS and ES must 
refer to a data segment descriptor or readable code 
segment descriptor. The CPL of the task and the 
RPL of the selector must be the same as or more 
privileged (numerically equal to or lower than) than 
the descriptor DPL. In general, a task can. only ac- 
cess data segments at the same or less privileged 
levels than the CPL or RPL (whichever is numerically 
higher) to prevent a program from accessing data it 
cannot be trusted to use. 


An exception to the rule is a readable conforming 
code segment. This type of code segment can be 
read from any privilege level. 


If the privilege checks fail (e.g. DPL is numerically 
less than the maximum of CPL and RPL) or an incor- 
rect type of descriptor is referenced (e.g. gate de- 
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scriptor or execute only code segment) exception 13 
occurs. If the segment is not present, exception 11 
is generated. 


Instructions that load selectors into SS must refer to 
data segment descriptors for writable data seg- 
ments. The descriptor privilege (DPL) and RPL must 
equal CPL. All other descriptor types or a privilege 
level violation will cause exception 13. A not present 
fault causes exception 12. 


CONTROL TRANSFER 


Four types of control transfer can occur when a se- 
lector is loaded into CS by a control transfer opera- 
tion (see Table 10). Each transfer type can only oc- 
cur if the operation which loaded the selector refer- 
ences the correct descriptor type. Any violation of 
these descriptor usage rules (e.g. JMP through a call 
gate or RET to a Task State Segment) will cause 
exception 13. 


The ability to reference a descriptor for control trans- 
fer is also subject to rules of privilege. A CALL or 
JUMP instruction may only reference a code seg- 
ment descriptor with DPL equal to the task CPL ora 
conforming segment with DPL of equal or greater 
privilege than CPL. The RPL of the selector used to 
reference the code descriptor must have as much 
privilege as CPL. 


RET and IRET instructions may only reference code 
segment descriptors with descriptor privilege equal 
to or less privileged than the task CPL. The selector 
loaded into CS is the return address from the stack. 
After the return, the selector RPL is the task’s new 
CPL. If CPL changes, the old stack pointer is popped 
after the return address. 


When a JMP or CALL references a Task State Seg- 
ment descriptor, the descriptor DPL must be the 
same or less privileged than the task’s CPL. Refer- 
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ence to a valid Task State Segment descriptor caus- 
es a task switch (see Task Switch Operation). Refer- 
ence to a Task State Segment descriptor at a more 
privileged level than the task’s CPL generates ex- 
ception 13. 


When an instruction or interrupt references a gate 
descriptor, the gate DPL must have the same or less 
privilege than the task CPL. If DPL is at a more privi- 
leged level than CPL, exeception 13 occurs. If the 
destination selector contained in the gate refer- 
ences a code segment descriptor, the code seg- 
ment descriptor DPL must be the same or more priv- 
ileged than the task CPL. If not, Exception 13 is is- 
sued. After the control transfer, the code segment 
descriptors DPL is the task’s new CPL. If the desti- 
nation selector in the gate references a task state 
segment, a task switch is automatically performed 
(see Task Switch Operation). 


The privilege rules on control transfer require: 


— JMP or CALL direct to a code segment (code 
segment descriptor) can only be to a conforming 
segment with DPL of equal or greater privilege 
than CPL or a non-conforming segment at the 
same privilege level. 


— interrupts within the task or calls that may 
change privilege levels, can only transfer control 
through a gate at the same or a less privileged 
level than CPL to a code segment at the same or 
more privileged level than CPL. , 


— return instructions that don’t switch tasks can 
only return control to a code segment at the 
same or less privileged level. 


— task switch can be performed by a call, jump or 
interrupt which references either a task gate or 
task state segment at the same or less privileged 
level. | 


Table 10. Descriptor Types Used for Control Transfer 


within task may change CPL. 


Task Switch 


Descriptor Descriptor 
Control Transfer Types Operation Types 


Intersegment within the same privilege level JMP, CALL, RET, IRET* Code Segment | GDT/LDT 
CALL Call Gate GDT/LDT 


Interrupt Instruction, 
Exception, External 
Interrupt Gate 


Intersegment to a lower privilege level (changes task CPL) RET, IRET* Code Segment 


Intersegment to the same or higher privilege level Interrupt 


CALL, JMP Task State GDT 
Segment 


CALL, JMP GDT/LDT 


Trap or 
Interrupt 


GDT/LDT 


IRET** 
Interrupt Instruction, 
Exception, External 
Interrupt 


*NT (Nested Task bit of flag word) = 0 


**NT (Nested Task bit of flag word) = 1 
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PRIVILEGE LEVEL CHANGES 


Any control transfer that changes CPL within the 
task, causes a change of stacks as part of the oper- 
ation. Initial values of SS:SP for privilege levels 0, 1, 
and 2 are kept in the task state segment (refer to 
Task Switch Operation). During a JMP or CALL con- 
trol transfer, the new stack pointer is loaded into the 
SS and SP registers and the previous stack pointer 
is pushed onto the new stack. 


When returning to the original privilege level, its 
stack is restored as part of the RET or IRET instruc- 
tion operation. For subroutine calls that pass param- 
eters on the stack and cross privilege levels, a fixed 
number of words, as specified in the gate, are cop- 
ied from the previous stack to the current stack. The 
inter-segment RET instruction with a stack adjust- 
ment value will correctly restore the previous stack 
pointer upon return. 


Protection 


The 80C286 includes mechanisms to protect critical 
instructions that affect the CPU execution state (e.g. 
HLT) and code or data segments from improper us- 
age. These protection mechanisms are grouped into 
three forms: 


Restricted usage of segments (e.g. no write al- 
lowed to read-only data segments). The only seg- 
ments available for use are defined by descrip- 
tors in the Local Descriptor Table (LDT) and 
Global Descriptor Table (GDT). 


Restricted access to segments via the rules of 
privilege and descriptor usage. 


Privileged instructions or operations that may 
only be executed at certain privilege levels as de- 
termined by the CPL and I/O Privilege Level 
(IOPL). The IOPL is defined by bits 14 and 13 of 
the flag word. 


These checks are performed for all instructions and 
can be split into three categories: segment load 
checks (Table 11), operand reference checks (Table 
12), and privileged instruction checks (Table 13). 
Any violation of the rules shown will result in an ex- 
ception. A not-present exception related to the stack 
segment causes exception 12. 


The IRET and POPF instructions do not perform 
some of their defined functions if CPL is not of suffi- 
cient privilege (numerically small enough). Precisely 
these are: 


e The IF bit is not changed if CPL > IOPL. 
e The IOPL field of the flag word is not changed if 
CPL; >. 


No exceptions or other indication are given when 
these conditions occur. 
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Table 11. Segment Register Load Checks 


Exception 
Error Description 


Descriptor table limit exceeded 
Segment descriptor not-present 11 0r12 
Privilege rules violated 


Invalid descriptor/segment type seg- 
ment register load: 
—Read only data segment load to 
SS 
—Special Control descriptor load to 
DS, ES, SS 
—Execute only segment load to 
DS, ES, SS 
—Data segment load to CS 
—Read/Execute code segment 
load to SS 


Table 12. Operand Reference Checks 


Exception 
Error Description 
13 


Write into code segment 

Read from execute-only code 

segment 13 
Write to read-only data segment 

Segment limit exceeded! 


NOTE: 
Carry out in offset calculations is ignored. 
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Table 13. Privileged Instruction Checks 


Exception 
Error Description 


CPL # 0 when executing the following 
instructions: a 
LIDT, LLDT, LGDT, LTR, LMSW, 
CTS, HLT 


CPL > IOPL when executing the fol- 
lowing instructions: 
INS, IN, OUTS, OUT, STI, CLI, 
LOCK 


EXCEPTIONS 


The 80C286 detects several types of exceptions 
and interrupts, in protected mode (see Table 14). 
Most are restartable after the exceptional condition 
is removed. Interrupt handlers for most exceptions 
can read an error code, pushed on the stack after 
the return address, that identifies the selector in- 
volved (0 if none). The return address normally 
points to the failing instruction, including all leading 
prefixes. For a processor extension segment over- 
run exception, the return address will not point at the 
ESC instruction that caused the exception; however, 
the processor extension registers may contain the 
address of the failing instruction. 
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Table 14. Protected Mode Exceptions 
Return 


Error 


Interrupt Address 
Vector At Falling ec 
instruction? 


Double exception detected 
Processor extension segment overrun 

Invalid task state segment 

Segment not present 

Stack segment overrun or stack segment not present 
General protection 


NOTE: 

1. When a PUSHA or POPA instruction attempts to wrap around the stack segment, the machine state after the exception 
will not be restartable because stack segment wrap around is not permitted. This condition is identified by the value of the 
saved SP being either 0000(H), 0001(H), FFFE(H), or FFFF(H). 

2. These exceptions indicate a violation to privilege rules or usage rules has occurred. Restart is generally not attempted 


under those conditions. 


These exceptions indicate a violation to privilege 
rules or usage rules has occurred. Restart is gener- 
ally not attempted under those conditions. 


All these checks are performed for all instructions 
and can be split into three categories: segment load 
checks (Table 11), operand reference checks (Table 
12), and privileged instruction checks (Table 13). 
Any violation of the rules shown will result in an ex- 
ception. A not-present exception causes exception 
11 or 12 and is restartable. 


Special Operations 


TASK SWITCH OPERATION 


The 80C286 provides a built-in task switch operation 
which saves the entire 80C286 execution state (reg- 
isters, address space, and a link to the previous 
task), loads a new execution state, and commences 
execution in the new task. Like gates, the task 
switch operation is invoked by executing an inter- 
segment JMP or CALL instruction which refers to a 
Task State Segment (TSS) or task gate descriptor in 
the GDT or LDT. An INT n instruction, exception, or 
external interrupt may also invoke the task switch 
operation by selecting a task gate descriptor in the 
associated IDT descriptor entry. 


The TSS descriptor points at a segment (see Figure 
20) containing the entire 80C286 execution state 
while a task gate descriptor contains a TSS selector. 
The limit field of the descriptor must be >002B(H). 


Each task must have a TSS associated with it. The 
current TSS is identified by a special register in the 
80C286 called the Task Register (TR). This register 
contains a selector referring to the task state seg- 
ment descriptor that defines the. current TSS. A hid- 
den base and limit register associated with TR are 
loaded whenever TR is loaded with a new selector. 
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The IRET instruction is used to return control to the 
task that called the current task or was interrupted. 
Bit 14 in the flag register is called the Nested Task 
(NT) bit. It controls the function of the IRET instruc- 
tion. If NT = 0, the IRET instruction performs the 
regular current task by popping values off the stack; 
when NT = 1, IRET performs a task switch opera- 
tion back to the previous task. 


When a CALL, JMP, or INT instruction initiates a 
task switch, the old (except for case of JMP) and 
new TSS will be marked busy and the back link field 
of the new TSS set to the old TSS selector. The NT 
bit of the new task is set by CALL or INT initiated 
task switches. An interrupt that does not cause a 
task switch will clear NT. NT may also be set or 
cleared by POPF or IRET instructions. 


The task state segment is marked busy by changing 
the descriptor type field from Type 1 to Type 3. Use 
of a selector that references a busy task state seg- 
ment causes Exception 13. 


PROCESSOR EXTENSION CONTEXT 
SWITCHING 


The context of a processor extension (such as the 
80287 numerics processor) is not changed by the 
task switch operation. A processor extension con- 
text need only be changed when a different task at- 
tempts to use the processor extension (which still 
contains the context of a previous task). The 
80C286 detects the first use of a processor exten- 
sion after a task switch by causing the processor 
extension not present exception (7). The interrupt 
handler may then decide whether a context change 
is necessary. 


Whenever the 80C286 switches tasks, it sets the 
Task Switched (TS) bit of the MSW. TS indicates 
that a processor extension context may belong to a 
different task than the current one. The processor 
extension not present exception (7) will occur when 
attempting to execute an ESC or WAIT instruction if 
TS=1 and a processor extension is present (MP = 1 


in MSW). 
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POINTER TESTING INSTRUCTIONS 
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tions use the memory management hardware to ver- 


ify that a selector value refers to an appropriate seg- 
The 80C286 provides several instructions to speed ment without risking an exception. A condition flag 
pointer testing and consistency checks for maintain- (ZF) indicates whether use of the selector or seg- 
ing system integrity (see Table 15). These instruc- ment will cause an exception. 


TASK REGISTER 


TASK LOT SELECTOR 
DS SELECTOR 


CS SELECTOR: 
ES SELECTOR 


FLAG WORD 

IP (ENTRY POINT) 

SS FOR CPL 2 

SP FOR CPL 2 

SS FOR CPL 1 

SP FOR CPL1 

SS FOR CPLO 

SP FOR CPLO 

BACK LINK SELECTOR TO TSS 


AN AVAILABLE TASK STATE 
SEGMENT. MAY BE USED AS 
THE DESTINATION OF A TASK 
SWITCH OPERATION. 


A BUSY TASK STATE SEGMENT. 
CANNOT BE USED AS THE 
DESTINATION OF A TASK 
SWITCH. 


|p [DESCRIPTION 
|_1 | BASE AND LIMIT FIELDS ARE VALID 


SEGMENT IS NOT PRESENT IN 
MEMORY, BASE AND LIMIT ARE NOT 
DEFINED 


CURRENT 


INITIAL 
STACKS 
FOR CPL 0,1,2 
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Figure 20. Task State Segment and TSS Registers 
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Table 15. 80C286 Pointer Test Instructions 


[Instruction | Operands | Function 


Selector, Adjust Requested Privilege 
Register Level: adjusts the RPL of 
the selector to the numeric 
maximum of current selec- 
tor RPL value and the RPL 
value in the register. Set 
zero flag if selector RPL 
was changed by ARPL. 


VERify for Read: sets the 
zero flag if the segment re- 
ferred to by the selector 
can be read. 


VERify for Write: sets the 
zero flag if the segment re- 
ferred to by the selector 
can be written. 


Load Segment Limit: reads 
the segment limit into the 
register if privilege rules 
and descriptor type allow. 
Set zero flag if successful. 


Load Access Rights: reads 
the descriptor access 
rights byte into the register 
if privilege rules allow. Set 
zero flag if successful. 


Selector 


Selector 


Register, 
Selector 


Register, 
Selector 


DOUBLE FAULT AND SHUTDOWN 


If two separate exceptions are detected during a sin- 
gle instruction execution, the 80C286 performs the 
double fault exception (8). If an execution occurs 
during processing of the double fault exception, the 
80C286 will enter shutdown. During shutdown no 
further instructions or exceptions are processed. Ei- 
ther NMI (CPU remains in protected mode) or RE- 
SET (CPU exits protected mode) can force the 
80C286 out of shutdown. Shutdown is externally sig- 
nalled via a HALT bus operation with A; LOW. 


PROTECTED MODE INITIALIZATION 


The 80C286 initially executes in real address mode 
after RESET. To allow initialization code to be 
placed at the top of physical memory, Ao3—-Agp will 
be HIGH when the 80C286 performs memory refer- 
ences relative to the CS register until CS is changed. 
A23-AzQ9 will be zero for references to the DS, ES, or 
SS segments. Changing CS in real address mode 
will force Ao3—Az9 LOW whenever CS is used again. 
The initial CS:IP value of FOOO:FFFO provides 64K 
bytes of code space for initialization code without 
changing CS. 


Protected mode operation requires several registers 
to be initialized. The GDT and IDT base registers 
must refer to a valid GDT and IDT. After executing 
the LMSW instruction to set PE, the 80C286 must 
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immediately execute an intra-segment JMP instruc- 


tion to clear the instruction queue of instructions de- 
coded in real address mode. 


To force the 80C286 CPU registers to match the 
initial protected mode state assumed by software, 
execute a JMP instruction with a selector referring to 
the initial TSS used in the system. This will load the 
task register, local descriptor table register, segment 
registers and initial general register state. The TR 
should point at a valid TSS since any task switch 
operation involves saving the current task state. 


SYSTEM INTERFACE 


The 80C286 system interface appears in two forms: 
a local bus and a system bus. The local bus consists 
of address, data, status, and control signals at the 
pins of the CPU. A system bus is any buffered ver- 
sion of the local bus. A system bus may also differ 
from the local bus in terms of coding of status and 
control lines and/or timing and loading of signals. 
The 80C286 family includes several devices to gen- 
erate standard system buses such as the IEEE 796 
standard MULTIBUS. 


Bus Interface Signals and Timing 


The 80C286 microsystem local bus interfaces the 
80C286 to local memory and I/O components. The 
interface has 24 address lines, 16 data lines, and 8 
status and control signals. 


The 80C286 CPU, 82C284 clock generator, 82C288 
bus controller, transceivers, and latches provide a 
buffered and decoded system bus interface. The 
82C284 generates the system clock and synchroniz- 
es READY and RESET. The 82C288 converts bus 
operation status encoded by the 80C286 into com- 
mand and bus control signals. These components 
can provide the timing and electrical power drive lev- 
els required for most system bus interfaces including 
the Multibus. 


Physical Memory and I/O Interface 


A maximum of 16 megabytes of physical memory 
can be addressed in protected mode. One mega- 
byte can be addressed in real address mode. Memo- 
ry is accessible as bytes or words. Words consist of 
any two consecutive bytes addressed with the least 
significant byte stored in the lowest address. 


Byte transfers occur on either half of the 16-bit local 
data bus. Even bytes are accessed over D7-Do 
while odd bytes are transferred over Di5-—Dg. Even- 
addressed words are transferred over Dy5-Do in 
one bus cycle, while odd-addressed word require 
two bus operations. The first transfers data on 
D;5—-Dg, and the second transfers data on D7—Do. 
Both byte data transfers occur automatically, trans- 
parent to software. 


| 
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Two bus signals, Ap and BHE, control transfers over 
the lower and upper halves of the data bus. Even 
address byte transfers are indicated by Ag LOW and 
BHE HIGH. Odd address byte transfers are indicat- 


ed by Ag HIGH and BHE LOW. Both Ap and BHE are 
LOW for even address word transfers. 


The I/O address space contains 64K addresses in 
both modes. The I/O space is accessible as either 
bytes or words, as is memory. Byte wide peripheral 
devices may be attached to either the upper or lower 
byte of the data bus. Byte-wide I/O devices attached 
to the upper data byte (D;5-Dg) are accessed with 
odd I/O addresses. Devices on the lower data byte 
are accessed with even |/O addresses. An interrupt 
controller such as Intel’s 82C59A-2 must be con- 
nected to the lower data byte (D7—Do) for proper 
return of the interrupt vector. 


Bus Operation 


The 80C286 uses a double frequency system clock 
(CLK input) to control bus timing. All signals on the 
local bus are measured relative to the system CLK 
input. The CPU divides the system clock by 2 to pro- 
duce the internal processor clock, which determines 
bus state. Each processor clock is composed of two 
system clock cycles named phase 1 and phase 2. 
The 82C284 clock generator output (PCLK) identi- 
fies the next phase of the processor clock. (See Fig- 
ure 21.) 


ONE PROCESSOR CLOCK CYCLE 
ONE BUS T STATE 


PHASE 1 PHASE 2 
OF PROCESSOR —>|<— OF PROCESSOR 


CLOCK CYCLE CLOCK CYCLE 


< ONE SYSTEM 
CLK CYCLE 
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Figure 21. System and Processor 
Clock Relationships 


Six types of bus operations are supported; memory 
read, memory write, |/O read, I/O write, interrupt ac- 
knowledge, and halt/shutdown. Data can be trans- 
ferred at a maximum rate of one word per two proc- 
essor Clock cycles. 


The 80C286 bus has three basic states: idle (T)), 
send status (Ts), and perform command (T,). The 
80C286 CPU also has a fourth local bus state called 
hold (Tp). Th indicates that the 80C286 has surren- 
dered control of the local bus to another bus master 
in response to a HOLD request. 


Each bus state is one processor clock long. Figure 
22 shows the four 80C286 local bus states and al- 
lowed transitions. 


80C286 


oo: @ NEW CYCLE 


Figure 22. 80C286 Bus States 
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Bus States 


The idle (Tj) state indicates that no data transfers 
are in progress or requested. The first active state 
Tg is signaled by status line S1 or SO going LOW 
and identifying phase 1 of the processor clock. Dur- 
ing Ts, the command encoding, the address, and 
data (for a write operation) are available on the 
80C286 output pins. The 82C288 bus controller de- 
codes the status signals and generates Multibus 
compatible read/write command and local trans- 
ceiver control signals. 


After Ts, the perform command (Tc) state is en- 
tered. Memory or I/O devices respond to the bus 
operation during Tc, either transferring read data to 
the CPU or accepting write data. Tc states may be 
repeated as often as necessary to assure sufficient 
time for the memory or I/O device to respond. The 
READY signal determines whether T¢ is repeated. A 
repeated Tc state is called a wait state. 


During hold (Tp), the 80C286 will float* all address, 
data, and status output pins enabling another bus 
master to use the local bus. The 80C286 HOLD in- 
put signal is used to place the 80C286 into the T}, 
state. The 80C286 HLDA output signal indicates that 
the CPU has entered Tp. 


Pipelined Addressing 


The 80C286 uses a local bus interface with pipe- 
lined timing to allow as much time as possible for 
data access. Pipelined timing allows a new bus oper- 
ation to be initiated every two processor cycles, 
while allowing each individual bus operation to last 
for three processor cycles. 


The timing of the address outputs is pipelined such 
that the address of the next bus operation becomes 
available during the current bus operation. Or in oth- 
er words, the first clock of the next bus operation is 
overlapped with the last clock of the current bus op- 
eration. Therefore, address decode and routing logic 
can operate in advance of the next bus operation. 


*NOTE: See section on bus hold circuitry. 
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Figure 23. Basic Bus Cycle 


External address latches may hold the address sta- 
ble for the entire bus operation, and provide addi- 
tional AC and DC buffering. 


The 80C286 does not maintain the address of the 
current bus operation during all T, states. Instead, 
the address for the next bus operation may be emit- 
ted during phase 2 of any T,. The address remains 
valid during phase 1 of the first T, to guarantee hold 
time, relative to ALE, for the address latch inputs. 


Bus Control Signals 


The 82C288 bus controller provides control signals; 
address latch enable (ALE), Read/Write commands, 
data transmit/receive (DT/R), and data enable 
(DEN) that control the address latches, data trans- 
ceivers, write enable, and output sa ta for memory 
and |/O systems. 


The Address Latch Enable (ALE) output determines 
when the address may be latched. ALE provides at 
least one system CLK period of address hold time 
from the end of the previous bus operation until the 
address for the next bus operation appears at the 
latch outputs. This address hold time is required to 
support MULTIBUS and common memory systems. 


The data bus transceivers are controlled by 82C288 
outputs Data Enable (DEN) and Data Transmit/Re- 
ceive (DT/R). DEN enables the data transceivers; 
while DT/R controls tranceiver direction. DEN and 
DT/R are timed to prevent bus contention between 
the bus master, data bus transceivers, and system 
data bus transceivers. 
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Command Timing Controls 


Two system timing customization options, command 
extension and command delay, are provided on the 
80C286 local bus. 


Command extension allows additional time for exter- 
nal devices to respond to a command and is analo- 
gous to inserting wait states on the 8086. External 
logic can control the duration of any bus operation 
such that the operation is only as long as necessary. 
The READY input signal can extend any bus opera- 
tion for as long as necessary. 


Command delay allows an increase of address or 
write data setup time to system bus command active 
for any bus operation by delaying when the system 
bus command becomes active. Command delay is 
controlled by the 82C288 CMDLY input. After Ts, 
the bus controller samples CMDLY at each failing 
edge of CLK. If CMDLY is HIGH, the 82C288 will not 
activate the command signal. When CMDLY is LOW, 
the 82C288 will activate the command signal. After 
the command becomes active, the CMDLY input is 
not sampled. 


When a command is delayed, the available re- 
sponse time from command active to return read 
data or accept write data is less. To customize sys- 
tem bus timing, an address decoder can determine 
which bus operations require delaying the com- 
mand. The CMDLY input does not affect the timing 
of ALE, DEN, or DT/R. 
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Figure 24. CMDLY Controls the Leading Edge of Command Signal 


Figure 24 illustrates four uses of CMDLY. Example 1 
shows delaying the read command two system 
CLKs for cycle N-1 and no delay for cycle N, and 
example 2 shows delaying the read command one 
system CLK for cycle N-1 and one system CLK de- 
lay for cycle N. 


Bus Cycle Termination 


At maximum transfer rates, the 80C286 bus alter- 
nates between the status and command states. The 
bus status signals become inactive after T, so that 
they may correctly signal the start of the next bus 
operation after the completion of the current cycle. 
No external indication of T, exists on the 80C286 
local bus. The bus master and bus controller enter 
Te directly after T, and continue executing T, cycles 
until terminated by READY. 


READY Operation 


The current bus master and 82C288 bus controller 
terminate each bus operation simultaneously to 
achieve maximum bus operation bandwidth. Both 
are informed in advance by READY active (open- 
collector output from 82C284) which identifies the 
last Tc cycle of the current bus operation. The bus 
master and bus controller must see the same sense 


of the READY signal, thereby requiring READY be 
synchronous to the system clock. 


Synchronous Ready 


The 82C284 clock generator provides READY syn- 
chronization from both synchronous and asynchro- 
nous sources (see Figure 25). The synchronous 
ready input (SRDY) of the clock generator is sam- 
pled with the falling edge of CLK at the end of phase 
1 of each T,. The state of SRDY is then broadcast to 
the bus master and bus controller via the READY 
output line. 


Asynchronous Ready 


Many systems have devices or subsystems that are 
asynchronous to the system clock. As a result, their 
ready outputs cannot be guaranteed to meet the 
82C284 SRDY setup and hold time requirements. 
But the 82C284 asynchronous ready input (ARDY) is 
designed to accept such signals. The ARDY input is 
sampled at the beginning of each Tc cycle by 
82C284 synchronization logic. This provides one 
system CLK cycle time to resolve its value before 
broadcasting it to the bus master and bus controller. 
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NOTES: 
1. SRDYEN is active low. 


2. If SRDYEN is high, the state of SRDY will no affect READY. 


3. ARDYEN is active low. 


(SEE NOTE 3.) 
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Figure 25. Synchronous and Asynchronous Ready 


ARDY or ARDYEN must be HIGH at the end of Ts. 
ARDY cannot be used to terminate bus cycle with no 
wait states. 


Each ready input of the 82C284 has an enable pin 
(SRDYEN and ARDYEN) to select whether the cur- 
rent bus operation will be terminated by the synchro- 
nous or asynchronous ready. Either of the ready in- 
puts may terminate a bus operation. These enable 
inputs are active low and have the same timing as 
their respective ready inputs. Address decode logic 
usually selects whether the current bus operation 
should be terminated by ARDY or SRDY 


Data Bus Control 


Figures 26, 27, and 28 show how the DT/R, DEN, 
data bus, and address signals operate for different 
combinations of read, write, and idle bus operations. 
DT/R goes active (LOW) for a read operation. DT/R 
remains HIGH before, during, and between write op- 
erations. 
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The data bus is driven with write data during the 
second phase of Ts. The delay in write data timing 
allows the read data drivers, from a previous read 
cycle, sufficient time to enter 3-state OFF* before 
the 80C286 CPU begins driving the local data bus 
for write operations. Write data will always remain 
valid for one system clock past the last T, to provide 
sufficient hold time for Multibus or other similar 
memory or I/O systems. During write-read or write- 
idle sequences the data bus enters 3-state OFF* 
during the second phase of the processor cycle after 
the last T,. In a write-write sequence the data bus 
does not enter 3-state OFF* between T, and Ts. 


Bus Usage 


The 80C286 local bus may be used for several func- 
tions: instruction data transfers, data transfers by 
other bus masters, instruction fetching, processor 
extension data transfers, interrupt acknowledge, and 
halt/shutdown. This section describes local bus ac- 
tivities which have special signals or requirements. 


*NOTE: See section on bus hold circuitry. 
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Figure 26. Back to Back Read-Write Cycies 
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Figure 27. Back to Back Write-Read Cycles 
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Figure 28. Back to Back Write-Write Cycles 


HOLD and HLDA 


HOLD AND HLDA allow another bus master to gain 
control of the local bus by placing the 80C286 bus 
into the T}, state. The sequence of events required 
to pass control between the 80C286 and another 
local bus master are shown in Figure 29. 


In this example, the 80C286 is initially in the T}, state 
as signaled by HLDA being active. Upon leaving Tp, 
as signaled by HLDA going inactive, a write opera- 
_ tion is started. During the write operation another 
local bus master requests the local bus from the 
80C286 as shown by the HOLD signal. After com- 
pleting the write operation, the 80C286 performs 
one Tj bus cycle, to guarantee write data hold time, 
then enters T}, as signaled by HLDA going active. 


The CMDLY signal and ARDY ready are used to 
start and stop the write bus command, respectively. 
Note that SRDY must be inactive or disabled by 
SRDYEN to guarantee ARDY will terminate the cy- 
cle. 


HOLD must not be active during the time from the 
leading edge of RESET until 34 CLKs following the 
trailing edge of RESET. 


Lock 


The CPU asserts an active lock signal during Inter- 
rupt-Acknowledge cycles, the XCHG instruction, and 
during some descriptor accesses. Lock is also as- 
serted when the LOCK prefix is used. The LOCK 
prefix may be used with the following ASM-286 as- 
sembly instructions; MOVS, INS, and OUTS. For bus 
cycles other than Interrupt-Acknowledge § cycles, 
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Lock will be active for the first and subsequent cy- 
cles of a series of cycles to be locked. Lock will not 
be shown active during the last cycle to be locked. 
For the next-to-last cycle, Lock will become inactive 
at the end of the first T, regardless of the number of 
wait-states inserted. For Interrupt-Acknowledge cy- 
cles, Lock will be active for each cycle, and will be- 
come inactive at the end of the first T, for each cy- 
cle regardless of the number of wait-states inserted. 


Instruction Fetching 


The 80C286 Bus Unit (BU) will fetch instructions 
ahead of the current instruction being executed. This 
activity is called prefetching. It occurs when the local 
bus would otherwise be idle and obeys the following 
rules: 


A prefetch bus operation starts when at least two 
bytes of the 6-byte prefetch queue are empty. 


The prefetcher normally performs word prefetches 
independent of the byte alignment of the code seg- 
ment base in physical memory. 


The prefetcher will perform only a byte code fetch 
operation for control transfers to an instruction be- 
ginning on a numerically odd physical address. 


Prefetching stops whenever a control transfer or 
HLT instruction is decoded by the IU and placed into 
the instruction queue. 


In real address mode, the prefetcher may fetch up to 
6 bytes beyond the last control transfer or HLT in- 
struction in a code segment. 
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In protected mode, the prefetcher will never cause a lf the last byte of a code segment appears on an 
segment overrun exception. The prefetcher stops at even physical memory address, the prefetcher will 
the last physical memory word of the code segment. read the next physical byte of memory (perform a 


Exception 13 will occur if the program attempts to word code fetch). The value of this byte is ignored 
execute beyond the last full instruction in the code and any attempt to execute it causes exception 13. 
segment. 
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NOTES: 

1. Status lines are not driven by 80C286, yet remain high due to internal pullup resistors during HOLD state. See section 
on bus hold circuitry. 

2. Address, M/IO and COD/INTA may start floating during any Tc depending on when internal 80C286 bus arbiter 
decides to release bus to external HOLD. The float starts in 62 of Tc. See section on bus hold circuitry. 

3. BHE and LOCK may start floating after the end of any Tc depending on when internal 80C286 bus arbiter decides to 
release bus to external HOLD. The float starts in 61 of Tc. See section on bus hold circuitry. 

4. The minimum HOLD to HLDA time is shown. Maximum is one T} longer. 

5. The earliest HOLD time is shown. It will always allow a subsequent memory cycle if pending is shown. 

6. The minimum HOLD to HLDA time is shown. Maximum is a function of the instruction, type of bus cycle and other 
machine state (i.e., Interrupts, Waits, Lock, etc.). 

7. Asynchronous ready allows termination of the cycle. Synchronous ready does not signal ready in this example. Syn- 
chronous ready state is ignored after ready is signaled via the asynchronous input. 


Figure 29. MULTIBUS Write Terminated by Asynchronous Ready with Bus Hold 
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Processor Extension Transfers 


The processor extension interface uses I/O port ad- 
dresses 00F8(H), OOFA(H), and OOFC(H) which are 
part of the I/O port address range reserved by Intel. 
An ESC instruction with Machine Status Word bits 
EM = 0 and TS = Owill perform I/O bus operations 
to one or more of these I/O port addresses indepen- 
dent of the value of IOPL and CPL. 


ESC instructions with memory references enable the 
CPU to accept PEREQ inputs for processor exten- 
sion operand transfers. The CPU will determine the 
operand starting address and read/write status of 
the instruction. For each operand transfer, two or 
three bus operations are performed, one word trans- 
fer with |/O port address OOFA(H) and one or two 
bus operations with memory. Three bus operations 
are required for each word operand aligned on an 
odd byte address. 


NOTE: 
Odd-aligned numerics instructions should be avoid- 
ed when using an 80C286 system running six or 
more memory-write wait-states. The 80C286 can 
generate an incorrect numerics address if all the 
following conditions are met: 


— Two floating point (FP) instructions are fetched 
and in the 80C286 queue. 


— The first FP instruction is any floating point store 
except FSTSW AX. 


— The second FP instruction is any floating point 
store except FSTSW AX. 


— The second FP instruction accesses memory. 


— The operand of the first instruction is aligned on 
an odd memory address. 


— More than five wait-states are inserted during ei- 
ther of the last two memory write transfers 
(transferred as two bytes for odd aligned oper- 
ands) of the first instruction. 


The second FP instruction operand address will be 
incremented by one if these conditions are met. 
These conditions are most likely to occur in a multi- 
master system. For a hardware solution, contact 
your local Intel representative. 


Ten or more command delays should not be used 
when accessing the numerics coprocessor. Exces- 
sive command delays can cause the 80C286 and 
80287 to lose synchronization. 


interrupt Acknowledge Sequence 


Figure 30 illustrates an interrupt acknowledge se- 
quence performed by the 80C286 in response to an 
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INTR input. An interrupt acknowledge sequence 
consists of two INTA bus operations. The first allows 
a master 82C59A-2 Programmable Interrupt Control- 
ler (PIC) to determine which if any of its slaves 
should return the interrupt vector. An eight bit vector 
is read on DO-D7 of the 80C286 during the second 


INTA bus operation to select an interrupt handler 
routine from the interrupt table. 


The Master Cascade Enable (MCE) signal of the 
82C288 is used to enable the cascade address driv- 
ers, during INTA bus operations (See Figure 30), 
onto the local address bus for distribution to slave 
interrupt controllers via the system address bus. The 
80C286 emits the LOCK signal (active LOW) during 
T, of the first INTA bus operation. A local bus “hold” 
request will not be honored until the end of the sec- 
ond INTA bus operation. 


Three idle processor clocks are provided by the 
80C286 between INTA bus operations to allow for 
the minimum INTA to INTA time and CAS (cascade 
address) out delay of the 82C59A-2. The second 
INTA bus operation must always have at least one 
extra T, state added via logic controlling READY. 
This is needed to meet the 82C59A-2 minimum 
INTA pulse width. 


Local Bus Usage Priorities 


The 80C286 local bus is shared among several in- 
ternal units and external HOLD requests. In case of 
simultaneous requests, their relative priorities are: 


(Highest) Any transfers which assert LOCK either 
explicitly (via the LOCK instruction prefix) 
or implicitly (i.e. some segment descriptor 
accesses, interrupt acknowledge _ se- 
quence, or an XCHG with memory). 


The second of the two byte bus opera- 
tions required for an odd aligned word op- 
erand. 


The second or third cycle of a processor 
extension data transfer. 


Local bus request via HOLD input. 


Processor extension data operand trans- 
fer via PEREQ input. 


Data transfer performed by EU as part of 
an instruction. 


(Lowest) An instruction prefetch request from BU. 
The EU will inhibit prefetching two proc- 
essor clocks in advance of any data 
transfers to minimize waiting by EU for a 
prefetch to finish. 
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1. Data is ignored, upper data bus, Dg—D 5, should not change state during this time. 

2. First INTA cycle should have at least one wait state inserted to meet 8259A minimum INTA pulse width. 

3. Second INTA cycle should have at least one wait state inserted to meet 8259A minimum INTA pulse width. 

4. LOCK is active for the first INTA cycle to prevent a bus arbiter from releasing the bus between INTA cycles in a multi- 
master system. LOCK is also active for the second INTA cycle. 

5. Ao3—-Apg exits 3-state OFF during $2 of the second Tc in the INTA cycle. See section on bus hold circuitry. 


6. Upper data bus should not change state during this time. 


Figure 30. Interrupt Acknowledge Sequence 


Halt or Shutdown Cycles 


The 80C286 externally indicates halt or shutdown 
conditions as a bus operation. These conditions oc- 
cur due to a HLT instruction or multiple protection 
exceptions while attempting to execute one instruc- 
tion. A halt or shutdown bus operation is signalled 
when S1, SO and COD/INTA are LOW and M/IO is 
HIGH. A; HIGH indicates halt, and A; LOW indi- 
cates shutdown. The 82C288 bus controller does 
not issue ALE, nor is READY required to terminate a 
halt or shutdown bus operation. 


During halt or shutdown, the 80C286 may service 
PEREQ or HOLD requests. A processor extension 
segment overrun exception during shutdown will in- 
hibit further service of PEREQ. Either NMI or RESET 
will force the 80C286 out of either halt or shutdown. 
An INTR, if interrupts are enabled, or a processor 
extension segment overrun exception will also force 
the 80C286 out of halt. 
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THE POWER-DOWN FEATURE OF 
THE 80C286 


The 80C286, unlike the HMOS part, can enter into a 
power-down mode. By stopping the processor CLK, 
the processor will enter a power-down mode. Once 
in the power-down mode, all 80C286 outputs remain 
static (the same state as before the mode was en- 
tered). The 80C286 D.C. specification Iocs rates the 
amount of current drawn by the processor when in 
the power-down mode. When the CLK is reapplied 
to the processor, it will resume execution where it 
was interrupted. 


In order to obtain maximum benefits from the power- 
down mode, certain precautions should be taken. 
When in the power-down mode, all 80C286 outputs 
remain static and any output that is turned on and 
remains in a HIGH condition will source current 
when loaded. Best low-power performance can be 
obtained by first putting the processor in the HOLD 
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condition (turning off all of the output buffers), and 
then stopping the processor CLK in the phase 2 
state. In this condition, any output that is loaded will 
source only the “Bus Hold Sustaining Current”. 


When stopping the processor clock, minimum clock 
high and low times cannot be violated (no glitches 
on the clock line). 


Violating this condition can cause the 80C286 to 
erase its internal register states. Note that all inputs 
to the 80C286 (CLK, HOLD, PEREQ, RESET, 
READY, INTR, NMI, BUSY, and ERROR) should be 
at Voc or Vss; any other value will cause me 
80C286 to draw additional current. 


When coming out of power-down mode, the system 
CLK must be started with the same polarity in which 
it was stopped. An example power down sequence 
is shown in Figure 31. 


POWER DOWN MODE 


ADDRESS 
M/i0,COD/INTA VALID ADDRESS 


' 231923-31 


Figure 31. Example Power-Down Sequence 
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BUS HOLD CIRCUITRY 


To avoid high current conditions caused by floating 
inputs to peripheral CMOS devices and eliminate the 
need for pull-up/down resistors, ‘“‘bus-hold”’ circuitry 
has been used on all tri-state 80C286 outputs. See 
Table A for a list of these pins and Figures Ba and 
Bb for a complete description of which pins have 
bus hold circuitry. These circuits will maintain the 
last valid logic state if no driving source is present 
(i.e., an unconnected pin or a driving source which 
goes to a high impedance state). To overdrive the 
“bus hold” circuits, an external driver must be capa- 
ble of supplying the maximum “Bus Hold Overdrive” 
sink or source current at valid input voltage levels. 
Since this “bus hold” circuitry is active and not a 


Pull-Up/Pull-Down 


INPUT 
PROTECTION 
CIRCUITRY 


231923-50 


Figure Ba. Bus Hold Circuitry Pins 36-51, 66-67 
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“resistive” type element, the associated power sup- 
ply current is negligible and power dissipation is sig- 
nificantly reduced when compared to the use of pas- 
sive pull-up resistors. 


Bus Hold Circuitry on the 80C286 

Pin |Polarity Pulled to 
Location| when tri-stated 
$1, SO, PEACK, LOCK/4-6, 68 |Hi, See Figure Bb 


Data Bus (Dp-Dy5) |36-51  |Hi/Lo, 

See Figure Ba 
COD/INTA, M/IO 66-67: |Hi/Lo, 

See Figure Ba 


231923-51 


Figure Bb. Bus Hold Circuitry Pins 4-6, 68 
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SYSTEM CONFIGURATIONS 


The versatile bus structure of the 80C286 microsys- 
tem, with a full complement of support chips, allows 
flexible configuration of a wide range of systems. 
The basic configuration, shown in Figure 32, is simi- 
lar to an 8086 maximum mode system. It includes 
the CPU plus an 82C59A-2 interrupt controller, 
82C284 clock generator, and the 82C288 Bus Con- 
troller. 


As indicated by the dashed lines in Figure 32, the 
ability to add processor extensions is an integral fea- 
ture of 80C286 microsystems. The processor exten- 
sion interface allows external hardware to perform 
special functions and transfer data concurrent with 
CPU execution of other instructions. Full system in- 
tegrity is maintained because the 80C286 supervis- 
_ es all data transfers and instruction execution for the 
processor extension. 


The 80287 has all the instructions and data types of 
an 8087. The 80287 NPX can perform numeric cal- 
culations and data transfers concurrently with CPU 
program execution. Numerics code and data have 
the same integrity as all other information protected 
by the 80C286 protection mechanism. 


The 80C286 can overlap chip select decoding and 
address propagation during the data transfer for the 
previous bus operation. This information is latched 
by ALE during the middle of a T, cycle. The latched 
chip select and address information remains stable 
during the bus operation while the next cycle’s ad- 
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dress is being decoded and propagated into the sys- 


tem. Decode logic can be implemented with a high 
speed PROM or PAL. 


The optional decode logic shown in Figure 32 takes 
advantage of the overlap between address and data 
of the 80C286 bus cycle to generate advanced 
memory and |O-select signals. This minimizes sys- 
tem performance degradation caused by address 
propagation and decode delays. In addition to se- 
lecting memory and I/O, the advanced selects may 
be used with configurations supporting local and 
system buses to enable the appropriate bus inter- 
face for each bus cycle. The COD/INTA and M/IO 
signals are applied to the decode logic to distinguish 
between interrupt, |1/O, code and data bus cycles. 


By adding a bus arbiter, the 80C286 provides a 
MULTIBUS system bus interface as shown in Figure 
33. The ALE output of the 82C288 for the 
MULTIBUS bus is connected to its CMDLY input to 
delay the start of commands one system CLK as 
required to meet MULTIBUS address and write data 
setup times. This arrangement will add at least one 
extra T, state to each bus operation which uses the 
MULTIBUS. 


A second 82C288 bus controller and additional 
latches and transceivers could be added to the local 
bus of Figure 33. This configuration allows the 
80C286 to support an on-board bus for local memo- 
ry and peripherals, and the MULTIBUS for system 
bus interfacing. 
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SYNC READY 
ENABLE 
ASYNC READY 
ENABLE 
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SRDY 
SRDYEN 
ARDY 
ARDYEN 
82C284 


CLOCK 
GENERATOR 


ican aoread ew icici arta 
ee oe ee? SS 


a= emee ee @ 


80287 
PROCESSOR 
EXTENSION 
(OPTIONAL) 


BCLK 
init 
BREQ 
BPRO 
BPRN 
BUSY 
CBRO 
LOCK 
u/i0 
SLOCK 
BUS ARBITER 


82C288 BUS 
CONTROLLER 


CMDLY M/iO 


muctiaus ® 
BUS ARBITRATION 


Figure 33. MULTIBUS System Bus Interface 
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DATA Dis —Do 


aoe 
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GENERATOR ia 
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DI DO CBDO 
16-0 16-0 CBDI 


MULTIBUS® SELECT 


XACK 
MULTIBUS® 
COMMAND 


(MROC, MWTC) 


ADDRESS 


231923-35 


Figure 34. 80C286 System Configuration with Dual-Ported Memory 


Figure 34 shows the addition of dual ported dynamic 
memory between the MULTIBUS system bus and 
the 80C286 local bus. The dual port interface is pro- 
vided by the 8207 Dual Port DRAM Controller. The 
8207 runs synchronously with the CPU to maximize 
throughput for local memory references. It also arbi- 
trates between requests from the local and system 
buses and performs functions such as refresh, 


initialization of RAM, and read/modify/write cycles. 
The 8207 combined with the 8206 Error Checking 
and Correction memory controller provide for single 
bit error correction. The dual-ported memory can be 
combined with a standard MULTIBUS system bus 
interface to maximize performance and protection in 
multiprocessor system configurations. 
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Table 16. 80C286 Systems Recommended Pull Up Resistor Values 


80C286 Pin and Name | Pullup Value 


9 
20 KX +10% (Note 1) 


63—READY 


A 
6—PEACK 


NOTE: 


Pull S0, S1, and PEACK inactive during 80C286 hold periods 


9109 +5% Pull READY inactive within required minimum time (CL = 150 pF, 
IR < 7mA) 


1. Pullup resistors are not required for SO and S71 when the corresponding pins on the 82C284 are connected to SO and S1. 


80C286 IN-CIRCUIT EMULATION 
CONSIDERATIONS 


One of the advantages of using the 80C286 is that 
full in-circuit emulation development support is avail- 
able through either the I2ICE 80286 probe for 
8 MHz/10 MHz or ICE286 for 12.5 MHz designs. To 
utilize these powerful tools it is necessary that the 
designer be aware of a few minor parametric and 
functional differences between the 80C286 and the 
in-circuit emulators. The I2ICE datasheet (I2ICE Inte- 
grated Instrumentation and In-Circuit Emulation Sys- 
tem, order #210469) contains a detailed description 
of these design considerations. The ICE286 Fact 
Sheet (#280718) and User’s Guide (#452317) con- 
tain design considerations for the 80C286 12.5 MHz 
microprocessor. It is recommended that the appro- 
priate document be reviewed by the 80C286 system 
designer to determine whether or not these differ- 
ences affect the design. 


PACKAGE THERMAL 
SPECIFICATIONS 


The 80C286 Microprocessor is specified for opera- 
tion when case temperature (Tc) is within the range 
of 0°C-85°C. Case temperature, unlike ambient 
temperature, is easily measured in any environment 


Table 17. Thermal Resistances 
('C/Watt) 0jc and 65a 


oe eee versus Airflow 
ft/min oe eee 


Package 
400 | 600 | 800 | 1000 
(2.03)}|(3.04) Pa 06) a 07) 


s5|29] 22 | 16 | 15 


NOTE: 


The numbers in Table 18 were calculated using a Vcc of 5.0V 


case Icc at Tc = 85°C with the outputs unloaded. 
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to determine whether the 80C286 Microprocessor is 
within the specified operating range. The case tem- 
perature should be measured at the center of the 
top surface of the component. 


The maximum ambient temperature (T,) allowable 
without violating Tc specifications can be calculated 
from the equations shown below. Ty is the 80C286 
junction temperature. P is the power dissipated by 
the 80C286. 


Ty = To + P* Ojc 
LY oe” Ge 
To = Ta + P* [Oya — Oye] 


Values for @ja and @ jc are given in Table 17. Oj, is 
given at various airflows. Table 18 shows the maxi- 
mum T, allowable (without exceeding Tc) at various 
airflows. Note that the 80C286 PLCC package has 
an internal heat spreader. Ta can be further im- 
proved by attaching ‘“‘fins” or an external “heat sink” 
to the package. 


Junction temperature calculations should use an Icc 
value that is measured without external resistive 
loads. The external resistive loads dissipate addi- 
tional power external to the 80C286 and not on the 
die. This increases the resistor temperature, not the 
die temperature. The full capacitive load (CL = 
100 pF) should be applied during the Ilcc measure- 
ment. 


Table 18. Maximum Ta, at Various Airflows 


Ta(°C) versus Airflow 
ft/min (m/sec) 


Package 
400 | 600 | 800 | 1000 
(2.03) | (3.04) ae >. em 07) 
68-Lead PGA 78 


68 Lead- PsA foe 
w/Internal 
Heat Speader 


, and an Icc of 150 mA, which is representative of the worst 
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ABSOLUTE MAXIMUM RATINGS* 


Ambient Temperature under Bias ....0°C to + 70°C 


*WARNING: Stressing the device beyond the “‘Absolute 


Stor age Temperature reer. eee =—65'C to4- 50°C Maximum Ratings’ may cause permanent damage. 
Voltage on Any Pin with These are stress ratings only. Operation beyond the 
Respect to Ground.............. —1.0Vto +7V “Operating Conditions” is not recommended and ex- 


tended exposure beyond the “Operating Conditions” 


POWSl LASSIDAHON. «os ak aie knw ROD 0 ok on co teew en 1.1W may affect device reliability. 


D.C. CHARACTERISTICS (Vcc = 5V 410%, Tcoase = 0°C to + 85°C) 


Supply Current 
Supply Current (Static) (Note 2) 


CLK Input Capacitance BF FREQ = 1 MHz (Note 3) 

Other Input Capacitance FREQ = 1 MHz (Note 3) 

Input/Output Capacitance FREQ = 1 MHz (Note 3) 
NOTES: 


1. Tested at maximum frequency with no resistive loads on the outputs. 
2. Tested while clock stopped in phase 2 and inputs at Vcc or Vss with the outputs unloaded. 
3. These are not tested but are guaranteed by design characterization. 


D.C. CHARACTERISTICS (Vcc = 5V +10%, Tcase = 0°C to + 85°C) | 


/Symbol| _—Parameter_ | Min | Max 
Vi___| Input LOW Voltage | 0.5 | 08 
Voc + 0.5 
Vic | CLKInputLOW Voltage | —0.5 | 
Vo._| OutputLow Voltage | 


IL 
IH 
OL 
OH —2.0 mA, FREQ = 2 MHz 
O 
O 
IL | 


Unit 
V 
—100 pA, FREQ = 2 MHz 
| #10 | vA | Vin=GNDorVec(Note 1) 


+10 
Output Leakage Current A | Vo = GND or Vcc (Note 1) 


0 
8 
| Input Sustaining Current on 30 Vin = OV (Note 1) 
BUSY # and ERROR # Pins 
0 
0 


H 


Vin = 1.0V (Notes 1, 2) 
IBHH Input Sustaining Current me —350 A | Vin = 3.0V (Notes 1, 3) 
(Bus Hold HIGH) 


Bus Hold LOW Overdrive 20 tT ome a 
Bus Hold HIGH Overdrive (Notes 1, 5) 


NOTES: 

1. Tested with the clock stopped. 

2. IgHL should be measured after lowering Viy to GND and then raising to 1.0V on the following pins: 36-51, 66, 67. 

3. IgHH Should be measured after raising Vij to Vcc and then lowering to 3.0V on the following pins: 4-6, 36-51, 66-68. 
4. An external driver must source at least Ipyi0 to switch this node from LOW to HIGH. 

5. An external driver must sink at least IguHo to switch this node from HIGH to LOW. 


pA 
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A.C. CHARACTERISTICS (Vcc = 5V +10%, Tcoase = 0°C to + 85°C) 


A.C. timings are referenced to 1.5V points of signals as illustrated in datasheet waveforms, unless otherwise 


noted. 
Test 
f Conditions 


1.0V to 3.6V (Note 2) 
3.6V to 1.0V (Note 2) 
(Note 3) 


ee | 
Paar 
ead nee 


Address Valid To Status (Notes 2, 4, 5) 
Valid Setup Time 
NOTES: 


1. Functionality at frequencies less than 2 MHz is not tested, but is guaranteed by design characterization. 

2. These are not tested but are guaranteed by design characterization. 

3. Asynchronous inputs are INTR, NMI, HOLD, PEREQ, ERROR, and BUSY. This specification is given only for testing 
purposes, to assure recognition at a specific CLK edge. 

4. Delay from 1.0V on the CLK, to 1.5V or float on the output as appropriate for valid or floating condition. 

5. Output load: C_ = 100 pF. 

6. Float condition occurs when output current is less than |_o in magnitude. 

7. Minimum output delay timings are not tested, but are guaranteed by design characterization. 
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A.C. CHARACTERISTICS (Continued) 


DEVICE 
OUTPUT 


231923-36 


NOTE 7: 
AC Test Loading on Outputs 


CLK INPUT 


231923-37 


NOTE 8: 
AC Drive and Measurement Points—CLK Input 


CLK INPUT 
0.45V 


sq) " 
; 1.5V 9 
INPUT KS 


0.45V 


DEVICE 
OUTPUT 


231923-38 


NOTE 9: 
AC Setup, Hold and Delay Time Measurement—General 
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Typical Capacitive Derating Curves © 
NOM +5 


NOM #4 
NOM #3 
NOM #2 


NOM +1 


OUTPUT VALID jg at! 


—@— ADDRESS/DATA 
—O=— STATUS 


LOAD CAPACITANCE (pF) 231923-46 


Typical CMOS Level Siew Rates for Address/Data Buffers 
10 


SLEW RATE 
(ns/V) 


—@=— RISE TIME (0.4V-3.5V) 
—O— FALL TIME (3.5V-0.4V) 


78 100 125 


LOAD CAPACITANCE (pF) 231923-47 
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SLEW RATE 
(ns/V) 


=—@=— RISE TIME (0.8V-2.0V) 
—O= FALL TIME (2.0V-0.8V) 


75 100 125 


LOAD CAPACITANCE (pF) 231923-48 


Typical icc vs Frequency for Different Output Loads 


mga (OHS 2 nA 


—O— 10H =-400 pA 


NEE 


-| NA 
BEENENSZE 


ase UNLOADED 


CMA 
LEE 


HEP AGRE 


FREQUENCY (MHz) 
231923-53 


NOTES: 

1. Vcc = 5.0V 

2. Loaded: Io, = 2.0 mA, Ion as shown, C_ = 100 pF 
Unloaded: C_ = 100 pF 
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WAVEFORMS 
MAJOR CYCLE TIMING 


READ CYCLE WRITE CYCLE 
ILLUSTRATED WITH ZERO ILLUSTRATED WITH ONE READ 
WAIT STATES WAIT STATE (T, OR Ts) 


iad 


A237Ao 
- YY I I IIIb :. VALID ae ) mn in im ADDRESS He V//}; nei V// Pk NALID IF T 
M/i0, COD/INTA CO | 


BHE.LOCK W/L NAL IO CONTROL WD OO i LZ iin Wy 


SOCK VALI WRITE DATA Mea 


READY WOOO TU MMMM Wii, 


\D) 
SRDY#SRDYEN sons seas 


arvveaRroven 7 Sem eae ane i 


TR 
2 a Abed 


“eb achat 
(3) 
UME aE MUM; Q LLL: 


ou GULL 
te 
3) 


231923-52 


i) 
@4 


NOTE: 
1. The modified timing is due to the CMDLY signal being active. 
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WAVEFORMS (Continued) 


80C286 ASYNCHRONOUS 80C286 RESET INPUT TIMING AND 
INPUT SIGNAL TIMING. SUBSEQUENT PROCESSOR CYCLE PHASE 


BUS CYCLE TYPE 


CLK 


PCLK 
(SEE NOTE 1.) 


INTR,Nedl 
HOLD, PEREQ 
(SEE NOTE 2.) 


231923-40 231923-41 


NOTES: 

1. When RESET meets the setup time shown, the next 
CLK will start 62 of a processor cycle. 

2. When RESET meets the setup time shown, the next 
CLK will repeat 1 of a processor cycle. 


1. PCLK indicates which processor cycle phase will oc- 
cur on the next CLK. PCLK may not indicate the cor- 
rect phase until the first bus cycle is performed. 

2. These inputs are asynchronous. The setup and hold 
times shown assure recognition for testing purposes. 


EXITING AND ENTERING HOLD 


BUS CYCLE TYPE its ORT, | 
$2 


(SEE woe 3.) 


BHE,LOCK 


@) 
pert »~»»» 


/INT. 
COD/INTA (SEE NOTE 2.) 


cy», 
ff fh OO aa ay 


NOTES: 231923-42 


1. These signals may not be driven by the 80C286 during the time shown. The worst case in terms of latest float time is 
shown. 

2. The data bus will be driven as shown if the last cycle before T; in the diagram was a write Tc. 

3. The 80C286 floats its status pins during Ty. External 20 KN. resistors keep these signals high (see Table 16). 

4. For HOLD request set up to HLDA, refer to Figure 29. 

5. BHE and LOCK are driven at this time but will not become valid until Ts. 

6. The data bus will remain in 3-state OFF if a read cycle is performed. 
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WAVEFORMS (Continued) 


80C286 PEREQ/PEACK TIMING FOR ONE TRANSFER ONLY 


BUS CYCLE TYPE 
Ty 


VO READ IF PROC. EXT. TO MEMORY MEMORY WRITE IF PROC. EXT. TO MEMORY 
x MEMORY READ IF MEMORY TO PROC. EXT. Fx VO WRITE iF MEMORY TO PROC. EXT. 


MEMORY ADDRESS IF PROC. EXT. TO MEMORY TRANSFER 
VO PORT ADDRESS OOFA(H) IF MEMORY TO PROC. EXT. TRANSFER 


(222) 125}<-- \_| V0 PORT ADDRESS OOFA(H) IF PROC. EXT. TO MEMORY TRANSFER 
MEMORY ADDRESS IF MEMORY TO PROC. EXT. TRANSFER 
(SEE NOTE 1.) 


(SEE NOTE 2.) G) 
® 
FEED N/T. 


ASSUMING WORD-ALIGNED MEMORY OPERAND. IF ODD ALIGNED, 80286 TRANSFERS TO/FROM MEMORY BYTE-AT-A-TIME WITH TWO MEMORY CYCLES. 


NOTES: 231923-43 
1. PEACK always goes active during the first bus operation of a processor extension data operand transfer sequence. 
The first bus operation will be either a memory read at operand address or I/O read at port address OOFA(H). 

2. To prevent a second processor extension data operand transfer, the worst case maximum time (Shown above) is: 
3X © —12a2max.— GO min.. The actual, configuration dependent, maximum time is: 3X © —12a2max—-Omin. + 
Ax2xoO. 

A is the number of extra Tc states added to either the first or second bus operation of the processor extension data 
operand transfer sequence. 


INITIAL 80C286 PIN STATE DURING RESET 


BUS CYCLE TYPE 


Von 


(SEE NOTE 2.) 6) 


s) (SEE NOTE 3.) 


MY Z NNN)» 
® 
es | a 


NOTES: | 231923-44 
1. Setup time for RESET T may be violated with the consideration that 1 of the processor clock may begin one 
system CLK period later. 

2. Setup and hold times for RESET | must be met for proper operation, but RESET | may occur during $1 or $2. If 
RESET | occurs in $1, the reference clock edge can be ¢2 of the previous bus cycle. 

3. The data bus is only guaranteed to be in 3-state OFF at the time shown. 
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REGISTER OPERAND/REGISTERS TO USE IN OFFSET CALCULATION 


REGISTER OPERAND/EXTENSION OF OPCODE 
REGISTER MODE/MEMORY MODE WITH DISPLACEMENT LENGTH 


WORD/BYTE OPERATION 


DIRECTION IS TO REGISTER/DIRECTION IS FROM REGISTER 


OPERATION (INSTRUCTION) CODE 


A. SHORT OPCODE FORMAT EXAMPLE 


BYTE 1 BYTE 2 
7685432107685 4232 «1 


PLETE ELEC EEL 


B. LONG OPCODE FORMAT EXAMPLE 


231923-45 


Figure 35. 80C286 Instruction Format Examples 


80C286 INSTRUCTION SET 
SUMMARY 


instruction Timing Notes 


The instruction clock counts listed below establish 
the maximum execution rate of the 80C286. With no 
delays in bus cycles, the actual clock count of an 
80C286 program will average 5% more than the cal- 
culated clock count, due to instruction sequences 
which execute faster than they can be fetched from 
memory. 


To calculate elapsed times for instruction se- 
quences, multiply the sum of all instruction clock 
counts, as listed in the table below, by the processor 
clock period. A 12 MHz processor clock has a clock 
period of 83 nanoseconds and requires an 80C286 
system clock (CLK input) of 24 MHz. 


Instruction Clock Count Assumptions 


1. The instruction has been prefetched, decoded, 
and is ready for execution. Control transfer in- 
struction clock counts include all time required to 
fetch, decode, and prepare the next instruction for 
execution. 


2. Bus cycles do not require wait states. 


3. There are no processor extension data transfer or 
local bus HOLD requests. 


4. No exceptions occur during instruction execution. 


Instruction Set Summary Notes 


Addressing displacements selected by the MOD 
field are not shown. If necessary they appear after 
the instruction fields shown. | 


Above/below refers to unsigned value 

Greater refers to positive signed value 

Less refers to less positive (more negative) signed 
values 

ifd = 1 then to register; if d = 0 then from register 


ifw = 1. then word instruction; if w = 0 then byte 
instruction 


ifs = 0 then 16-bit immediate data form the oper- 
and 


then an immediate data byte is sign-ex- 
tended to form the 16-bit operand 


x don’t care 


z used for string primitives for comparison with 
ZF FLAG 


ifs = 1 


If two clock counts are given, the smaller.refers to a 
register operand and the larger refers to a memory 
operand 


*= add one clock if offset calculation requires 
summing 3 elements 
n=. number of times repeated 


m = number of bytes of code in next instruction 
Level (L)—Lexical nesting level of the procedure 
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The following comments describe possible excep- 
tions, side effects, and allowed usage for instruc- 
tions in both operating modes of the 80C286. 


REAL ADDRESS MODE ONLY 

1. This is a protected mode instruction. Attempted 
execution in real address mode will result in an 
undefined opcode exception (6). 

2. A segment overrun exception (13) will occur if a 
word operand reference at offset FFFF(H) is at- 
tempted. 

3. This instruction may be executed in real address 
mode to initialize the CPU for protected mode. 


4. The |OPL and NT fields will remain 0. 


5. Processor extension segment overrun interrupt 
(9) will occur if the operand exceeds the seg- 
ment limit. 


EITHER MODE 

6. An exception may occur, depending on the value 
of the operand. 

7. LOCK is automatically asserted regardless of the 
presence or absence of the LOCK instruction 
prefix. 

8. LOCK does not remain active between all oper- 
and transfers. 


PROTECTED VIRTUAL ADDRESS MODE ONLY 
9. A general protection exception (13) will occur if 
the memory operand cannot be used due to éi- 


ther a segment limit or access rights violation. If 


a stack segment limit is violated, a stack seg- 
ment overrun exception (12) occurs. 


10. For segment load operations, the CPL, RPL, and 
DPL must agree with privilege rules to avoid an 
exception. The segment must be present to 
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12, 


13. 


14. 


15. 


16. 


te: 


18. 
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avoid a not-present exception (11). If the SS reg- 
ister is the destination, and a segment not-pres- 
ent violation occurs, a stack exception (12) oc- 
curs. 


All segment descriptor accesses in the GDT or 
LDT made by this instruction will automatically 
assert LOCK to maintain descriptor integrity in 
multiprocessor systems. 


JMP, CALL, INT, RET, IRET instructions refer- 
ring to another code segment will cause a gener- 
al protection exception (13) if any privilege rule is 
violated. 


A general protection exception (13) occurs if 
CPL ¥ 0. 


A general protection exception (13) occurs if 
CPL > IOPL. 


The IF field of the flag word is not updated if CPL 
> IOPL. The IOPL field is updated only if 
CFL = 2. 


Any violation of privilege rules as applied to the 
selector operand do not cause a protection ex- 
ception; rather, the instruction does not return a 
result and the zero flag is cleared. 


If the starting address of the memory operand 
violates a segment limit, or an invalid access is 
attempted, a general protection exception (13) 
will occur before the ESC instruction is execut- 
ed. A stack segment overrun exception (12) will 
occur if the stack limit is violated by the oper- 
and’s starting address. If a segment limit is vio- 
lated during an attempted data transfer then a 
processor extension segment overrun exception 
(9) occurs. 


The destination of an INT, JMP, CALL, RET or 
IRET instruction must be in the defined limit of a 
code segment or a general protection exception 
(13) will occur. 
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80C286 INSTRUCTION SET SUMMARY 


CLOCK COUNT | COMMENTS | 


Protected Protected 

FORMAT Virtual Virtual 
Address Address 

Mode Mode 


DATA TRANSFER 
OV =Move: 


Register to Register/Memory 1000100w | modreg r/m 


Register/memory to register 1000101w | modreg r/m 


mod000 r/m data 
mmediate to register 1011Ww reg data 
addr-low 
addr-low 


mod 0 reg r/m 


mmediate to register/memory 


emory to accumulator 1010000w 


Accumulator to memory 1010001w 


Register/memory to segment register 10001110 


Segment register to register/ memory 10001100 | modOreg r/m 
PUSH = Push: 

emory 11111111 | mod110 r/m 
Register 01010 reg 


Segment register 000regi10 


POP = Pop: 


emory 10001111 |mod000 f/m 
Register 01011 reg 


Segment register 000regi11 (reg#01) 


XCHG = Exchange: 
Register/memory with register 
Register with accumulator 
N= Input from: 
ixed port 
ariable port 
OUT = Output to: 
ixed port 
ariable port 
XLAT = Translate byte to AL 
EA = Load EA to register 


DS = Load pointer to DS 11000101 (mod* 11) 9,10,11 


ES = Load pointer to ES 11000100 |modreg r/m (mod+ 1) 9,10,11 


Shaded areas indicate instructions not available in 8086, 88 microsystems. 
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80C286 INSTRUCTION SET SUMMARY (Continued) 


FORMAT 


10011111 


10011100 


10011101 


eg/memory with register to either 000000dw | modreg r/m 


mmediate to register/memory 100000sw | mod000 r/m data data ifs w = 01 


mmediate to accumulator 0000010w data data if w=1 


ADC = Add with carry: 


eg/memory with register to either 000100dw | modreg r/m 


mmediate to register/memory 100000sw | mod010 r/m data data if sw = 01 


mmediate to accumulator 0001010w data data if w=1 


NC= Increment: 


111111141w | mod000 r/m 


01000reg 


SUB = Subtract: 


eg/memory and register to either 001010dw | modreg r/m 


mod 101 r/m data dataifsw = 01 


mmediate from accumulator 0010110WwW data data if w=1 


mmediate from register/memory 100000sw 


SBB = Subtract with borrow: 


eg/memory and register to either 000110dw | modreg r/m 


mmediate from register/memory 100000sw | mod011 r/m data data ifs w=01 


mmediate from accumulator 0001110w data data if w=1 


DEC = Decrement 
mod001 = r/m 


01001 reg 


egister/memory with register 0011101w |modreg r/m 


egister with register/memory 0011100w |modreg r/m 


data data if sw=01 


data ifw=1 


mmediate with register/memory 100000sw |modi11 = r/m 


mmediate with accumulator 0011110Ww data 


EG= Change sign 1111011wWw |mod011 = r/m 
AA = ASCIl adjust for add 00110111 


DAA = Decimal adjust for add 00100111 
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80C286 INSTRUCTION SET SUMMARY (Continued) 


CLOCK COUNT COMMENTS 


Protected Protected 
Virtual Virtual 
Address Address 

Mode 


FORMAT Real 
Address 


Mode 


ARITHMETIC (Continued) 
AAS = ASCIl adjust for subtract - 


DAS = Decimal adjust for subtract 001071 11 


UL = Multiply (unsigned): mod100 f/m 


Register-Byte 
Register-Word 
emory-Byte 
emory-Word 


MUL = Integer multiply (signed): mod101 r/m 


Register-Byte 
Register-Word 
emory-Byte 

emory-Word 


DIV = Divide (unsigned) 


Register-Byte 
Register-Word 
emory-Byte 
emory-Word 


DIV = Integer divide (signed) mod 1 1 1 r/m 


Register-Byte 
Register-Word 
emory-Byte 

emory-Word 


AAM = ASCil adjust for multiply 00001010 
AAD = ASCIl adjust for divide 00001010 


BW = Convert byte to word 10011000 


WD = Convert word to double word 10011001 


OGIC 
ift/Rotate Instructions: 


= 
3 


Register/Memory by 1 1101000w 


3 
& 
5 
3 


Register/Memory by CL 


TTT Instruction 
000 ROL 
001 ROR 
010 RCL 
011 RCR 
100 SHL/SAL 
101 SHR 
424 SAR 


Shaded areas indicate instructions not available in 8086, 88 microsystems. 
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80C286 INSTRUCTION SET SUMMARY (Continued) 


CLOCKCOUNT | COMMENTS 


Protected Protected 

FORMAT Virtual Virtual 
Address Address 

Mode Mode 


ARITHMETIC (Continued) 
AND = And: 


Reg/memory and register to either 001000dw | modreg r/m 


mod 100 t/m 


mmediate to register/memory ~ | 1000000w 


mmediate to accumulator 0010010WwW data data if w= 1 


EST = And function to flags, no result: 


Register/memory and register 1000010w | modreg r/m 


| dataitw=1 
mod 000 r/m data if w= 1 
| dataitw=1 


data if w= 1 


mmediate data and register/memory 


mmediate data and accumulator 1010100w data 


OR = Or: 


Reg/memory and register to either 000010dw | modreg r/m 


mod001 r/m data 


mmediate to accumulator 0000110w data data if w=1 


mmediate to register/memory 1000000w 


XOR = Exclusive or: 


Reg/memory and register to either 001100dw | modreg r/m 


mod110 r/m data data ifw = 1 


mmediate to register/memory 1000000w 


mmediate to accumulator 0011010WwW data data ifw = 1 


OT = Invert register/memory 1111011w | mod010 r/m 
STRING MANIPULATION: 
OVS = Move byte/word 1010010w 
MPS = Compare byte/word 
AS = Scan byte/word 1010111w 


ODS = Load byte/wd to AL/AX 


STOS = Stor byte/wd from AL/A 


oa 


Repeated by count in CX 
OVs = Move string 
MPS = Compare string 

SCAS = Scan string 1111001z | 1010111Ww 
ODS = Load string 11110011 


STOS = Store string 


Shaded areas indicate instructions not available in 8086, 88 microsystems. 
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80C286 INSTRUCTION SET SUMMARY (Continued) 


7+m 18 


7 +m, 11+m* | 7+m, 11+m* 8,9,18 
indirect within segment 


Direct intersegment 10011010 11,12,18 


Protected Mode Only (Direct intersegment): 
Via call gate to same privilege level ; 41+m 8,11,12,18 
Via call gate to different privilege level, no parameters 62+m 8,11,12,18 
Via call gate to different privilege level, x parameters 86 +4x+m 8,11,12,18 
Via TSS 177+m 8,11,12,18 
Via task gate 182+m 8,11,12,18 


Indirect intersegment mod011 r/m (mod+ 11) 29+ m* 8,9,11,12,18 


Protected Mode Only (indirect intersegment): 


Via call gate to same privilege level 
Via call gate to different privilege level, no parameters 
Via call gate to different privilege level, x parameters 


Via TSS 
Via task gate 


MP = Unconditional jump: 


hort/long 


Direct within segment 


7+m 


7+m 


44+m* 
83 +m* 
90+ 4x +m* 
180+m* 
185+ m* 


7+m 
7+m 


7+m, 11+m* 


8,9,11,12,18 
8,9,11,12,18 
8,9,11,12,18 
8,9,11,12,18 
8,9,11,12,18 


18 
18 


9,18 


Register/memory indirect within segment 7 +m, 11+m* 


Direct intersegment 11+m 23+m 11,12,18 


Protected Mode Only (Direct intersegment): 
Via call gate to same privilege level 8,11,12,18 
Via TSS 8,11,12,18 
Via task gate 8,11,12,18 


Indirect intersegment r/m 8,9,11,12,18 


Protected Mode Only (indirect intersegment): 
Via call gate to same privilege level 8,9,11,12,18 
Via TSS 8,9,11,12,18 
Via task gate 8,9,11,12,18 
RET = Return from CALL: 


ithin segment 11000011 8,9,18 

ithin seg adding immed to SP 8,9,18 
intersegment 8,9,11,12,18 
Intersegment adding immediate to SP 8,9,11,12,18 


Protected Mode Only (RET): 
To different privilege level 9,11,12,18 
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80C286 INSTRUCTION SET SUMMARY (Continued) 


Protected Protected 
Virtual Virtual 
Address Address 

Mode 


FUNCTION FORMAT 


CONTROL TRANSFER (Continued) 
JE/JZ= Jump on equal zero 01110100 7+mor3 7+mor3 


7+mor3 7+mor3 


JL/JNGE = Jump on less/not greater or equal 
JLE/JNG = Jump on less or equal/not waist 01111110 7+mor3 7+mor3 
JB/JNAE = Jump on below/not above or equal 01110010 7+mor3 7+mor3 
JBE/JNA= Jump on below or equal/not above 01110110 7+mor3 7+mor3 
JP/JPE = Jump on parity/parity even 011110610 7+mor3 7+mor3 


JO= Jump on overflow 01110000 7+mor3 7+mor3 


JS= Jump on sign 01111000 7+ mor3 7+mor3 


JNE/JNZ= Jump on not equal/not zero 7+mor3 7+mor3 
JNL/JGE = Jump on not less/greater or equal 7+mor3 7+mor3 
JNLE/JG= Jump on not less or equal/greater 7+mor3 7+mor3 
JNB/JAE = Jump on not below/above or equal 7+mor3 7+mor3 


JNBE/JA= Jump on not below or equal/above 7+mor3 7+mor3 


JNP/JPO = Jump on not par/par odd OFT 21017 7+mor3 7+mor3 


JNO = Jump on not overflow 01110001 7+mor3 7+mor3 


JNS = Jump on not sign 7+mor3 7+mor3 


LOOP = Loop CX times 11100010 8 +mor4 8+mor4 
LOOPZ/LOOPE = Loop while zero/equal 11100001 8+mor4 8+mor4 


LOOPNZ/LOOPNE = Loop while not zero/equal | 11100000 8+mor4 8+mor4 


JCXZ= Jump on CX zero 8+mor4 


INT = Interrupt: 


23+m 
11001100 23+m 


INTO = Interrupt on overflow 24+mor3 
(3 if no 


interrupt) 


< 


Shaded areas indicate instructions not available in 8086, 88 microsystems. 
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Protected Protected 
Virtual Virtual 
Address Address 

Mode 


FORMAT 


ONTROL TRANSFER (Continued) 


Protected Mode Only: 
Via interrupt or trap gate to same privilege level 7,8,11,12,18 
Via interrupt or trap gate to fit different privilege level 7,8,11,12,18 
Via Task Gate 7,8,11,12,18 


RET = Interrupt return 1100147411 8,9,11,12,15,18 


Protected Mode Only: 
To different privilege level 8,9,11,12,15,18 
To different task (NT = 1) 8,9,11,12,18 


P ROCESSOR CONTROL 

LC=Clear carry 

MC = Complement carry 11110101 
STC = Set carry 

LD = Clear direction 
STD = Set direction 17011101 

LI= Clear interrupt 
STI = Set interrupt 

LT =Halt 

AIT = Wait 


OCK = Bus lock prefix 11110000 


\ 


SC = Processor Extension Escape 


SEG = Segment Override Prefix 


a 


BEREAN 8 

Se 4 Se SS 
dads RRR 
ERIN SOOO 


: 
000000 
IIIT 


S 


Shaded areas indicate instructions not available in 8086, 88 microsystems. 
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80C286 INSTRUCTION SET SUMMARY (Continued) © 


FUNCTION FORMAT 


Shaded areas indicate instructions not available in 8086, 88 microsystems. 
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Footnotes 


The Effective Address (EA) of the memory operand 
is computed according to the mod and r/m fields: 


if mod = 11 then r/m is treated as a REG field 

if mod = 00 then DISP = 0%, disp-low and disp-high 
are absent 

if mod = 01 then DISP = disp-low sign-extended to 
16 bits, disp-high is absent 

if mod = 10 then DISP = disp-high: disp-low 


if r/m = 000 then EA = (BX) + (SI) + DISP 
if r/m = 001 then EA = (BX) + (DI) + DISP 
if r/m = 010 then EA = (BP) + (SI) + DISP 


if r/m = 011 then EA = (BP) + (DI) + DISP 
if r/m = 100 then EA = (SI) + DISP 

if r/m = 101 then EA = (DI) + DISP 

if r/m = 110 then EA = (BP) + DISP* 

if r/m = 111 then EA = (BX) + DISP 


DISP follows 2nd byte of instruction (before data if 
required) 
*except if mod = 00 and r/m = 110 then EQ = disp-high: disp-low. 


SEGMENT OVERRIDE PREFIX 


001reg 110 


reg is assigned according to the following: 


Segment 
reg Register 
00 ES 
01 CS 
10 SS 
11 DC 


80C286 | 


REG is assigned according to the following table: 


16-Bit (Ww = 1) 8-Bit (w = 0) 
000 AX 000 AL 
001 CX 001 CL 
010 DX 010 DL 
011 BX 011 BL 
100 SP 100 AH 
101 BP 101 CH 
110 SI 110 DH 
ITU BH 


The physical addresses of all operands addressed 
by the BP register are computed using the SS seg- 
ment register. The physical addresses of the desti- 
nation operands of the string primitive operations 
(those addressed by the DI register) are computed 
using the ES segment, which may not be overridden. 


DATA SHEET REVISION REVIEW 


The following list represents key differences be- 
tween this and the —002 data sheet. Please review 
this summary carefully. 


1. The test conditions in the A.C. Characteristics ta- 
ble has been changed. 

2. The “Typical Icc vs Frequency for Different Out- 
put Loads” graph has been modified. 

3. The maximum ambient temperature (Ta) vs. vari- 
ous airflows has been updated. — 

4. Deleted the 82C284 and 82C288 A.C. Character- 
istics tables. 


5. “PRELIMINARY” status was removed from the 
datasheet. 
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MICROPROCESSOR WITH MEMORY 
MANAGEMENT AND PROTECTION 


| (80286-12, 80286-10, 80286-8) 
m@ High Performance HMOS Ill Technology mg Two 8086 Upward Compatible 
m Large Address Space: Operating Modes: 


‘ — 8086 Real Address Mode 
— 16 Megabytes Physical 
— 1 Gigabyte Virtual per Task — Protected Virtual Address Mode 


m Integrated Memory Management, Four- m Complete System Development 


; Support: 
Level Memory Protection and Support 
for Virtual Memory and Operating — Assembler, PL/M, Pascal and 
Suatamne FORTRAN 
; : | m@ Available in: 
S Meemaceinieea — 68-Pin PLCC (Plastic Leaded Chip 
Carrier) 
m@ Industry Standard O.S. Support: — 68-Pin PGA (Pin Grid Array) 
— MS-DOS*, UNIX**, XENIX*, iRMX® (See Packaging Spec., Order #231369) 


= Optional Processor Extension: 
— 80287 High Performance 80-bit 
. Numeric Data Processor 


The 80286 is an advanced, high-performance microprocessor with specially optimized capabilities for multiple 
user and multi-tasking systems. The 80286 has built-in memory protection that supports operating system and 
task isolation as well as program and data privacy within tasks. A 12.5 MHz 80286 provides six times or more 
throughput than the standard 5 MHz 8086. The 80286 includes memory management capabilities that map 230 
(one gigabyte) of virtual address space per task into 224 bytes (16 megabytes) of physical memory. 


The 80286 is upward compatible with 8086 and 88 software. Using 8086 real address mode, the 80286 is 
object code compatible with existing 8086, 88 software. In protected virtual address mode, the 80286 is source 
code compatible with 8086, 88 software and may require upgrading to use virtual addresses supported by the 
80286’s integrated memory management and protection mechanism. Both modes operate at full 80286 per- 
formance and execute a superset of the 8086 and 88 instructions. 


The 80286 provides special operations to support the efficient implementation and execution of operating 
systems. For example, one instruction can end execution of one task, save its state, switch to a new task, load 
its state, and start execution of the new task. The 80286 also supports virtual memory systems by providing a 
segment-not-present exception and restartable instructions. 


*XENIX and MS-DOS are trademarks of Microsoft Corp. 
**UNIX is a trademark of UNIX Systems Laboratories. 
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Figure 1. 80286 Internal Block Diagram 
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Component Pad Views—As viewed from underside of P.C. Board Views—As viewed from the component 
component when mounted on the board. side of the P.C. board. 
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Figure 2. 80286 Pin Configuration 
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: Table 1. Pin Description 
The following pin function descriptions are for the 80286 microprocessor : 
Name and Function 


SYSTEM CLOCK provides the fundamental timing for 80286 systems. It is divided by two 
inside the 80286 to generate the processor clock. The internal divide-by-two circuitry can 
be synchronized to an external clock generator by a LOW to HIGH transition on the RESET 
input. 


DATA BUS inputs data during memory, I/O, and interrupt acknowledge read cycles; 
outputs data during memory and I/O write cycles. The data bus is active HIGH and floats to 
3-state OFF during bus hold acknowledge. 


ADDRESS BUS outputs physical memory and I/O port addresses. AO is LOW when data is 
to be transferred on pins D7_o9. A23—A416 are LOW during |/O transfers. The address bus is 
active HIGH and floats to 3-state OFF during bus hold acknowledge. 


BUS HIGH ENABLE indicates transfer or data on the upper byte of the data bus. Dj5_3. 
Eight-bit oriented devices assigned to the upper byte of the data bus would normally use 
BHE to condition chip select functions. BHE is active LOW and floats to 3-state OFF during 
bus hold acknowledge. 


HE and AO Encodings 


BHE Value | AOValue | Function 


Word transfer 

Byte transfer on upper half of data bus (D;5-—Dg) 
Byte transfer on lower half of data bus (D7_9) 
Will never occur 


BUS CYCLE STATUS indicates initiation of a bus cycle and, along with M/IO and COD/ 
INTA, defines the type of bus cycle. The bus is in a T, state whenever one or both are LOW, 
S1 and SO are active LOW and float to 3-state OFF during bus hold acknowledge. 


80286 Bus Cycle Status Definition 


coo [wi [ST | S| Bums eed 


Interrupt acknowledge 
Will not occur 

Will not occur 

None; not a status cycle 
IF A1 = 1 then halt; else shutdown 
Memory data read 
Memory data write 
None; not a status cycle 
Will not occur 

1/O read 

1/O write 

None; not a status cycle 
Will not occur 

Memory instruction read 
Will not occur 

None; not a status cycle 


MEMORY I/O SELECT distinguishes memory access from I/O access. If HIGH during Tg, a 
memory cycle or a halt/shutdown cycle is in progress. If LOW, an I/O cycle or an interrupt 
acknowledge cycle is in progress. M/IO floats to 3-state OFF during bus hold acknowledge. 


CODE/INTERRUPT ACKNOWLEDGE distinguishes instruction fetch cycles from memory — 
data read cycles. Also distinguishes interrupt acknowledge cycles from I/O cycles. COD/ 
INTA floats to 3-state OFF during bus hold acknowledge. Its timing is the same as M/IO. 


BUS LOCK indicates that other system bus masters are not to gain control of the system 
bus for the current and the following bus cycle. The LOCK signal may be activated explicitly 
by the “LOCK” instruction prefix or automatically by 80286 hardware during memory XCHG 
instructions, interrupt acknowledge, or descriptor table access. LOCK is active LOW and 
floats to 3-state OFF during bus hold acknowledge. 


BUS READY terminates a bus cycle. Bus cycles are extended without limit until terminated 
by READY LOW. READY is an active LOW synchronous input requiring setup and hold 
times relative to the system clock be met for correct operation. READY is ignored during 
bus hold acknowledge. 


ro) 
= 
O 
s 


0 
0 
0 
0 
0 
0 
0 
1 
1 
1 
1 
1 
1 
1 
1 


|=4234-4-90000424440000 
|=400-=0023 4 0 O 40 © 
=O} OH O22 O20=0=00 
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Table 1. Pin Description (Continued) 


j Name and Function 


BUS HOLD REQUEST AND HOLD ACKNOWLEDGE control ownership of 
the 80286 local bus. The HOLD input allows another local bus master to 
request control of the local bus. When control is granted, the 80286 will float 
its bus drivers to 3-state OFF and then activate HLDA, thus entering the bus 
hold acknowledge condition. The local bus will remain granted to the 
requesting master until HOLD becomes inactive which results in the 80286 
deactivating HLDA and regaining control of the local bus. This terminates the 
bus hold acknowledge condition. HOLD may be asynchronous to the system 
clock. These signals are active HIGH. 


INTERRUPT REQUEST requests the 80286 to suspend its current program 
execution and service a pending external request. Interrupt requests are 
masked whenever the interrupt enable bit in the flag word is cleared. When 
the 80286 responds to an interrupt request, it performs two interrupt 
acknowledge bus cycles to read an 8-bit interrupt vector that identifies the 
source of the interrupt. To assure program interruption, INTR must remain 
active until the first interrupt acknowledge cycle is completed. INTR is 
sampled at the beginning of each processor cycle and must be active HIGH 
at least two processor cycles before the current instruction ends in order to 
interrupt before the next instruction. INTR is level sensitive, active HIGH, and 
may be asynchronous to the system clock. 


NON-MASKABLE INTERRUPT REQUEST interrupts the 80286 with an 
internally supplied vector value of 2. No interrupt acknowledge cycles are 
performed. The interrupt enable bit in the 80286 flag word does not affect this 
input. The NMI input is active HIGH, may be asynchronous to the system 
clock, and is edge triggered after internal synchronization. For proper 
recognition, the input must have been previously LOW for at least four system 
clock cycles and remain HIGH for at least four system clock cycles. 


PROCESSOR EXTENSION OPERAND REQUEST AND ACKNOWLEDGE 
extend the memory management and protection capabilities of the 80286 to 
processor extensions. The PEREQ input requests the 80286 to perform a 
data operand transfer for a processor extension. The PEACK output signals 
the processor extension when the requested operand is being transferred. 
PEREQ is active HIGH and floats to 3-state OFF during bus hold 
acknowledge. PEACK may be asynchronous to the system clock. PEACK is 
active LOW. 


PROCESSOR EXTENSION BUSY AND ERROR indicate the operating 
condition of a processor extension to the 80286. An active BUSY input stops 
80286 program execution on WAIT and some ESC instructions until BUSY 
becomes inactive (HIGH). The 80286 may be interrupted while waiting for 
BUSY to become inactive. An active ERROR input causes the 80286 to 
perform a processor extension interrupt when executing WAIT or some ESC 
instructions. These inputs are active LOW and may be asynchronous to the 
system clock. These inputs have internal pull-up resistors. 
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Name and Function 


SYSTEM RESET clears the internal logic of the 80286 and is active HIGH. 
The 80286 may be reinitialized at any time with a LOW to HIGH transition on 
RESET which remains active for more than 16 system clock cycles. During 
RESET active, the output pins of the 80286 enter the state shown below: 


80286 Pin State During Reset 
Pin Names — 


1 (HIGH) S0, S1, PEACK, A23-A0, BHE, LOCK 
0 (LOW) M/lO, COD/INTA, HLDA (Note 1) 
3-state OFF D45-Do 


Operation of the 80286 begins after a HIGH to LOW transition on RESET. 
The HIGH to LOW transition of RESET must be synchronous to the system 
clock. Approximately 38 CLK cycles from the trailing edge of RESET are 
required by the 80286 for internal initialization before the first bus cycle, to 
fetch code from the power-on execution address, occurs. 

A LOW to HIGH transition of RESET synchronous to the system clock will 
end a processor cycle at the second HIGH to LOW transition of the system 


clock. The LOW to HIGH transition of RESET may be asynchronous to the 
system clock; however, in this case it cannot be predetermined which phase 
of the processor clock will occur during the next system clock period. 
Synchronous LOW to HIGH transitions of RESET are required only for 
systems where the processor clock must be phase synchronous to another 


SYSTEM GROUND: 0 Volts. 


SYSTEM POWER: + 5 Volt Power Supply. 


SUBSTRATE FILTER CAPACITOR: a 0.047 uF + 20% 12V capacitor must 
be connected between this pin and ground. This capacitor filters the output of 
the internal substrate bias generator. A maximum DC leakage current of 1 pA 
is allowed through the capacitor. 

For correct operation of the 80286, the substrate bias generator must charge 
this capacitor to its operating voltage. The capacitor chargeup time is 5 
milliseconds (max.) after Vcc and CLK reach their specified AC and DC 
parameters. RESET may be applied to prevent spurious activity by the CPU 
during this time. After this time, the 80286 processor clock can be 
synchronized to another clock by pulsing RESET LOW synchronous to the 
system clock. 


NOTE: 
1. HLDA is only Low if HOLD is inactive (Low). 
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FUNCTIONAL DESCRIPTION 


Introduction 


The 80286 is an advanced, high-performance micro- 
processor with specially optimized capabilities for 
multiple user and multi-tasking systems. Depending 
on the application, a 12.5 MHz 80286’s performance 
is up to six times faster than the standard 5 MHz 
8086's, while providing complete upward software 
compatibility with Intel’s 8086, 88, and 186 family of 
CPU’s. 


The 80286 operates in two modes: 8086 real ad- 
dress mode and protected virtual address mode. 
Both modes execute a superset of the 8086 and 88 
instruction set. 


In 8086 real address mode programs use real ad- 
dresses with up to one megabyte of address space. 
Programs use virtual addresses in protected virtual 
address mode, also called protected mode. In pro- 
tected mode, the 80286 CPU automatically maps 1 
gigabyte of virtual addresses per task into a 16 
megabyte real address space. This mode also pro- 
vides memory protection to isolate the operating 
system and ensure privacy of each tasks’ programs 
and data. Both modes provide the same base in- 
struction set, registers, and addressing modes. 


The following Functional Description describes first, 
the base 80286 architecture common to both 
modes, second, 8086 real address mode, and third, 
protected mode. 


80286 BASE ARCHITECTURE 


The 8086, 88, 186, and 286 CPU family all contain 
the same basic set of registers, instructions, and 


16-BIT SPECIAL 
REGISTER REGISTER 
NAME FUNCTIONS 


BYTE 
ADDRESSABLE 
(8-BIT 


MULTIPLY/DIVIDE 
1/0 INSTRUCTIONS 


REGISTER 
NAMES 
SHOWN) 


BASE REGISTERS 


INDEX REGISTERS 


STACK POINTER 


GENERAL 
REGISTERS 


LOOP/SHIFT/REPEAT/COUNT 
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addressing modes. The 80286 processor is upward 
compatible with the 8086, 8088, and 80186 CPU’s. 


Register Set 


The 80286 base architecture has fifteen registers as 
shown in Figure 3. These registers are grouped into 
the following four categories: 


General Registers: Eight 16-bit general purpose 
registers used to contain arithmetic and logical oper- 
ands. Four of these (AX, BX, CX, and DX) can be 
used either in their entirety as 16-bit words or split 
into pairs of separate 8-bit registers. 


Segment Registers: Four 16-bit special purpose 
registers select, at any given time, the segments of 
memory that are immediately addressable for code, 
stack, and data. (For usage, refer to Memory Organi- 
zation.) 


Base and Index Registers: Four of the general pur- 
pose registers may also be used to determine offset 
addresses of operands in memory. These registers 
may contain base addresses or indexes to particular 
locations within a segment. The addressing mode 
determines the specific registers used for operand 
address calculations. 


Status and Control Registers: The 3 16-bit special 
purpose registers in figure 3A record or control cer- 
tain aspects of the 80286 processor state including 
the Instruction Pointer, which contains the offset ad- 
dress of the next sequential instruction to be execut- 
ed. 


CODE SEGMENT SELECTOR 
DATA SEGMENT SELECTOR 
STACK SEGMENT SELECTOR 
EXTRA SEGMENT SELECTOR 


SEGMENT REGISTERS 


0. 
STATUS WORD 
INSTRUCTION POINTER 


STATUS AND CONTROL 
REGISTERS 


Figure 3. Register Set 
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Figure 3a. Status and Control Register Bit Functions 


Flags Word Description 


The Flags word (Flags) records specific characteris- 
tics of the result of logical and arithmetic instructions 
(bits 0, 2, 4, 6, 7, and 11) and controls the operation 
of the 80286 within a given operating mode (bits 8 
and 9). Flags is a 16-bit register. The function of the 
flag bits is given in Table 2. 


Instruction Set 


The instruction set is divided into seven categories: 
data transfer, arithmetic, shift/rotate/logical, string 
manipulation, control transfer, high level instruc- 
tions, and processor control. These categories are 
summarized in Figure 4. 


An 80286 instruction can reference zero, one, or two 
operands; where an operand resides in a register, in 
the instruction itself, or in memory. Zero-operand in- 
structions (e.g. NOP and HLT) are usually one byte 
long. One-operand instructions (e.g. INC and DEC) 
are usually two bytes long but some are encoded in 
only one byte. One-operand instructions may refer- 
ence a register or memory location. Two-operand 
instructions permit the following six types of instruc- 
tion operations: 


—Register to Register 
—Memory to Register 
—Immediate to Register 
—Memory to Memory 
—Register to Memory 
—Immediate to Memory 
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Table 2. Flags Word Bit Functions 


Parity Flag—Set if low-order 8 bits 
of result contain an even number of 
1-bits; cleared otherwise 


Set on carry from or borrow to the 
low order four bits of AL; cleared 
otherwise 


Zero Flag—Set if result is zero; 
cleared otherwise 


Sign Flag—Set equal to high-order 
bit of result (0 if positive, 1 if negative) 


Overflow Flag—Set if result is a too- 


large positive number or a too-small 
negative number (excluding sign-bit) 
to fit in destination operand; cleared 
otherwise 


Single Step Flag—Once set, a sin- 
gle step interrupt occurs after the 
next instruction executes. TF is 
cleared by the single step interrupt. 


Interrupt-enable Flag—When set, 
maskable interrupts will cause the 
CPU to transfer control to an inter- 
rupt vector specified location. 


Direction Flag—Causes string 
instructions to auto decrement 
the appropriate index registers 
when set. Clearing DF causes 
auto increment. 


| 
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Two-operand instructions (e.g. MOV and ADD) are 
usually three to six bytes long. Memory to memory 
operations are provided by a special class of string 
instructions requiring one to three bytes. For de- 


tailed instruction formats and encodings refer to the 
instruction set summary at the end of this document. 


For detailed operation and usage of each instruc- 
tion, see Appendix of 80286 Programmer’s Refer- 
ence Manual (Order No. 210498) 


GENERAL PURPOSE 
MOV Move byte or word 
PUSH Push word onto stack 
Pop word off stack 
Push all registers on stack 
POPA Pop all registers from stack 
XCHG Exchange byte or word 
XLAT Translate byte 

INPUT/OUTPUT 


PUSHA 


a ae Input byte or word 
OUT Output byte or word 


ADDRESS OBJECT 
EA Load effective address 
LDS Load pointer using DS 
LES Load pointer using ES 
FLAG TRANSFER 
Load AH register from flags 
Store AH register in flags 
Push flags onto stack 
Pop flags off stack 


S 
Be 


SAHF 
PUSHF 
POPF 


Figure 4a. Data Transfer Instructions 


| INS | Inputbytes orword string | 
fe "ee ee 


Figure 4c. String Instructions 


WF dead reel eso", 
say we 
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| ADD | Addbyteorword 
| ADC | __Addbyteorwordwith cary 
| INC | __Incrementbyteorwordbyt 
| AAA | __ASCiladjustforaddition 
| DAA | __ Decimal adjust for addition 

| SUB | __Subtractbyteorword 
| SBB__| Subtract byte or word with borrow 
|_DEC | __Decrementbyte orwordby1 
| NEG | _Negatebyteorword 
| CMP | __Comparebyteorword 
| AAS | __ASCiladjustforsubtraction 
|_DAS | __Decimaladjustfor subtraction 

M 


ASCII adjust for multiply 


D 


“And” byte or word 
“Inclusive or” byte or word 


pre See 
SAR Shift arithmetic right byte or word 
| ROR | Rotaterightbyteorword 


Rotate through carry right byte or word 


Figure 4d. Shift/Rotate Logical Instructions 
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Call procedure 
Return from procedure 
JMP 
| JBE/JNA__| __Jumpifbelow or equal/not above _| ! 
ITERATION CONTROLS 
ah ee 
Loop 
JOXZ 
Se a | 
ds eee 
IRET Interrupt return 
JP/JPE <7 
Figure 4e. Program Transfer Instructions 
Memory Organization 
Memory is organized as sets of variable length seg- 
ments. Each segment is a linear contiguous se- 
quence of up to 64K (216) 8-bit bytes. Memory is 
TD addressed using a two component address (a point- 
er) that consists of a 16-bit segment selector, and a 
ST 16-bit offset. The segment selector indicates the de- 


sired segment in memory. The offset component in- 


CLI dicates the desired byte address within the segment. 


32-BIT POINTER 


EXECUTION ENVIRONMENT CONTROL 


LMSW 
SMSW 


ENTER 


BOUND 210253-5 
Figure 4g. High Level Instructions Figure 5. Two Component Address 
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Table 3. Segment Register Selection Rules 


Code (CS) 


External (Global) Data Extra (ES) 


All instructions that address operands in memory 
must specify the segment and the offset. For speed 
and compact instruction encoding, segment selec- 
tors are usually stored in the high speed segment 
registers. An instruction need specify only the de- 
sired segment register and an offset in order to ad- 
dress a memory operand. 


Most instructions need not explicitly specify which 
segment register is uséd. The correct segment reg- 
ister is automatically chosen according to the rules 
of Table 3. These rules follow the way programs are 
written (see Figure 6) as independent modules that 
require areas for code and data, a stack, and access 
to external data areas. 


Special segment override instruction prefixes allow 
the implicit segment register selection rules to be 
overridden for special cases. The stack, data, and 
extra segments may coincide for simple programs. 
To access operands not residing in one of the four 
immediately available segments, a full 32-bit pointer 
or a new segment selector must be loaded. 


Addressing Modes 


The 80286 provides a total of eight addressing 
modes for instructions to specify operands. Two ad- 
dressing modes are provided for instructions that 
operate on register or immediate operands: 


Register Operand Mode: The operand is locat- 
ed in one of the 8 or 16-bit general registers. 


Immediate Operand Mode: The operand is in- 
cluded in the instruction. 


Six modes are provided to specify the location of an 
operand in a memory segment. A memory operand 
address consists of two 16-bit components: seg- 
ment selector and offset. The segment selector is 
supplied by a segment register either implicitly cho- 
sen by the addressing mode or explicitly chosen by 
a segment override prefix. The offset is calculated 
by summing any combination of the following three 
address elements: 


the displacement (an 8 or 16-bit immediate val- 
ue contained in the instruction) 


the base (contents of either the BX or BP base 
registers) 


Memory Segment Register implicit Segment 
Reference Needed Used Selection Rule 


Automatic with instruction prefetch 


Stack Stack (SS) All stack pushes and pops. Any memory reference which uses BP 
as a base register. 

Local Data Data (DS) All data references except when relative to stack or 
string destination 


Alternate data segment and destination of string operation 
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Figure 6. Segmented Memory Helps 
Structure Software 


the index (contents of either the SI or DI index 
registers) 


Any carry out from the 16-bit addition is ignored. 
Eight-bit displacements are sign extended to 16-bit 
values. i 


Combinations of these three address elements de- 
fine the six memory addressing modes, described 
below. 


Direct Mode: The operand’s offset is contained in 
the instruction as an 8 or 16-bit displacement ele- 
ment. 


Register Indirect Mode: The operand’s offset is in 
one of the registers SI, DI, BX, or BP. 


Based Mode: The operand’s offset is the sum of an 


8 or 16-bit displacement and the contents of a base 
register (BX or BP). 
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Indexed Mode: The operand’s offset is the sum of 
an 8 or 16-bit displacement and the contents of an 
index register (SI or Dl). . 


Based Indexed Mode: The operand’s offset is the 
sum of the contents of a base register and an index 
register. 


Based Indexed Mode with Displacement: The op- 
erand’s offset is the sum of a base register’s con- 
tents, an index register’s contents, and an 8 or 16-bit 
displacement. 


Data Types 


The 80286 directly supports the following data 
types: 


Integer: A signed binary numeric value con- 
tained in an 8-bit byte or a 16-bit 
word. All operations assume a 2’s 
complement representation. Signed 
32 and 64-bit integers are supported 
using the Numeric Data Processor, 


the 80287. 


An unsigned binary numeric value 
contained in an 8-bit byte or 16-bit 
word. 


A 32-bit quantity, composed of a 
segment selector component and an 
offset component. Each component 
is a 16-bit word. 


A contiguous sequence of bytes or 
words. A string may contain from 1 
byte to 64K bytes. 


A byte representation of alphanu- 
meric and control characters using 
the ASCII standard of character rep- 
resentation. 


BCD: A byte (unpacked) representation of 
the decimal digits 0-9. 


Packed BCD: A byte (packed) representation of 
two decimal digits 0-9 storing one 
digit in each nibble of the byte. 


Floating Point: A signed 32, 64, or 80-bit real num- 
ber representation. (Floating point 
Operands are supported using the 
80287 Numeric Processor). 


Ordinal: 


Pointer: 


String: 


ASCII: 


Figure 7 graphically represents the data types sup- 
ported by the 80286. 


I/O Space 


The I/O space consists of 64K 8-bit or 32K 16-bit 
ports. |/O instructions address the I/O space with 
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either an 8-bit port address, specified in the instruc- 
tion, or a 16-bit port address in the DX register. 8-bit 
port addresses are zero extended such that A;5-Ag 
are LOW. I/O port addresses OOF8(H) through 
OOFF(H) are reserved. 


7 
SIGNED 
BYTE 


SIGN BIT 
MAGNITUDE 


7 0 
UNSIGNED 
BYTE 
_ wsB 
MAGNITUDE 


314+! g7 OO oO 
SIGNED 
woro {| | | | | 
SIGN BIT-, “MSB 
MAGNITUDE 
siGneD 31 +9 +2 wy! Po 


DOUBLE 
WORD’ 


SIGN BiT- ,|U mMSsB 
MAGNITUDE 


+6 +5 +4 +3 +2 +1 
47 32 31 


+7 0 
SIGNED 63 16 15 0 


QUAD 
WORD‘ 


2) a aera 
MAGNITUDE 


+1 0 0 
UNSIGNED 
WORD 
_MsSB 
MAGNITUDE 
+N 


BINARY 22 : 
ee [TT] 
IMAL 
DEC — 


(BCD) 


BCD BCD 
DIGIT 1 DIGIT 0 
ee oe ae 

ASCII 


ASCll SCit ASCII 
CHARACTER CHARACTER; CHARACTER) 


+ He y. ST as 
PACKED 


MOST LEAST 
SIGNIFICANT DIGIT SIGNIFICANT DIGIT 


715 +N 715 +1 9715 9 4g 
STRING 


BYTE/WORD N BYTE/WORD1 BYTE WORD 0 


31 +3 _+2 1615 +1 0 0 


POINTER 


SELECTOR OFFSET 
w*O +8 #7 148 4S, 04. 4S 


FLOATING 
POINT* 


SIGN BIT ~ 


EXPONENT MAGNITUDE 
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Figure 7. 80286 Supported Data Types 
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Table 4. interrupt Vector Assignments 


Interrupt 
Number 


17-31 


interrupts 


An interrupt transfers execution to a new program 
location. The old program address (CS:IP) and ma- 
chine state (Flags) are saved on the stack to allow - 
resumption of the interrupted program. Interrupts fall 
into three classes: hardware initiated, INT instruc- 
tions, and instruction exceptions. Hardware initiated 
interrupts occur in response to an external input and 
are classified as non-maskable or maskable. Pro- 
grams may cause an interrupt with an INT instruc- 
tion. Instruction exceptions occur when an unusual 
condition, which prevents further instruction pro- 
cessing, is detected while attempting to execute an 
instruction. The return address from an exception 
will always point at the instruction causing the ex- 
ception and include any leading instruction prefixes. 


A table containing up to 256 pointers defines the 
proper interrupt service routine for each interrupt. In- 
terrupts 0-31, some of which are used for instruc- 
tion exceptions, are reserved. For each interrupt, an 
8-bit vector must be supplied to the 80286 which 
identifies the appropriate table entry. Exceptions 
supply the interrupt vector internally. INT instructions 
contain or imply the vector and allow access to all 
256 interrupts. Maskable hardware initiated inter- 
rupts supply the 8-bit vector to the CPU during an 
interrupt acknowledge bus sequence. Non-maska- 
ble hardware interrupts use a predefined internally 
supplied vector. 


MASKABLE INTERRUPT (INTR) 


The 80286 provides a maskable hardware interrupt 
request pin, INTR. Software enables this input by 


a 9 7 
ume nebeea! 
ia ae Ries tae Toa 
eee Pe ae, 
es ee 
eS TT ee Me 
| 6 | Anyundefined opcode | Yes 
| BAS See ped 
eae ieene. 2h ceaeeae eee | 
ee ee 

Paros ent auened 


Does Return Address 
Point to Instruction 
Causing Exception? 


DIV, IDIV 
All 


Related 
instructions 


INT 2 or NMI pin 


INT 3 
INTO 


ESC or WAIT 


ESC or WAIT 


setting the interrupt flag bit (IF) in the flag word. All 
224 user-defined interrupt sources can share this in- 
put, yet they can retain separate interrupt handlers. 
An 8-bit vector read by the CPU during the interrupt 
acknowledge sequence (discussed in System Inter- 
face section) identifies the source of the interrupt. 


Further maskable interrupts are disabled while serv- 
icing an interrupt by resetting the IF bit as part of the 
response to an interrupt or exception. The saved 
flag word will reflect the enable status of the proces- 
sor prior to the interrupt. Until the flag word is re- 
stored to the flag register, the interrupt flag will be 
zero unless specifically set. The interrupt return in- 
struction includes restoring the flag word, thereby 
restoring the original status of IF. 


NON-MASKABLE INTERRUPT REQUEST (NMI) 


A non-maskable interrupt input (NMI) is also provid- 
ed. NMI has higher priority than INTR. A typical use 


~ of NMI would be to activate a power failure routine. 


The activation of this input causes an interrupt with 
an internally supplied vector value of 2. No external 
interrupt acknowledge sequence is performed. 


While executing the NMI servicing procedure, the 
80286 will service neither further NMI requests, 
INTR requests, nor the processor extension seg- 
ment overrun interrupt until an interrupt return (IRET) 
instruction is executed or the CPU is reset. If NMI 
occurs while currently servicing an NMI, its presence 
will be saved for servicing after executing the first 
IRET instruction. IF is cleared at the beginning of an 
NMI interrupt to inhibit INTR interrupts. 
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SINGLE STEP INTERRUPT 


The 80286 has an internal interrupt that allows pro- 
‘grams to execute one instruction at a time. It is 
called the single step interrupt and is controlled by 
the single step flag bit (TF) in the flag word. Once 
this bit is set, an internal single step interrupt will 
occur after the next instruction has been executed. 
The interrupt clears the TF bit and uses an internally 
supplied vector of 1. The IRET instruction is used to 
set the TF bit and transfer control to the next instruc- 
tion to be single stepped. 


Interrupt Priorities 


When simultaneous interrupt requests occur, they 
are processed in a fixed order as shown in Table 5. 
Interrupt processing involves saving the flags, return 
address, and setting CS:IP to point at the first in- 
struction of the interrupt handler. If other interrupts 
remain enabled they are processed before the first 
instruction of the current interrupt handler is execut- 
ed. The last interrupt processed is therefore the first 
one serviced. 


Table 5. Interrupt Processing Order 


Single step 


4 Processor extension segment overrun 


ho 
ee INT instruction 


Initialization and Processor Reset 


Processor initialization or start up is accomplished 
by driving the RESET input pin HIGH. RESET forces 
the 80286 to terminate all execution and local bus 
activity. No instruction or bus activity will occur as 
long as RESET is active. After RESET becomes in- 
active and an internal processing interval elapses, 
the 80286 begins execution in real address mode 
with the instruction at physical location FFFFFO(H). 
RESET also sets some registers to predefined val- 
ues as shown in Table 6. 


Instruction exception | 


: / 
intl. 
Table 6. 80286 Initial Register State after RESET 


Flag word 0002(H) 
Machine Status Word FFFO(H) 
Instruction pointer FFFO(H) 
FO00(H) 
0000(H) 
0000(H) 
0000(H) 


Code segment - 
Data segment 
Extra segment 
Stack segment 


HOLD must not be active during the time from the 
leading edge of RESET to 34 CLKs after the trailing 
edge of RESET. 


Machine Status Word Description 

The machine status word (MSW) records when a 
task switch takes place and controls the operating 
mode of the 80286. It is a 16-bit register of which the 
lower four bits are used. One bit places the CPU into 
protected mode, while the other three bits, as shown 
in Table 7, control the processor extension interface. 
After RESET, this register contains FFFO(H) which 
places the 80286 in 8086 real address mode. 


Table 7. MSW Bit Functions 
Bit 
Position 
Protected mode enable places the 
80286 into protected mode and cannot 
be cleared except by RESET. 
oe. Monitor processor extension allows 


WAIT instructions to cause a processor 
extension not present exception 
ee 


(number 7). 

Emulate processor extension causes a 

processor extension not present 
The LMSW and SMSW instructions can load and 
store the MSW in real address mode. The recom- 
mended use of TS, EM, and MP is shown in Table 8. 


exception (number 7) on ESC 
instructions to allow emulating a 
processor extension. 


Task switched indicates the next 
instruction using a processor extension 
will cause exception 7, allowing software 
to test whether the current processor 
extension context belongs to the current 
task. 


Table 8. Recommended MSW Encodings For Processor Extension Control 


Instructions 
Causing 
Exception 7 


Initial encoding after RESET. 80286 operation is identical to 8086, 88. 
No processor extension is available. Software will emulate its function. 


No processor extension is available. Software will emulate its function. The current 
processor extension context may belong to another task. 


A processor extension exists. 


A processor extension exists. The current processor extension context may belong to 
another task. The Exception 7 on WAIT allows software to test for an error pending 
from a previous processor extension operation. 
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Halt 


The HLT instruction stops program execution and 
prevents the CPU from using the local bus until re- 
started. Either NMI, INTR with IF = 1, or RESET will 
force the 80286 out of halt. If interrupted, the saved 
CS:IP will point to the next instruction after the HLT. 


8086 REAL ADDRESS MODE 


The 80286 executes a fully upward-compatible su- 
perset of the 8086 instruction set in real address 
mode. In real address mode the 80286 is object 


code compatible with 8086 and 8088 software. The - 


real address mode architecture (registers and ad- 
dressing modes) is exactly as described in the 
80286 Base Architecture section of this Functional 
Description. 


Memory Size 


Physical memory is a contiguous array of up to 
1,048,576 bytes (one megabyte) addressed by pins 


Ao through Ag and BHE. Ago through Agg should be 


ignored. 


Memory Addressing 


In real address mode physical memory is a contigu- 
Ous array of up to 1,048,576 bytes (one megabyte) 
addressed by pins Ao through Ajg and BHE. Ad- 
dress bits Azp—Ao3 may not always be zero in real 
mode. Azg—-Aa3 should not be used by the system 
while the 80286 is operating in Real Mode. 


The selector portion of a pointer is interpreted as the 
upper 16 bits of a 20-bit segment address. The lower 
four bits of the 20-bit segment address are always 
zero. Segment addresses, therefore, begin on multi- 
ples of 16 bytes. See Figure 8 for a graphic repre- 
sentation of address information. 


All segments in real address mode are 64K bytes in 
size and may be read, written, or executed. An ex- 
ception or interrupt can occur if data operands or 
instructions attempt to wrap around the end of a 
segment (e.g. a word with its low order byte at offset 
FFFF(H) and its high order byte at offset O000(H). If, 
in real address mode, the information contained in a 
segment does not use the full 64K bytes, the unused 
end of the segment may be overlayed by another 
segment to reduce physical memory requirements. 


Reserved Memory Locations 


The 80286 reserves two fixed areas of memory in 
real address mode (see Figure 9); system initializa- 


fig" 


80286 


tion area and interrupt table area. Locations from 
addresses FFFFO(H) through FFFFF(H) are re- 
served for system initialization. Initial execution be- 
gins at location FFFFO(H). Locations 00000(H) 
through OO3FF(H) are reserved for interrupt vectors. 


15 


OFFSET 
000) OFFSET ADDRESS 


SEGMENT 
ADDRESS 


20-BIT PHYSICAL 
MEMORY ADDRESS 
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Figure 8. 8086 Real Address Mode 
Address Calculation 


FFFFFH 
RESET BOOTSTRAP 
, PROGRAM JUMP 
FFFFOH 
3FFH 
INTERRUPT POINTER . 
FOR VECTOR 255 


3FCH 


INTERRUPT POINTER 
FOR VECTOR 1 
INTERRUPT POINTER 
FOR VECTOR 0 


INITIAL CS:IP VALUE IS F000:FFFO. 
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Figure 9. 8086 Real Address Mode Initially 
Reserved Memory Locations 
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Table 9. Real Address Mode Addressing Interrupts 


Interrupt table limit too small exception 


Segment overrun exception 


Interrupts 


Table 9 shows the interrupt vectors reserved for ex- 
ceptions and interrupts which indicate an addressing 
error. The exceptions leave the CPU in the state ex- 
isting before attempting to execute the failing in- 
struction (except for PUSH, POP, PUSHA, or POPA). 
' Refer to the next section on protected mode initiali- 
zation for a discussion on exception 8. 


Protected Mode Initialization 


To prepare the 80286 for protected mode, the LIDT 
instruction is used to load the 24-bit interrupt table 
base and 16-bit limit for the protected mode interrupt 
table. This instruction can also set a base and limit 
for the interrupt vector table in real address mode. 
After reset, the interrupt table base is initialized to 
000000(H) and its size set to O3FF(H). These values 
are compatible with 8086, 88 software. LIDT should 
only be executed in preparation for protected mode. 


Shutdown 


Shutdown occurs when a severe error is detected 
that prevents further instruction processing by the 
CPU. Shutdown and halt are externally signalled via 
a halt bus operation. They can be distinguished by 
Az HIGH for halt and A; LOW for shutdown. In real 
address mode, shutdown can occur under two con- 
ditions: 

e Exceptions 8 or 13 happen and the IDT limit does 

not include the interrupt vector. 


@ ACALL INT or PUSH instruction attempts to wrap 
around the stack segment when SP is not even. 


An NMI input can bring the CPU out of shutdown if 
the IDT limit is at least OOOF(H) and SP is greater 
than 0005(H), otherwise shutdown can only be exit- 
ed via the RESET input. 
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Interrupt Related ) Return Address 
Number instructions Before Instruction? 
| 8 | INT vector is not within table limit 
Processor extension segment overrun ESC with memory operand extend- 
interrupt ing beyond offset FFFF(H) 


Word memory reference with offset 
= FFFF(H) or an attempt to exe- 
cute past the end of a segment 


PROTECTED VIRTUAL ADDRESS 
MODE 


The 80286 executes a fully upward-compatible su- 
perset of the 8086 instruction set in protected virtual 
address mode (protected mode). Protected mode 
also provides memory management and protection 
mechanisms and associated instructions. 


The 80286 enters protected virtual address mode 
from real address mode by setting the PE (Protec- 
tion Enable) bit of the machine status word with the 
Load Machine Status Word (LMSW) instruction. Pro- - 
tected mode offers extended physical and virtual 
memory address space, memory protection mecha- 
nisms, and new operations to support operating sys- 
tems and virtual memory. 


All registers, instructions, and addressing modes de- 
scribed in the 80286 Base Architecture section of 
this Functional Description remain the same. Pro- 
grams for the 8086, 88, 186, and real address mode . 
80286 can be run in protected mode; however, em- 
bedded constants for segment selectors are differ- 
ent. 


Memory Size 


The protected mode 80286 provides a 1 gigabyte 
virtual address space per task mapped into a 16 
megabyte physical address space defined by the ad- 
dress pin Ao3_Ag and BHE. The virtual address 
space may be larger than the physical address 
space since any use of an address that does not 
map to a physical memory location will cause a re- 
startable exception. 


Memory Addressing 


As in real address mode, protected mode uses 32- 
bit pointers, consisting of 16-bit selector and offset 
components. The selector, however, specifies an in- 
dex into a memory resident table rather than the up- 
per 16-bits of a real memory address. The 24-bit 
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base address of the desired segment is obtained 
from the tables in memory. The 16-bit offset is add- 
ed to the segment base address to form the physical 
address as shown in Figure 10. The tables are auto- 
matically referenced by the CPU whenever a seg- 
ment register is loaded with a selector. All 80286 
instructions which load a segment register will refer- 
ence the memory based tables without additional 


software. The memory based tables contain 8 byte 
values called descriptors. 


nN 0 


POINTER 


ac] on 


PHYSICAL MEMORY 
~ NN 


SEGMENT BASE 
ADDRESS 


Present (P) 


Descriptor Privilege 
Level (DPL) 
Segment Descrip- 
tor (S) 


rs 
6-5 
4 
3 
2 
1 
oo 
1 


Executable (E) 
Expansion Direc- 
tion (ED) 
Writeable (W) 
Lae Executable (E) 
Definition ScoIFRREETING 64) 


80286 


DESCRIPTORS 


Descriptors define the use of memory. Special types 
of descriptors also define new functions for transfer 
of control and task switching. The 80286 has seg- 
ment descriptors for code, stack and data segments, 
and system control descriptors for special system 
data segments and control transfer operations. De- 
scriptor accesses are performed as locked bus op- 
erations to assure descriptor integrity in multi-proc- 
essor systems. 


CODE AND DATA SEGMENT DESCRIPTORS 

(S = 1) 

Besides segment base addresses, code and data 
descriptors contain other segment attributes includ- 
ing segment size (1 to 64K bytes), access rights 
(read only, read/write, execute only, and execute/ 
read), and presence in memory (for virtual memory 
systems) (See Figure 11). Any segment usage vio- 
lating a segment attribute indicated by the segment 
descriptor will prevent the memory cycle and cause 
an exception or interrupt. 


Code or Data Segment Descriptor 


ACCESS 
RIGHTS BYTE 


210253-11 
*Must be set to 0 for compatibility with 80386. 


Segment is mapped into physical memory. 

No mapping to physical memory exits, base and limit are 
not used. | 

Segment privilege attribute used in privilege tests. 


Code or Data (includes stacks) segment descriptor 
System Segment Descriptor or Gate Descriptor 


Data segment descriptor type is: 

Expand up segment, offsets must be < limit. 
Expand down segment, offsets must be > limit. 
Data segment may not be written into. 

Data segment may be written into. 


Code Segment Descriptor type is: 
Code segment may only be executed 
when CPL =DPL and CPL 

remains unchanged. 

Code segment may not be read 
Code segment may be read. 


Segment 


(S=1, 
E = 1) 


Figure 11. Code and Data Segment Descriptor Formats 
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Code and data (including stack data) are stored in 


two types of segments: code segments and data 


segments. Both types are identified and defined by 
segment descriptors (S = 1). Code segments are 
identified by the executable (E) bit set to 1 in the 
descriptor access rights byte. The access rights byte 
of both code and data segment descriptor types 
have three fields in common: present (P) bit, De- 
scriptor Privilege Level (DPL), and accessed (A) bit. 
lf P = 0, any attempted use of this segment will 
Cause a not-present exception. DPL specifies the 
privilege level of the segment descriptor. DPL con- 
trols when the descriptor may be used by a task 
(refer to privilege discussion below). The A bit shows 
whether the segment has been previously accessed 
for usage profiling, a necessity for virtual memory 
systems. The CPU will always set this bit when ac- 
cessing the descriptor. 


Data segments (S = 1, E = 0) may be either read- 
only or read-write as controlled by the W bit of the 
access rights byte. Read-only (W = 0) data seg- 
ments may not be written into. Data segments may 
grow in two directions, as determined by the Expan- 
sion Direction (ED) bit: upwards (ED = 0) for data 
segments, and downwards (ED = 1) for a segment 
containing a stack. The limit field for a data segment 
descriptor is interpreted differently depending on the 
ED bit (see Figure 11). 


A code segment (S = = 1) may be execute- 
only or execute/read as determined by the Read- 
able (R) bit. Code segments may never be written 
into and execute-only code segments (R = 0) may 
not be read. A code segment may also have an attri- 
bute called conforming (C). A conforming code seg- 
ment may be shared by programs that execute at 
different privilege levels. The DPL of a conforming 
code segment defines the range of privilege levels 
at which the segment may be executed (refer to priv- 
ilege discussion below). The limit field identifies the 
last byte of a code segment. 


SYSTEM SEGMENT DESCRIPTORS (S = 
TYPE = 1-3) 


In addition to code and data segment descriptors, 
the protected mode 80286 defines System Segment 
Descriptors. These descriptors define special sys- 
tem data segments which contain a table of descrip- 
tors (Local Descriptor Table Descriptor) or segments 
which contain the execution state of a task (Task 
State Segment Descriptor). 


Figure 12 gives the formats for the special system 
data segment descriptors. The descriptors contain a 


24-bit base address of the segment and a 16-bit lim- - 


it. The access byte defines the type of descriptor, its 
state and privilege level. The descriptor contents are 
valid and the segment is in physical memory if P =1. 
If P = 0, the segment is not valid. The DPL field is 
only used in Task State Segment descriptors and 
indicates the privilege level at which the descrip- 
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tor may be used (see Privilege). Since the Local De- 
scriptor Table descriptor may only be used by a spe- 
cial privileged instruction, the DPL field is not used. 
Bit 4 of the access byte is 0 to indicate that it is a 
system control descriptor. The type field specifies 
the descriptor type as indicated in Figure 12. 


System Segment Descriptor 


7 07 0 
INTEL RESERVED* 
ess Bae Raiusce, 2 ie! 


18 87 0 
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System Segment Descriptor Fields 


Description 


TYPE Available Task State Segment (TSS) 
Local Descriptor Table 
Busy Task State Segment (TSS) 


Descriptor contents are not valid 
Descriptor contents are valid 
Descriptor Privilege Level 
24-bit | Base Address of special system data 
number | segment in real memory 
LIMIT | 16-bit | Offset of last byte in segment 
number 


Figure 12. System Segment Descriptor Format 


GATE DESCRIPTORS (S = 0, TYPE = 4-7) 


Gates are used to control access to entry points 
within the target code segment. The gate descrip- 
tors are call gates, task gates, interrupt gates and 
trap gates. Gates provide a level of indirection be- 
tween the source and destination of the control 
transfer. This indirection allows the CPU to automati- 
cally perform protection checks and control entry 
point of the destination. Call gates are used to 
change privilege levels (see Privilege), task gates 
are used to perform a task switch, and interrupt and 
trap gates are used to specify interrupt service rou- 
tines. The interrupt gate disables interrupts (resets 
IF) while the trap gate does not. 


Gate Descriptor 


INTEL RESERVED* 
WORD 
plore fo] rere fe *] Conta. 
DESTINATION SELECTOR;s_2 


DESTINATION OFFSETj5-9 


18 87 
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Gate Descriptor Fields 


| Name | Value | Description 


4 —Call Gate 

5 -Task Gate 
TYPE 6 | -Interrupt Gate 

7 


-—Trap Gate 


—Descriptor Contents are not 
valid 
—Descriptor Contents are 


- 
valid 


| DPL Gs |soO-3 | Descriptor Privilege Level 


WORD Number of words to copy 
COUNT 0-31 


from callers stack to called 
procedures stack. Only used 
DESTINATION 
SELECTOR 


Oo 


with call gate. 


Selector to the target code 
segment (Call, Interrupt or 

Trap Gate) 

Selector to the target task 

state segment (Task Gate) 


DESTINATION | 16-bit | Entry point within the target 
OFFSET offset | codesegment — 


Figure 13. Gate Descriptor Format 


16-bit 
selector 


Figure 13 shows the format of the gate descriptors. 
The descriptor contains a destination pointer that 
points to the descriptor of the target segment and 
the entry point offset. The destination selector in an 
interrupt gate, trap gate, and call gate must refer to a 
code segment descriptor. These gate descriptors 
contain the entry point to prevent a program from 
constructing and using an illegal entry point. Task 
gates may only refer to a task state segment. Since 
task gates invoke a task switch, the destination off- 
set is not used in the task gate. 


Exception 13 is generated when the gate is used if a 
destination selector does not refer to the correct de- 
scriptor type. The word count field is used in the call 
gate descriptor to indicate the number of parameters 
(O-—31 words) to be automatically copied from the 
caller’s stack to the stack of the called routine when 
a control transfer changes privilege levels. The word 
count fieid is not used by any other gate descriptor. 


The access byte format is the same for all gate de- 
scriptors. P = 1 indicates that the gate contents are 
valid. P = 0 indicates the contents are not valid and 
causes exception 11 if referenced. DPL is the de- 


PROGRAM VISIBLE 


ACCESS 
SEGMENT SELECTORS 


15 0 


SEGMENT REGISTERS 
(LOADED BY PROGRAM) 


RIGHTS SEGMENT PHYSICAL BASE ADDRESS 


SEGMENT DESCRIPTOR CACHE REGISTERS 
(AUTOMATICALLY LOADED BY 
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scriptor privilege level and specifies when this de- 
scriptor may be used by a task (refer to privilege 
discussion below). Bit 4 must equal 0 to indicate a 
system control descriptor. The type field specifies 
the descriptor type as indicated in Figure 13. 


SEGMENT DESCRIPTOR CACHE REGISTERS 


A segment descriptor cache register is assigned to 
each of the four segment registers (CS, SS, DS, ES). 
Segment descriptors are automatically 
(cached) into a segment descriptor cache register 
(Figure 14) whenever the associated segment regis- 
ter is loaded with a selector. Only segment descrip- 
tors may be loaded into segment descriptor cache 
registers. Once loaded, all references to that seg- 
ment of memory use the cached descriptor informa- 
tion instead of reaccessing the descriptor. The de- 
scriptor cache registers are not visible to programs. 
No instructions exist to store their contents. They 
only change when a segment register is loaded. 


SELECTOR FIELDS 


A protected mode selector has three fields: descrip- 
tor entry index, local or global descriptor table indi- 
cator (Tl), and selector privilege (RPL) as shown in 
Figure 15. These fields select one of two memory 
based tables of descriptors, select the appropriate 
table entry and allow highspeed testing of the selec- 
tor’s privilege attribute (refer to privilege discussion 
below). 


SELECTOR 


FUNCTION 


BITS 
1-0 REQUESTED | INDICATES SELECTOR PRIVILEGE 

PRIVILEGE LEVEL DESIRED 

LEVEL 

(RPL) 

TABLE Tl = 0 USE GLOBAL DESCRIPTOR TABLE 

INDICATOR (GDT) 

(Tl Tl = 1 USE LOCAL DESCRIPTOR TABLE 
(LDT) 


Sa SELECT DESCRIPTOR ENTRY IN TABLE 
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Figure 15. Selector Fields 


PROGRAM INVISIBLE 


SEGMENT SIZE 


16 15 
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Figure 14. Descriptor Cache Registers 
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LOCAL AND GLOBAL DESCRIPTOR TABLES 


Two tables of descriptors, called descriptor tables, 
contain all descriptors accessible by a task at any 
given time. A descriptor table is a linear array of up 
to 8192 descriptors. The upper 13 bits of the selec- 
tor value are an index into a descriptor table. Each 
table has a 24-bit base register to locate the descrip- 
tor table in physical memory and a 16-bit limit regis- 
ter that confine descriptor access to the defined lim- 
its of the table as shown in Figure 16. A restartable 
exception (13) will occur if an attempt is made to 
reference a descriptor outside the table limits. 


One table, called the Global Descriptor table (GDT), 
contains descriptors available to all tasks. The other 
table, called the Local Descriptor Table (LDT), con- 
tains descriptors that can be private to a task. Each 
task may have its own private LDT. The GDT may 
contain all descriptor types except interrupt and trap 
descriptors. The LDT may contain only segment, 
task gate, and call gate descriptors. A segment can- 
not be accessed by a task if its segment descriptor 
does not exist in either descriptor table at the time of 
access. 


5 
GOT LIMIT os 


GDT BASE 


r 
| 

| 

\ 

| 

| 

| 
J 


LDT LIMIT BS 
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Figure 16. Local and Global 
Descriptor Table Definition 


The LGDT and LLDT instructions load the base and 
limit of the global and local descriptor tables. LGDT 
and LLDT are privileged, i.e. they may only be exe- 
cuted by trusted programs operating at level 0. The 
LGDT instruction loads a six byte field containing the 
16-bit table limit and 24-bit physical base address of 
the Global Descriptor Table as shown in Figure 17. 
The LLDT instruction loads a selector which refers 
to a Local Descriptor Table descriptor containing the 
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base address and limit for an LDT, as shown in Fig- 
ure 12. 


7 0 


7 0 
1§ 87 0 
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+4 


+3 +2 


+1 


*Must be set to 0 for compatibility with 80386. 


Figure 17. Global Descriptor Table and Interrupt 
Descriptor Table Data Type 


INTERRUPT DESCRIPTOR TABLE 


The protected mode 80286 has a third descriptor 
table, called the Interrupt Descriptor Table (IDT) 
(see Figure 18), used to define up to 256 interrupts. 
It may contain only task gates, interrupt gates and 
trap gates. The IDT (Interrupt Descriptor Table) has 
a 24-bit physical base and 16-bit limit register in the 
CPU. The privileged LIDT instruction loads these 
registers with a six byte value of identical form to 
that of the LGDT instruction (see Figure 17 and Pro- 
tected Mode Initialization). 


GATE FOR 
INTERRUPT #n 
GATE FOR 
INTERRUPT #n-1 


INTERRUPT 
DESCRIPTOR 
TABLE 

(10T) 


GATE FOR 
INTERRUPT #1 


1OT LIMIT 
GATE FOR 
INTERRUPT #0 


IDT BASE 
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Figure 18. interrupt Descriptor Table Definition 


References to IDT entries are made via INT instruc- 
tions, external interrupt vectors, or exceptions. The 
IDT must be at least 256 bytes in size to allocate 
space for all reserved interrupts. 


Privilege 

The 80286 has a four-level hierarchical privilege sys- 
tem which controls the use of privileged instructions 
and access to descriptors (and their associated seg- 
ments) within a task. Four-level privilege, as shown 
in Figure 19, is an extension of the user/supervisor 
mode commonly found in minicomputers. The privi- 
lege levels are numbered 0 through 3. Level 0 is the 


CPU 
ENFORCED 


INTERFACES 


NOTE: PL BECOMES NUMERICALLY LOWER AS PRIVILEGE LEVEL 
INCREASES 
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Figure 19. Four-Level Privilege 


most privileged level. Privilege levels provide protec- 


tion within a task. (Tasks are isolated by providing 
private LDT’s for each task.) Operating system rou- 
tines, interrupt handlers, and other system software 
can be included and protected within the virtual ad- 
dress space of each task using the four levels of 
privilege. Each task in the system has a separate 
stack for each of its privilege levels. 


Tasks, descriptors, and selectors have a privilege 


level attribute that determines whether the descrip- 
tor may be used. Task privilege effects the use of 
instructions and descriptors. Descriptor and selector 
privilege only effect access to the descriptor. 


TASK PRIVILEGE 


A task always executes at one of the four privilege 
levels. The task privilege level at any specific instant 
is called the Current Privilege Level (CPL) and is de- 
fined by the lower two bits of the CS register. CPL 
cannot change during execution in a single code 
segment. A task’s CPL may only be changed by con- 
trol transfers through gate descriptors to a new code 
segment (See Control Transfer). Tasks begin exe- 
cuting at the CPL value specified by the code seg- 
ment selector within TSS when the task is initiated 
via a task switch operation (See Figure 20). A task 
executing at Level 0 can access all data segments 
defined in the GDT and the task’s LDT and is con- 
sidered the most trusted level. A task executing a 
Level 3 has the most restricted access to data and is 
considered the least trusted level. 


DESCRIPTOR PRIVILEGE 


Descriptor privilege is specified by the Descriptor 
Privilege Level (DPL) field of the descriptor access 
byte. DPL specifies the least trusted task privilege 
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level (CPL) at which a task may access the descrip- 
tor. Descriptors with DPL = 0 are the most protect- 
ed. Only tasks executing at privilege level 0 
(CPL = 0) may access them. Descriptors with DPL 
= 3 are the least protected (i.e. have the least re- 
stricted access) since tasks can access them when 
CPL = 0, 1, 2, or 3. This rule applies to all descrip- 
tors, except LDT descriptors. 


SELECTOR PRIVILEGE 


Selector privilege is specified by the Requested Priv- 
ilege Level (RPL) field in the least significant two bits 
of a selector. Selector RPL may establish a less 
trusted privilege level than the current privilege level 
for the use of a selector. This level is called the 
task’s effective privilege level (EPL). RPL can only 
reduce the scope of a task’s access to data with this 
selector. A task’s effective privilege is the numeric 
maximum of RPL and CPL. A selector with RPL = 0 
imposes no additional restriction on its use while a 
selector with RPL = 3 can only refer to segments at 
privilege Level 3 regardless of the task’s CPL. RPL 
is generally used to verify that pointer parameters 
passed to a more trusted procedure are not allowed 
to use data at a more privileged level than the caller 
(refer to pointer testing instructions). 


Descriptor Access and Privilege 
Validation 


Determining the ability of a task to access a seg- 
ment involves the type of segment to be accessed, 
the instruction used, the type of descriptor used and 
CPL, RPL, and DPL. The two basic types of segment 
accesses are control transfer (selectors loaded into 
CS) and data (selectors loaded into DS, ES or SS). 


DATA SEGMENT ACCESS 


Instructions that load selectors into DS and ES must 
refer to a data segment descriptor or readable code 
segment descriptor. The CPL of the task and the 
RPL of the selector must be the same as or more 
privileged (numerically equal to or lower than) than 
the descriptor DPL. In genera!, a task can only ac- 
cess data segments at the same or less privileged 
levels than the CPL or RPL (whichever is numerically — 
higher) to prevent a program from accessing data it 
cannot be trusted to use. 


An exception to the rule is a readable conforming 
code segment. This type of code segment can be 
read from any privilege level. 


If the privilege checks fail (e.g. DPL is numerically 
less than the maximum of CPL and RPL) or an incor- 
rect type of descriptor is referenced (e.g. gate de- 
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scriptor or execute only code segment) exception 13 
occurs. If the segment is not present, exception 11 
is generated. 


Instructions that load selectors into SS must refer to 
data segment descriptors for writable data seg- 
ments. The descriptor privilege (DPL) and RPL must 
equal CPL. All other descriptor types or a privilege 
level violation will cause exception 13. A not present 
fault causes exception 12. 


CONTROL TRANSFER 


Four types of control transfer can occur when a se- 
lector is loaded into CS by a control transfer opera- 
tion (see Table 10). Each transfer type can only oc- 
cur if the operation which loaded the selector refer- 
ences the correct descriptor type. Any violation of 
these descriptor usage rules (e.g. JMP through a call 
gate or RET to a Task State Segment) will cause 
exception 13. 


The ability to reference a descriptor for control trans- 
fer is also subject to rules of privilege. A CALL or 
JUMP instruction may only reference a code seg- 
ment descriptor with DPL equal to the task CPL ora 
conforming segment with DPL of equal or greater 
privilege than CPL. The RPL of the selector used to 
reference the code descriptor must have as much 
privilege as CPL. 


RET and IRET instructions may only reference code 
segment descriptors with descriptor privilege equal 
to or less privileged than the task CPL. The selector 
loaded into CS is the return address from the stack. 
After the return, the selector RPL is the task’s new 
CPL. If CPL changes, the old stack pointer is popped 
after the return address. 


When a JMP or CALL references a Task State Seg- 
ment descriptor, the descriptor DPL must be the 
same or less privileged than the task’s CPL. Refer- 
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ence to a valid Task State Segment descriptor caus- 
es a task switch (see Task Switch Operation). Refer- 
ence to a Task State Segment descriptor at a more 
privileged level than the task’s CPL generates ex- 
ception 13. 


When an instruction or interrupt references a gate 
descriptor, the gate DPL must have the same or less 
privilege than the task CPL. If DPL is at a more privi- 
leged level than CPL, exeception 13 occurs. If the 
destination selector contained in the gate refer- 
ences a code segment descriptor, the code seg- 
ment descriptor DPL must be the same or more priv- 
ileged than the task CPL. If not, Exception 13 is is- 
sued. After the control transfer, the code segment 
descriptors DPL is the task’s new CPL. If the desti- 
nation selector in the gate references a task state 
segment, a task switch is automatically performed 
(see Task Switch Operation). 


The privilege rules on control transfer require: 


— JMP or CALL direct to a code segment (code 
segment descriptor) can only be to a conforming 
segment with DPL of equal or greater privilege 
than CPL or a non-conforming segment at the 
same privilege level. 


— interrupts within the task or calls that may 
change privilege levels, can only transfer control 
through a gate at the same or a less privileged 
level than CPL to a code segment at the same or 
more privileged level than CPL. 


— return instructions that don’t switch tasks can 
only return control to a code segment at the 
same or less privileged level. 


— task switch can be performed by a call, jump or 
interrupt which references either a task gate or 
task state segment at the same or less privileged 
level. 


Table 10. Descriptor Types Used for Control Transfer 


Descriptor Descriptor 
Control Transfer Types Operation Types 


Intersegment within the same privilege level JMP, CALL, RET, IRET* Code Segment | GDT/LDT 


Intersegment to the same or higher privilege level Interrupt 
within task may change CPL. 


CALL Call Gate GDT/LDT 


Interrupt Instruction, 
Exception, External 
Interrupt 


Trap or 
Interrupt 
; Gate 


Intersegment to a lower privilege level (changes task CPL) RET, IRET* Code Segment | GDT/LDT 


CALL, JMP Task State GDT 
Segment 


Task Switch 


Exception, External 
Interrupt 


CALL, JMP Task Gate GDT/LDT 
*NT (Nested Task bit of flag word) = 0 


ei ** 
Task Gate IDT 
**NT (Nested Task bit of flag word) = 1 


Interrupt Instruction, 
2-80 : 


i 
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PRIVILEGE LEVEL CHANGES 

Any control transfer that changes CPL within the 
task, causes a change of stacks as part of the oper- 
ation. Initial values of SS:SP for privilege levels 0, 1, 
and 2 are kept in the task state segment (refer to 
Task Switch Operation). During a JMP or CALL con- 
trol transfer, the new stack pointer is loaded into the 


SS and SP registers and the previous stack pointer 
is pushed onto the new stack. 


When returning to the original privilege level, its 
stack is restored as part of the RET or IRET instruc- 
tion operation. For subroutine calls that pass param- 
eters on the stack and cross privilege levels, a fixed 
number of words, as specified in the gate, are cop- 
ied from the previous stack to the current stack. The 
inter-segment RET instruction with a stack adjust- 
ment value will correctly restore the previous stack 
pointer upon return. ; 


Protection 


The 80286 includes mechanisms to protect critical 
instructions that affect the CPU execution state (e.g. 
HLT) and code or data segments from improper us- 
age. These protection mechanisms are grouped into 
three forms: 


Restricted usage of segments (e.g. no write al- 
lowed to read-only data segments). The only seg- 
ments available for use are defined by descrip- 
tors in the Local Descriptor Table (LDT) and 
Global Descriptor Table (GDT). 


Restricted access to segments via the rules of 
privilege and descriptor usage. 


Privileged instructions or operations that may 
only be executed at certain privilege levels as de- 
termined by the CPL and I/O Privilege Level 
(IOPL). The IOPL is defined by bits 14 and 13 of 
the flag word. 


These checks are performed for all instructions and 
can be split into three categories: segment load 
checks (Table 11), operand reference checks (Table 
12), and privileged instruction checks (Table 13). 
Any violation of the rules shown will result in an ex- 
ception. A not-present exception related to the stack 
segment causes exception 12. 


The IRET and POPF instructions do not perform 
some of their defined functions if CPL is not of suffi- 
cient privilege (numerically small enough). Precisely 
these are: . 


e The IF bit is not changed if CPL > IOPL. 


e The IOPL field of the flag word is not changed if 
CPL > 0. : 


No exceptions or other indication are given when 
these conditions occur. 
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Table 11 
Segment Register Load Checks 


Exception 
Error Description 


Descriptor table limit exceeded 
Segment descriptor not-present 11 0r12 
Privilege rules violated 


Invalid descriptor/segment type seg- 
ment register load: 
—Read only data segment load to 
SS 
—Special Control descriptor load to 
DS, ES, SS 
—Execute only segment load to 
DS, ES, SS 
—Data segment load to CS 
—Read/Execute code segment 
load to SS 


Table 12. Operand Reference Checks 


Exception 
Error Description 
13 


Write into code segment 
Read from execute-only code 
segment 

Write to read-only data segment 
Segment limit exceeded! 


woris 


NOTE: 
Carry out in offset calculations is ignored. 


Table 13. Privileged Instruction Checks 


: Exception 
Error Description 


CPL + 0 when executing the following 
instructions: 

LIDT, LLDT, LGDT, LTR, LMSW, 
CTS, HLT 


CPL > IOPL when executing the fol- 
lowing instructions: 

INS, IN, OUTS, OUT, STI, CLI, 
LOCK 


EXCEPTIONS 


The 80286 detects several types of exceptions and 
interrupts, in protected mode (see Table 14). Most 
are restartable after the exceptional condition is re- 
moved. Interrupt handlers for most exceptions can 
read an error code, pushed on the stack after the 
return address, that identifies the selector involved 
(0 if none). The return address normally points to the 
failing instruction, including all leading prefixes. For a 
processor extension segment overrun exception, 
the return address will not point at the ESC instruc- 
tion that caused the exception; however, the proces- 
sor extension registers may contain the address of 
the failing instruction. 
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Table 14. Protected Mode Exceptions 
Return 


Interrupt Address Mir. 
Vector At Falling able? 
instruction? 


Double exception detected 
Processor extension segment overrun 

Invalid task state segment 

Segment not present 

Stack segment overrun or stack segment not present 
General protection 


NOTE: 

1. When a PUSHA or POPA instruction attempts to wrap around the stack segment, the machine state after the exception 
will not be restartable because stack segment wrap around is not permitted. This condition is identified by the value of the 
saved SP being either 0000(H), 0001(H), FFFE(H), or FFFF(H). 

2. These exceptions indicate a violation to privilege rules or usage rules has occurred. Restart is generally not attempted 


under those conditions. 


These exceptions indicate a violation to privilege 
rules or usage rules has occurred. Restart is gener- 
ally not attempted under those conditions. 


All these checks are performed for all instructions 
and can be split into three categories: segment load 
checks (Table 11), operand reference checks (Table 
12), and privileged instruction checks (Table 13). 
Any violation of the rules shown will result in an ex- 
ception. A not-present exception causes exception 
11 or 12 and is restartable. 


Special Operations 


TASK SWITCH OPERATION 


The 80286 provides a built-in task switch operation 
which saves the entire 80286 execution state (regis- 
ters, address space, and a link to the previous task), 
loads a new execution state, and commences exe- 
cution in the new task. Like gates, the task switch 
operation is invoked by executing an inter-segment 
JMP or CALL instruction which refers to a Task 
State Segment (TSS) or task gate descriptor in the 
GDT or LDT. An INT n instruction, exception, or ex- 
ternal interrupt may also invoke the task switch op- 
eration by selecting a task gate descriptor in the as- 
sociated IDT descriptor entry. 


The TSS descriptor points at a segment (see Figure 
20) containing the entire 80286 execution state 
. while a task gate descriptor contains a TSS selector. 
The limit field of the descriptor must be >002B(H). 


Each task must have a TSS associated with it. The 
current TSS is identified by a special register in the 
80286 called the Task Register (TR). This register 
contains a selector referring to the task state seg- 
ment descriptor that defines the current TSS. A hid- 
den base and limit register associated with TR are 
loaded whenever TR is loaded with a new selector. 
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The IRET instruction is used to return control to the 
task that called the current task or was interrupted. 
Bit 14 in the flag register is called the Nested Task 
(NT) bit. It controls the function of the IRET instruc- 
tion. If NT = 0, the IRET instruction performs the 
regular current task by popping values off the stack; 
when NT = 1, IRET performs a task switch opera- 
tion back to the previous task. 


When a CALL, JMP, or INT instruction initiates a 
task switch, the old (except for case of JMP) and 
new TSS will be marked busy and the back link field 
of the new TSS set to the old TSS selector. The NT 
bit of the new task is set by CALL or INT initiated 
task switches. An interrupt that does not cause a 
task switch will clear NT. NT may also be set or 
cleared by POPF or IRET instructions. 


The task state segment is marked busy by changing 
the descriptor type field from Type 1 to Type 3. Use 
of a selector that references a busy task state seg- 
ment causes Exception 13. 


PROCESSOR EXTENSION CONTEXT 
SWITCHING 


The context of a processor extension (such as the 
80287 numerics processor) is not changed by the 
task switch operation. A processor extension con- 
text need only be changed when a different task at- 
tempts to use the processor extension (which still 
contains the context of a previous task). The 80286 
detects the first use of a processor extension after a 
task switch by causing the processor extension not 
present exception (7). The interrupt handler may 
then decide whether a context change is necessary. 


Whenever the 80286 switches tasks, it sets the Task 
Switched (TS) bit of the MSW. TS indicates that a 
processor extension context may belong to a differ- 
ent task than the current one. The processor exten- 
sion not present exception (7) will occur when at- 
tempting to execute an ESC or WAIT instruction if 
TS=1 and a processor extension is present (MP = 1 
in MSW). 
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POINTER TESTING INSTRUCTIONS tions use the memory management hardware to ver- 
ify that a selector value refers to an appropriate seg- 


The 80286 provides several instructions to speed ment without risking an exception. A condition flag 
pointer testing and consistency checks for maintain- (ZF) indicates whether use of the selector or seg- 
ing system integrity (see Table 15). These instruc- ment will cause an exception. 
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Figure 20. Task State Segment and TSS Registers 
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Table 15. 80286 Pointer Test Instructions 


|Instruction | Operands | Function 


Selector, | Adjust Requested Privilege 

Register Level: adjusts the RPL of 
the selector to the numeric 
maximum of current selec- 
tor RPL value and the RPL 
value in the register. Set 
zero flag if selector RPL 
was changed by ARPL. 


VERify for Read: sets the 
zero flag if the segment re- 
ferred to by the selector 
can be read. 


VERify for Write: sets the 
zero flag if the segment re- 
ferred to by the selector 
can be written. 


Load Segment Limit: reads 
the segment limit into the 
register if privilege rules 
and descriptor type allow. 
Set zero flag if successful. 


Load Access Rights: reads 
descriptor access 


Selector 


Selector 


Register, 
Selector 


Register, 

Selector the 
rights byte into the register 
if privilege rules allow. Set 
zero flag if successful. 


DOUBLE FAULT AND SHUTDOWN 


If two separate exceptions are detected during a sin- 
gle instruction execution, the 80286 performs the 
double fault exception (8). If an execution occurs 
during processing of the double fault exception, the 
80286 will enter shutdown. During shutdown no fur- 
ther instructions or exceptions are processed. Either 
NMI (CPU remains in protected mode) or RESET 
(CPU exits protected mode) can force the 80286 out 
of shutdown. Shutdown is externally signalled via a 
HALT bus operation with Ay LOW. 


PROTECTED MODE INITIALIZATION 


The 80286 initially executes in real address mode 
after: RESET. To allow initialization code to be 
placed at the top of physical memory, Ao3-Agpo will 
be HIGH when the 80286 performs memory refer- 
ences relative to the CS register until CS is changed. 
A23-AzQ9 will be zero for references to the DS, ES, or 
SS segments. Changing CS in real address mode 
will force Aog—Azpo LOW whenever CS is used again. 
The initial CS:IP value of FOOO:FFFO provides 64K 
bytes of code space for initialization code without 
changing CS. 


Protected mode operation requires several registers 
to be initialized. The GDT and IDT base registers 
must refer to a valid GDT and IDT. After executing 
the LMSW instruction to set PE, the 80286 must im- 
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mediately execute an intra-segment JMP instruction 
to clear the instruction queue of instructions decod- 
ed in real address mode. 


To force the 80286 CPU registers to match the initial 
protected mode state assumed by software, execute 
a JMP instruction with a selector referring to the ini- 
tial TSS used in the system. This will load the task 
register, local descriptor table register, segment reg- 
isters and initial general register state. The TR 
should point at a valid TSS since any task switch 
operation involves saving the current task state. 


SYSTEM INTERFACE 


The 80286 system interface appears in two forms: a 
local bus and a system bus. The local bus consists 
of address, data, status, and control signals at the 
pins of the CPU. A system bus is any buffered ver- 
sion of the local bus. A system bus may also differ 
from the local bus in terms of coding of status and 
control lines and/or timing and loading of signals. 
The 80286 family includes several devices to gener- 
ate standard system buses such as the IEEE 796 
standard MULTIBUS. 


Bus Interface Signals and Timing 


The 80286 microsystem local bus interfaces the 
80286 to local memory and I/O components. The 
interface has 24 address lines, 16 data lines, and 8 
status and control signals. 


The 80286 CPU, 82C284 clock generator, 82C288 
bus controller, tranceivers, and latches provide a 
buffered and decoded system bus interface. The 
82C284 generates the system clock and synchroniz- 
es READY and RESET. The 82C288 converts bus 
operation status encoded by the 80286 into com- 
mand and bus control signals. These components 
can provide the timing and electrical power drive lev- 
els required for most system bus interfaces including 
the Multibus. 


Physical Memory and I/O Interface 


A maximum of 16 megabytes of physical memory 
can be addressed in protected mode. One mega- 
byte can be addressed in real address mode. Memo- 
ry is accessible as bytes or words. Words consist of 
any two consecutive bytes addressed with the least 
significant byte stored in the lowest address. 


Byte transfers occur on either half of the 16-bit local 
data bus. Even bytes are accessed over D7_9 while 
odd bytes are transferred over Di5_s. Even-ad- 
dressed words are transferred over Dy5_o9 in one 
bus cycle, while odd-addressed word require two 
bus operations. The first transfers data on Dy 5_8, 
and the second transfers data on D7_9. Both byte 
data transfers occur automatically, transparent to 
software. 
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Two bus signals, Ag and BHE, control transfers over 
the lower and upper halves of the data bus. Even 
address byte transfers are indicated by Ag LOW and 
BHE HIGH. Odd address byte transfers are indicat- 


ed by Ag HIGH and BHE LOW. Both Ao and BHE are 
LOW for even address word transfers. 


The I/O address space contains 64K addresses in 
both modes. The |/O space is accessible as either 
bytes or words, as is memory. Byte wide peripheral 
devices may be attached to either the upper or lower 
byte of the data bus. Byte-wide I/O devices attached 
to the upper data byte (D;5_8) are accessed with 
odd |/O addresses. Devices on the lower data byte 
are accessed with even I/O addresses. An interrupt 
controller such as Intel’s 8259A must be connected 
to the lower data byte (D7_9) for proper return of the 
interrupt vector. 


Bus Operation 


The 80286 uses a double frequency system clock 
(CLK input) to control bus timing. All signals on the 
local bus are measured relative to the system CLK 
input. The CPU divides the system clock by 2 to pro- 
duce the internal processor clock, which determines 
bus state. Each processor clock is composed of two 
system clock cycles named phase 1 and phase 2. 
The 82C284 clock generator output (PCLK) identi- 
fies the next phase of the processor clock. (See Fig- 
ure 21.) 


ONE PROCESSOR CLOCK CYCLE 


ONE BUS T STATE 
PHASE 2 
OF PROCESSOR 
CLOCK CYCLE 


PHASE 1 
OF PROCESSOR 
CLOCK CYCLE 


< ONE SYSTEM 
CLK CYCLE 
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Figure 21. System and Processor 
Clock Relationships 


Six types of bus operations are supported; memory 
read, memory write, |/O read, I/O write, interrupt ac- 
knowledge, and halt/shutdown. Data can be trans- 
ferred at a maximum rate of one word per two proc- 
essor clock cycles. 


The 80286 bus has three basic states: idle (Tj), send 
status (Ts), and perform command (T,). The 80286 
CPU also has a fourth local bus state called hold 
(Tp). Th indicates that the 80286 has surrendered 
control of the local bus to another bus master in 
response to a HOLD request. 


Each bus state is one processor clock long. Figure 
22 shows the four 80286 local bus states and al- 
lowed transitions. 
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Figure 22. 80286 Bus States 
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Bus States 


The idle (Tj) state indicates that no data transfers 
are in progress or requested. The first active state 
Ts is signaled by status line S1 or SO going LOW 
and identifying phase 1 of the processor clock. Dur- 
ing Ts, the command encoding, the address, and 
data (for a write operation) are available on the 
80286 output pins. The 82C288 bus controller de- 
codes the status signals and generates Multibus 
compatible read/write command and local trans- 
ceiver control signals. 


After Ts, the perform command (Tc) state is en- 
tered. Memory or I/O devices respond to the bus 
operation during Tc, either transferring read data to 
the CPU or accepting write data. Tc states may be 
repeated as often as necessary to assure sufficient 
time for the memory or I/O device to respond. The 
READY signal determines whether Tc is repeated. A 
repeated Tc state is called a wait state. 


During hold (Ty), the 80286 will float all address, 
data, and status output pins enabling another bus 
master to use the local bus./The 80286 HOLD input 
signal is used to place the 80286 into the T} state. 
The 80286 HLDA output signal indicates that the 
CPU has entered Tp. 


Pipelined Addressing 


The 80286 uses a local bus interface with pipelined 
timing to allow as much time as possible for data 
access. Pipelined timing allows a new bus operation 
to be initiated every two processor cycles, while al- 
lowing each individual bus operation to last for three 
processor cycles. 


The timing of the address outputs is pipelined such 
that the address of the next bus operation becomes 
available during the current bus operation. Or in oth- 
er words, the first clock of the next bus operation is 
overlapped with the last clock of the current bus op- 
eration. Therefore, address decode and routing logic 
can operate in advance of the next bus operation. 
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Figure 23. Basic Bus Cycle 


External address latches may hold the address sta- 
ble for the entire bus operation, and provide addi- 
tional AC and DC buffering. 


The 80286 does not maintain the address of the cur- 
rent bus operation during all T, states. Instead, the 
address for the next bus operation may be emitted 
during phase 2 of any T,. The address remains valid 
during phase 1 of the first T, to guarantee hold time, 
relative to ALE, for the address latch inputs. 


Bus Control Signals 


The 82C288 bus controller provides control signals; 
address latch enable (ALE), Read/Write commands, 
data transmit/receive (DT/R), and data enable 
(DEN) that control the address latches, data trans- 
ceivers, write enable, and output enable for memory 
and |/O systems. 


The Address Latch Enable (ALE) output determines 
when the address may be latched. ALE provides at 
least one system CLK period of address hold time 
from the end of the previous bus operation until the 
address for the next bus operation appears at the 
latch outputs. This address hold time is required to 
support MULTIBUS and common memory systems. 


The data bus transceivers are controlled by 82C288 
outputs Data Enable (DEN) and Data Transmit/Re- 
ceive (DT/R). DEN enables the data transceivers; 
while DT/R controls tranceiver direction. DEN and 
DT/R are timed to prevent bus contention between 


the bus master, data bus transceivers, and system ~ 


data bus transceivers. 
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Command Timing Controls 


Two system timing customization options, command 
extension and command delay, are provided on the 
80286 local bus. 


Command extension allows additional time for exter- 
nal devices to respond to a command and is analo- 
gous to inserting wait states on the 8086. External 
logic can control the duration of any bus operation 
such that the operation is only as long as necessary. 
The READY input signal can extend any bus opera- 
tion for as long as necessary. 


Command delay allows an increase of address or 
write data setup time to system bus command active 
for any bus operation by delaying when the system 
bus command becomes active. Command delay is 
controlled by the 82C288 CMDLY input. After Ts, 
the bus controller samples CMDLY at each failing 
edge of CLK. If CMDLY is HIGH, the 82C288 will not 
activate the command signal. When CMDLY is LOW, 
the 82C288 will activate the command signal. After 
the command becomes active, the CMDLY input is 
not sampled. 


When a command is delayed, the available re- 
sponse time from command active to return read 
data or accept write data is less. To customize sys- 
tem bus timing, an address decoder can determine 
which bus operations require delaying the com- 
mand. The CMDLY input does not affect the timing 
of ALE, DEN, or DT/R. 
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Figure 24. CMDLY Controls the Leading Edge of Command Signal 


Figure 24 illustrates four uses of CMDLY. Example 1 
shows delaying the read command two system 
CLKs for cycle N-1 and no delay for cycle N, and 
example 2 shows delaying the read command one 
system CLK for cycle N-1 and one system CLK de- 
lay for cycle N. 


Bus Cycle Termination 


At maximum transfer rates, the 80286 bus alternates 
between the status and command states. The bus 
status signals become inactive after T, so that they 
may correctly signal the start of the next bus opera- 
tion after the completion of the current cycle. No 
external indication of T, exists on the 80286 local 
bus. The bus master and bus controller enter T,. di- 
rectly after T, and continue executing T, cycles until 
terminated by READY. 


READY Operation 


The current bus master and 82C288 bus controller 
terminate each bus operation simultaneously to 
achieve maximum bus operation bandwidth. Both 
are informed in advance by READY active (open- 
collector output from 82C284) which identifies the 
last Tc cycle of the current bus operation. The bus 
master and bus controller must see the same sense 


of the READY signal, thereby requiring READY be 
synchronous to the system clock. 


Synchronous Ready 


The 82C284 clock generator provides READY syn- 
chronization from both synchronous and asynchro- 
nous sources (see Figure 25). The synchronous — 
ready input (SRDY) of the clock generator is sam- 
pled with the falling edge of CLK at the end of phase 
1 of each T,. The state of SRDY is then broadcast to 
the bus master and bus controller via the READY 
output line. 


Asynchronous Ready 


Many systems have devices or subsystems that are 
asynchronous to the system clock. As a result, their 
ready outputs cannot be guaranteed to meet the 
82C284 SRDY setup and hold time requirements. 
But the 82C284 asynchronous ready input (ARDY) is 
designed to accept such signals. The ARDY input is 
sampled at the beginning of each Tc cycle by 
82C284 synchronization logic. This provides one 
system CLK cycle time to resolve its value before 
broadcasting it to the bus master and bus controller. 
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Figure 25. Synchronous and Asynchronous Ready 


ARDY or ARDYEN must be HIGH at the end of Ts. 
ARDY cannot be used to terminate bus cycle with no 
wait states. 


Each ready input of the 82C284 has an enable pin 
(SRDYEN and ARDYEN) to select whether the cur- 
rent bus operation will be terminated by the synchro- 
nous or asynchronous ready. Either of the ready in- 
puts may terminate a bus operation. These enable 
inputs are active low and have the same timing as 
their respective ready inputs. Address decode logic 
usually selects whether the current bus operation 
should be terminated by ARDY or SRDY. 


Data Bus Control 


Figures 26, 27, and 28 show how the DT/R, DEN, 
data bus, and address signals operate for different 
combinations of read, write, and idle bus operations. 
DT/R goes active (LOW) for a read operation. DT/R 
remains HIGH before, during, and between write op- 
erations. 
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The data bus is driven with write data during the 
second phase of Ts. The delay in write data timing 
allows the read data drivers, from a previous read 
cycle, sufficient time to enter 3-state OFF before the 
80286 CPU begins driving the local data bus for 
write operations. Write data will always remain valid 
for one system clock past the last T, to provide suffi- 
cient hold time for Multibus or other similar memory 
or 1/O systems. During write-read or write-idle se- 
quences the data bus enters 3-state OFF during the 
second phase of the processor cycle after the last 
To. In a write-write sequence the data bus does not 
enter 3-state OFF between T, and Ts. 


Bus Usage 


The 80286 local bus may be used for several func- 
tions: instruction data transfers, data transfers by 
other bus masters, instruction fetching, processor 
extension data transfers, interrupt acknowledge, and 
halt/shutdown. This section describes local bus ac- 
tivities which have special signals or requirements. 
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Figure 26. Back to Back Read-Write Cycles 
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Figure 27. Back to Back Write-Read Cycles 
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Figure 28. Back to Back Write-Write Cycles 


HOLD and HLDA 


HOLD AND HLDA allow another bus master to gain 
control of the local bus by placing the 80286 bus into 
the T}, state. The sequence of events required to 
pass control between the 80286 and another local 
bus master are shown in Figure 29. 


In this example, the 80286 is initially in the T, state 
as signaled by HLDA being active. Upon leaving Tp, 
as signaled by HLDA going inactive, a write opera- 
tion is started. During the write operation another 
local bus master requests the local bus from the 
80286 as shown by the HOLD signal. After complet- 
ing the write operation, the 80286 performs one Tj; 
bus cycle, to guarantee write data hold time, then 
enters Tp as signaled by HLDA going active. 


The CMDLY signal and ARDY ready are used to 
start and stop the write bus command, respectively. 
Note that SRDY must be inactive or disabled by 
SRDYEN to guarantee ARDY will terminate the cy- 
Cle. 


HOLD must not be active during the time from the 
leading edge of RESET until 34 CLKs following the 
trailing edge of RESET. 


Lock 


The CPU asserts an active lock signal during Inter- 
rupt-Acknowledge cycles, the XCHG instruction, and 
during some descriptor accesses. Lock is also as- 
serted when the LOCK prefix is used. The LOCK 
prefix may be used with the following ASM-286 as- 
sembly instructions; MOVS, INS, and OUTS. For bus 
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cycles other than Interrupt-Acknowledge cycles, 
Lock will be active for the first and subsequent cy- 
cles of a series of cycles to be locked. Lock will not 
be shown active during the last cycle to be locked. 
For the next-to-last cycle, Lock will become inactive 
at the end of the first T, regardless of the number of 
wait-states inserted. For Interrupt-Acknowledge cy- 
cles, Lock will be active for each cycle, and will be- 
come inactive at the end of the first T, for each cy- 
cle regardless of the number of wait-states inserted. 


Instruction Fetching 


The 80286 Bus Unit (BU) will fetch inetructions 
ahead of the current instruction being executed. This 
activity is called prefetching. It occurs when the local 
bus would otherwise be idle and obeys the following 
rules: 


A prefetch bus operation starts when at least two 
bytes of the 6-byte prefetch queue are empty. 


The prefetcher normally performs word prefetches 
independent of the byte alignment of the code seg- 
ment base in physical memory. 


The prefetcher will perform only a byte code fetch 
operation for control transfers to an instruction be- 
ginning on a numerically odd physical address. 


Prefetching stops whenever a control transfer or 
HLT instruction is decoded by the IU and placed into 
the instruction queue. 


In real address mode, the prefetcher may fetch up to 
6 bytes beyond the last control transfer or HLT in- 
struction in a code segment. 
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In protected mode, the prefetcher will never cause a If the last byte of a code segment appears on an 


segment overrun exception. The prefetcher stops at even physical memory address, the prefetcher will 
the last physical memory word of the code segment. read the next physical byte of memory (perform a 


Exception 13 will occur if the program attempts to word code fetch). The value of this byte is ignored 
execute beyond the last full instruction in the code and any attempt to execute it causes exception 13. 
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NOTES: 

1. Status lines are not driven by 80286, yet remain high due to pullup resistors in 82C284 during HOLD state. 

2. Address, M/IO and COD/INTA may start floating during any Tc depending on when internal 80286 bus arbiter de- 
cides to release bus to external HOLD. The float starts in $2 of Tc. 

3. BHE and LOCK may start floating after the end of any Tc depending on when internal 80286 bus ati decides to 
release bus to external HOLD. The float starts in 1 of Tc. 

4. The minimum HOLD to HLDA time is shown. Maximum is one Ty longer. 

5. The earliest HOLD time is shown. It will always allow a subsequent memory cycle if pending is shown. 

6. The minimum HOLD to HLDA time is shown. Maximum is a function of the instruction, type of bus cycle and other 
machine state (i.e., Interrupts, Waits, Lock, etc.). 

7. Asynchronous ready allows termination of the cycle. Synchronous ready does not signal ready in this example. Syn- 
chronous ready state is ignored after ready is signaled via the asynchronous input. 


Figure 29. MULTIBUS Write Terminated by Asynchronous Ready with Bus Hold 
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Processor Extension Transfers 


The processor extension interface uses I/O port ad- 
dresses 00F8(H), OOFA(H), and OOFC(H) which are 
part of the I/O port address range reserved by Intel. 
An ESC instruction with Machine Status Word bits 
EM = 0 and TS = Owill perform I/O bus operations 
to one or more of these I/O port addresses indepen- 
dent of the value of IOPL and CPL. 


ESC instructions with memory references enable the 
CPU to accept PEREQ inputs for processor exten- 
sion operand transfers. The CPU will determine the 
operand starting address and read/write status of 
the instruction. For each operand transfer, two or 
three bus operations are performed, one word trans- 
fer with 1/O port address OOFA(H) and one or two 
bus operations with memory. Three bus operations 
are required for each word operand aligned on an 
odd byte address. 


NOTE: 
Odd-aligned numerics operands should be avoided 
when using an 80286 system running six or more 
memory-write wait states. The 80286 can generate 
an incorrect numerics address if all the following 
conditions are met: 


— Two floating point (FP) instructions are fetched 
and in the 80286 queue. 


— The first FP instruction is any floating point store 
except FSTSW AX. 


— The second FP instruction accesses memory. 


— The operand of the first instruction is aligned on 
an odd memory address. 


— Six or more wait states are inserted during either 
of the last two memory write (odd aligned oper- 
ands are transferred as two bias transfers of 
the first instruction. 


The second FP operand’s address will be incre- 
mented by one if these conditions are met. These 
conditions are most likely to occur in a multi-master 
system. For a hardware solution, contact your local 
Intel representative. 


Commands to the numerics coprocessor should not 
be delayed by nine or more T-states. Excessive 
(nine or more) command-delays can cause the 
80286 and 80287 to lose synchronization. 


Interrupt Acknowledge Sequence 


Figure 30 illustrates an interrupt acknowledge se- 
quence performed by the 80286 in response to an 
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INTR input. An interrupt acknowledge sequence 
consists of two INTA bus operations. The first allows 
a master 8259A Programmable Interrupt Controller 
(PIC) to determine which if any of its slaves should 
return the interrupt vector. An eight bit vector is read 
on DO-D7 of the 80286 during the second INTA bus 
operation to select an interrupt handler routine from 
the interrupt table. 


The Master Cascade Enable (MCE) signal of the 
82C288 is used to enable the cascade address driv- 
ers, during INTA bus operations (See Figure 30), 
onto the local address bus for distribution to slave 


interrupt controllers via the system address bus. The 


80286 emits the LOCK signal (active LOW) during T, 
of the first INTA bus operation. A local bus “hold” 
request will not be honored until the end of the sec- 
ond INTA bus operation. 


Three idle processor clocks are provided by the 
80286 between INTA bus operations to allow for the 
minimum INTA to INTA time and CAS (cascade ad- 
dress) out delay of the 8259A. The second INTA bus 
operation must always have at least one extra T, 
state added via logic controlling READY. This is 
needed to meet the 8259A minimum INTA pulse 
width. 


Local Bus Usage Priorities 


The 80286 local bus is shared among several inter- 
nal units and external HOLD requests. In case of 
simultaneous requests, their relative priorities are: 


(Highest) Any transfers which assert LOCK either 
explicitly (via the LOCK instruction prefix) 
or implicitly (i.e. some segment descriptor 
accesses, interrupt acknowledge _ se- 
quence, or an XCHG with memory). 


The second of the two byte bus opera- 
tions required for an odd aligned word op- 
erand. 


The second or third cycle of a processor 
extension data transfer. 


Local bus request via HOLD input. 


Processor extension data operand trans- 
fer via PEREQ input. 


Data transfer performed by EU as part of 
an instruction. 


(Lowest) An instruction prefetch request from BU. 
The EU will inhibit prefetching two proc- 
essor clocks in advance of any data 
transfers to minimize waiting by EU for a 
prefetch to finish. 


<< INTA CYCLE 1 —__—_> 
BUS CYCLE TYPE ¥ Ts Tec 
f Co) ae as a * “ n 


(SEE NOTE 2.) 


80286 


<+—___ INTA CYCLE 2 ——_—__> 
 F T | T Ts | Te 
“tot v2 od ot a or | ot | a rt v ed ot 


(SEE NOTE 3.) 


rexy \\\\\\\ /////////L// \\\\\\ Monn _/////// 


NOTREADY READY 


NOTES: 


NOT READY READY 
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1. Data is ignored, upper data bus, Dg—D 45, should not change state during this time. 

2. First INTA cycle should have at least one wait state inserted to meet 8259A minimum INTA pulse width. 

3. Second INTA cycle should have at least one wait state inserted to meet 8259A minimum INTA pulse width. 

4. LOCK is active for the first INTA cycle to prevent the bus arbiter from releasing the bus between INTA cycles in a 
multi-master system. LOCK is also active for the second INTA cycle. 

5. Ao3-Ag exits 3-state OFF during 62 of the second Tc in the INTA cycle. 


6. Upper data bus should not change state during this time. 


Figure 30. Interrupt Acknowledge Sequence 


Halt or Shutdown Cycles 


The 80286 externally indicates halt or shutdown 
conditions as a bus operation. These conditions oc- 
cur due to a HLT instruction or multiple protection 
exceptions while attempting to execute one instruc- 
tion. A halt or shutdown bus operation is signalled 
when S1, SO and COD/INTA are LOW and M/IO is 
HIGH. A; HIGH indicates halt, and A; LOW indi- 
cates shutdown. The 82C288 bus controller does 


not issue ALE, nor is READY required to terminate a 
halt or shutdown bus operation. 


During halt or shutdown, the 80286 may service 
PEREQ or HOLD requests. A processor extension 
segment overrun exception during shutdown will in- 
hibit further service of PEREQ. Either NMI or RESET 
will force the 80286 out of either halt or shutdown. 
An INTR, if interrupts are enabled, or a processor 
extension segment overrun exception will also force 
the 80286 out of halt. 
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SYNC READY 
ENABLE 
ASYNC READY 


COO INTA 


LOCK 


—————> MEMORY READ 
MEMORY WRITE 
10 READ 
10 WRITE 
INTERRUPT ACKNOWLEDGE 


f- -© ADVANCED MEMORY 
——-e!l DECODE - -> ANDIOCHIP SELECTS 
r — >t (OPTIONAL) ; 
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Figure 31. Basic 80286 System Configuration 


SYSTEM CONFIGURATIONS 


The versatile bus structure of the 80286 microsys- 
tem, with a full complement of support chips, allows 
flexible configuration of a wide range of systems. 
The basic configuration, shown in Figure 31, is simi- 
lar to an 8086 maximum mode system. It includes 
the CPU plus an 8259A interrupt controller, 82C284 
clock generator, and the 82C288 Bus Controller. 


As indicated by the dashed lines in Figure 31, the 
ability to add processor extensions is an integral fea- 
ture of 80286 microsystems. The processor exten- 
sion interface allows external hardware to perform 
special functions and transfer data concurrent with 
CPU execution of other instructions. Full system in- 
tegrity is maintained because the 80286 supervises 
all data transfers and instruction execution for the 
processor extension. 
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The 80287 has all the instructions and data types of 
an 8087. The 80287 NPX can perform numeric cal- 
culations and data transfers concurrently with CPU 
program execution. Numerics code and data have 
the same integrity as all other information protected 
by the 80286 protection mechanism. 


The 80286 can overlap chip select decoding and ad- 
dress propagation during the data transfer for the 
previous bus operation. This information is latched 
by ALE during the middle of a Ts cycle. The latched 
chip select and address information remains stable 
during the bus operation while the next cycle’s ad- 
dress is being decoded and propagated into the sys- 
tem. Decode logic can be implemented with a high 
speed bipolar PROM. 


The optional decode logic shown in Figure 31 takes 
advantage of the overlap between address and data 
of the 80286 bus cycle to generate advanced mem- 
ory and |O-select signals. This minimizes system 


SYSB RESS 


RESET 
CBRO 


ALWAYS 


gir: 


AEN “ as 
eacn | 
BUS ARBITER 


SYNC READY 
ENABLE 
ASYNC READY 
ENABLE 


Voc 


¢ 
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BUS ARBITRATION 
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MEMORY WRITE 

10 READ 

10 WRITE 

INTERRUPT ACKNOWLEDGE 


eae ADDRESS 8US 


CHIP SELECT 


INTERRUPT 
CONTROLLER 
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Figure 32. MULTIBUS System Bus Interface 


performance degradation caused by address propa- 
gation and decode delays. In addition to selecting 
memory and I/O, the advanced selects may be used 
with configurations supporting local and system bus- 
es to enable the appropriate bus interface for each 
bus cycle. The COD/INTA and M/IO signals are ap- 
plied to the decode logic to distinguish between in- 
terrupt, |1/O, code and data bus cycles. 


By adding the 82289 bus arbiter chip, the 80286 pro- 
vides a MULTIBUS system bus interface as shown 
in Figure 32. The ALE output of the 82C288 for the 


MULTIBUS bus is connected to its CMDLY input to 
delay the start of commands one system CLK as 
required to meet MULTIBUS address and write data 
setup times. This arrangement will add at least one 
extra T, state to each bus operation which uses the 
MULTIBUS. 


A second 82C288 bus controller and additional 
latches and transceivers could be added to the local 
bus of Figure 32. This configuration allows the 
80286 to support an on-board bus for local memory 
and peripherals, and the MULTIBUS for system bus 
interfacing. 
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80286 


DATA O45 _—~ Do 


Figure 33 shows the addition of dual ported dynamic 
memory between the MULTIBUS system bus and 
the 80286 local bus. The dual port interface is pro- 
vided by the 8207 Dual Port DRAM Controller. The 
8207 runs synchronously with the CPU to maximize 
throughput for local memory references. It also arbi- 
trates between requests from the local and system 
buses and performs functions such as _ refresh, 


9| TRANSCEIVER 


MULTIBUS® SELECT 
XACK 

MULTIBUS® 
COMMAND 


(WRBT, MWTC} 
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Figure 33. 80286 System Configuration with Dual-Ported Memory 


initialization of RAM, and read/modify/write cycles. 
The 8207 combined with the 8206 Error Checking 
and Correction memory controller provide for single 
bit error correction. The dual-ported memory can be 
combined with a standard MULTIBUS system bus 
interface to maximize performance and protection in 
multiprocessor system configurations. 


Table 16. 80286 Systems Recommended Pull Up Resistor Values 


6—PEACK 
63—READY 910M +5% 


NOTE: 


20 KN +10% 


80286 Pin and Name Pullup Value 


Pull SO, S1, and PEACK inactive during 80286 hold periods(1) 


Pull READY inactive within required minimum time (C_ = 150 pF, 
IR < 7mA) 


1. Pull-up resistors are not required on SO and S1 when the corresponding pins of the 82C284 are connected to SO and S71. 
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PACKAGE THERMAL 
SPECIFICATIONS 


The 80286 Microprocessor is specified for operation 
when case temperature (Tc) is within the range 
0°C-85°C. Case temperature, unlike ambient tem- 
perature, is easily measured in any environment to 
determine whether the 80286 Microprocessor is 
within the specified operating range. The case tem- 
perature should be measured at the center of the 
top surface of the component. 


The maximum ambient temperature (T,) allowable 
without violating Tc specifications can be calculated 
from the equations shown below. Ty is the 80286 
junction temperature. P is the power dissipated by 
the 80286. 

Ty = Io + P* O56 

Ta Pp =P Can 


To = Ta + P* [Oya — O5c] 


80286 


Values for 6ja and jc are given in Table 17. Oj, is 
given at various airflows. Table 18 shows the maxi- 
mum Ta, allowable (without exceeding Tc) at various 
airflows. Note that the 80286 PLCC package has an 
internal heat spreader. Ta can be further improved 
by attaching “fins” or an external “heat sink” to the 
package. 


Junction temperature calculations should use an Icc 
value that is measured without external resistive 
loads. The external resistive loads dissipate addi- 
tional power external to the 80286 and not on the 
die. This increases the resistor temperature, not the 
die temperature. The full capacitive load (C, = 
100 pF) should be applied during the Iccg measure- 
ment. 


' Table 17. Thermal Resistances (°C/Watt) 0 jc and 05, 
Oya versus Airflow — ft/min (m/sec) 


Package 


68-Lead PGA 


68-Lead PLCC 
w/ Internal 
Heat Spreader 


Table 18. Maximum Ta, at Various Airflows 


Package 


68-Lead PGA 


68-Lead PLCC 
w/Internal 
Heat Spreader 


NOTE: 


Ta (C) versus Airflow — ft/min (m/sec) 


400 600 800 1000 
(2.03) (3.04) (4.06) (5.07) 


oe ie ee a ee 
td el Le, 


The numbers in Table 18 were calculated using a Vcc of 5.0V, and an Icc of 450 mA, which is representative of the worst 


case Icc at Tc = 85°C with the outputs unloaded. 
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Typical icc vs Frequency for Different Output Loads and Case Temperatures 
550 


. ee i - “758 ee ve 
Sg hom enamine a Ae 


FREQUENCY (MHz) 210253-51 


0°C LOADED 

7] 0°C UNLOADED 
25°C LOADED 
25°C UNLOADED 
85°C LOADED 
85°C UNLOADED 
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NOTES: 

1. Voc = 5.0V 

2. Loaded: Io, = 2.0 mA, lon = —400 pA, CL = 100 pF. 
Unloaded: C, = 100 pF. 
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ABSOLUTE MAXIMUM RATINGS* 
Ambient Temperature Under Bias ....0°C to + 70°C 


Storage Temperature ........... —69°C b+ 150°C 
Voltage on Any Pin with 

Respect to Ground.............. = OV fo + 7V 
POG DUSSIOANION . 5c de ds bcn so) ocercbeecee ve 3.3W 


*WARNING: Stressing the device beyond the “Absolute 
Maximum Ratings” may cause permanent damage. 
These are stress ratings only. Operation beyond the 
“Operating Conditions” is not recommended and ex- 
tended exposure beyond the “Operating Conditions” 
may affect device reliability. 


D.C. CHARACTERISTICS (Voc = 5V £5%, Tonge = 0°C to +85°C)* 


Supply Current (0°C Turn On) 


Other Input Capacitance 
Input/Output Capacitance 


NOTES: 


| Min | Max | Unit 
ee a ae 

| Coun | ClKinputCapacitance | | 20 |r| (Noto) 
ire cos ee a ed ee ee 
Coe a ee 


Test Condition 
(Note 1) 


1. C; = 100 pF. Tested at maximum frequency without resistive loads on the outputs. 
2. These are not tested. They are guaranteed by design characterization. 


D.C. CHARACTERISTICS 


BUSY and ERROR Pins 


Output Leakage Current 


NOTE: 


Test Condition 


*Ta is guaranteed from 0°C to + 55°C as long as Tcase is not exceeded. 
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A.C. CHARACTERISTICS (Vcc = 5V +5%, Tcase = 0°C to +85°C)* 


AC timings are referenced to 0.8V and 2.0V points of signals as illustrated in datasheet waveforms, unless 
otherwise noted. 


Parameter 


ystem Clock (CLK) Period 
ystem Clock (CLK) LOW Time 


1.0V to 3.6V, 
(Note 7) 


*Ta is guaranteed from 0°C to + 55°C as long as Tcase is not exceeded. 


NOTES: 

1. Asynchronous inputs are INTR, NMI, HOLD, PEREQ, ERROR, and BUSY. This specification is given only for testing 
purposes, to assure recognition at a specific CLK edge. 

2. Delay from 1.0V on the CLK, to 0.8V or 2.0V or float on the output as appropriate for valid or floating condition. 

3. Output load: C_ = 100 pF. 

4. Float condition occurs when output current is less than lo in magnitude. 

5. Delay measured from address either reaching 0.8V or 2.0V (valid) to status going active reaching 2.0V or status going 
inactive reaching 0.8V. 

6. For load capacitance of 10 pF or more on STATUS/PEACK lines, subtract typically 7 ns. 

7. These are not tested. They are guaranteed by design characterization. 

8. Minimum output delay timings are not tested, but are guaranteed by design characterization. 
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A.C. CHARACTERISTICS (Continued) 
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NOTE 8: 
AC Test Loading on Outputs 


CLK INPUT 
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NOTE 9: 
AC Drive and Measurement Points—CLK Input 


4.0V 


CLK INPUT 


tseTuP tHOLD 


ee 

SK 

SRS 

DEVICE ae 
OUTPUT x 


SRR 50 
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NOTE 10: 
AC Setup, Hold and Delay Time Measurement—General 
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WAVEFORMS 
MAJOR CYCLE TIMING 


READ CYCLE WRITE CYCLE 
ILLUSTRATED WITH ZERO ILLUSTRATED WITH ONE READ 
WAIT STATES WAIT STATE (T, OR Ts) 


ball: See 


BUS CYCLE te 


VALID IF Ts 
M/i0, COD/INTA 
43 


BHE, LOCK aes) a a Wa acy 


LLLLL VASA 
|| VALID WRITE DATA 7; 


© 
TORU aE RO MLL. 


SRDY+SRDYEN a 


arpy+aRDYEN W/L LLL aie oat LLL. 


«A 
Th 


CMDLY CXS 
MWTC 
RDC 


DT/R 
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NOTE: 
1. The modified timing is due to the CMDLY signal being active. 
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WAVEFORMS (Continued) 


80286 ASYNCHRONOUS 
INPUT SIGNAL TIMING 


BUS CYCLE TYPE 
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NOTES: 

1. PCLK indicates which processor cycle phase will occur 
on the next CLK. PCLK may not indicate the correct phase 
until the first bus cycle is performed. 

2. These inputs are asynchronous. The setup and hold 
times shown assure recognition for testing purposes. 


EXITING AND ENTERING HOLD 


BUS CYCLE TYPE 


(SEE NOTE 3.) 


(SEE NOTE 5.) 


(SEE NOTE 6.) 


80286 


80286 RESET INPUT TIMING AND 
SUBSEQUENT PROCESSOR CYCLE PHASE 
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NOTE: 
When RESET meets the setup time shown, the next CLK 
will start or repeat 2 of a processor cycle. 


(SEE NOTE 4.) 


(SEE NOTE 1.) 


16 


Big Oy saan meter erases stmeeenemengnt CCAVMID IT WRITE 


(SEE NOTE 2.) 


ee ae ote cas, eo a oe! aan 


NOTES: 
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1. These signals may not be driven by the 80286 during the time shown. The worst case in terms of latest float time is 


shown. 


2. The data bus will be driven as shown if the last cycle before T; in the diagram was a write Tc. 
3. The 80286 floats its status pins during Ty. External 20 KO resistors keep these signals high (see Table 16). 


4. For HOLD request set up to HLDA, refer to Figure 29. 


5. BHE and LOCK are driven at this time but will not become valid until Ts. 
6. The data bus will remain in 3-state OFF if a read cycle is performed. 
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WAVEFORMS (Continued) 
80286 PEREQ/PEACK TIMING FOR ONE TRANSFER ONLY 


BUS CYCLE TYPE 
Ts 
$1 $2 


1/0 READ IF PROC. EXT. TO MEMORY MEMORY WRITE IF PROC. EXT. TO MEMORY 
ie MEMORY READ IF MEMORY TO PROC. ee 1/0 WRITE IF MEMORY TO PROC. EXT. 


$1¢S0O 


MEMORY ADDRESS IF PROC. EXT. TO MEMORY TRANSFER 
A Ao 1/0 PORT ADDRESS OOFA(H) IF MEMORY TO PROC. EXT. TRANSFER 
ad 


Re A A 


COD INTA 


(202) 2b) 1/0 PORT ADDRESS OOFA(H) IF PROC. EXT. TO MEMORY TRANSFER 
@ @ MEMORY ADDRESS IF MEMORY TO PROC. EXT. TRANSFER 


(SEE NOTE 1.) 


(SEE NOTE 2.) 


Perea XO LLL 
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NOTES: 

1. PEACK always goes active during the first bus operation of a processor extension data operand transfer sequence. The 
first bus operation will be either a memory read at operand address or I/O read at port address OOFA(H). 

2. To prevent a second processor extension data operand transfer, the worst case maximum time (Shown above) is: 3X 
© -12a2max.— © min.. The actual, configuration dependent, maximum time is: 3X © -12amax.-®O min. + AX2X 0. 

A is the number of extra Tc states added to either the first or second bus operation of the processor extension data operand 
transfer sequence. 


INITIAL 80286 PIN STATE DURING RESET 


BUS CYCLE TYPE Ty 


ae 42 $1 
CLK 
Vor (SEE NOTE 2.) 
6) (SEE NOTE 1.) © 


a0) 
Least ee PAB 
i; Be 


16 CLK PERIODS 


45) (SEE NOTE 3.) 


AA DYD22DD2DIMVYI22DD22 20222) 22 W))222)22) 222222 22)222)))) 
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NOTES: 

1. Setup time for RESET T may be violated with the consideration that 1 of the processor clock may begin one system 
CLK period later. 

2. Setup and hold times for RESET | must be met for proper operation, but RESET | may occur during $1 or $2. If 
RESET | occurs in ¢, the reference clock edge can be 4p of the previous bus cycle. 

3. The data bus is only guaranteed to be in 3-state OFF at the time shown. 
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REGISTER OPERAND/REGISTERS TO USE IN OFFSET CALCULATION 


REGISTER OPERAND/EXTENSION OF OPCODE 
REGISTER MODE/MEMORY MODE WITH DISPLACEMENT LENGTH 


WORD/BYTE OPERATION 


DIRECTION IS TO REGISTER/DIRECTION IS FROM REGISTER 


OPERATION (INSTRUCTION) CODE 


A. SHORT OPCODE FORMAT EXAMPLE 


BYTE 1 BYTE 2 


B. LONG OPCODE FORMAT EXAMPLE 
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Figure 35. 80286 Instruction Format Examples 


80286 INSTRUCTION SET SUMMARY 


Instruction Timing Notes 


The instruction clock counts listed below establish 
the maximum execution rate of the 80286. With no 
delays in bus cycles, the actual clock count of an 
80286 program will average 5% more than the cal- 
culated clock count, due to instruction sequences 
which execute faster than they can be fetched from 
memory. ' 


To calculate elapsed times for instruction se- 
quences, multiply the sum of all instruction clock 
counts, as listed in the table below, by the processor 
clock period. An 8 MHz processor clock has a clock 
period of 125 nanoseconds and requires an 80286 
system clock (CLK input) of 16 MHz. 


Instruction Clock Count Assumptions 


1. The instruction has been prefetched, decoded, 
and is ready for execution. Control transfer in- 
struction clock counts include all time required to 
fetch, decode, and prepare the next instruction for 
execution. 


2. Bus cycles do not require wait states. 


3. There are no processor extension data transfer or 
local bus HOLD requests. 


4. No exceptions occur during instruction execution. 


Instruction Set Summary Notes 


Addressing displacements selected by the MOD 
field are not shown. If necessary they appear after 
the instruction fields shown. 


Above/below refers to unsigned value 

Greater refers to positive signed value 

Less refers to less positive (more negative) signed 
values 

ifd = 1 then to register; if d = 0 then from register 


ifw = 1 then word instruction; if w = O then byte 
instruction 


ifs =O then 16-bit immediate data form the oper- 
and 


then an immediate data byte is sign-ex- 
tended to form the 16-bit operand 


x don’t care 


z used for string primitives for comparison with 
ZF FLAG 


ifs = 1 


If two clock counts are given, the smaller refers to a 
register operand and the larger refers to a memory 
operand 


* = add one clock if offset calculation requires 
summing 3 elements 
n= number of times repeated 


m = number of bytes of code in next instruction 
Level (L)—Lexical nesting level of the procedure 
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The following comments describe possible excep- 
tions, side effects, and allowed usage for instruc- 
tions in both operating modes of the 80286. 


REAL ADDRESS MODE ONLY 
1. This is a protected mode instruction. Attempted 
execution in real address mode will result in an 
undefined opcode exception (6). 


2. A segment overrun exception (13) will occur if a 
word operand reference at offset FFFF(H) is at- 
tempted. 


3. This instruction may be executed in real address 
mode to initialize the CPU for protected mode. 


4. The lIOPL and NT fields will remain 0. 


5. Processor extension segment overrun interrupt 
(9) will occur if the operand exceeds the seg- 
ment limit. 


EITHER MODE 
6. An exception may occur, depending on the value 
of the operand. 


7. LOCK is automatically asserted regardless of the 
presence or absence of the LOCK instruction 
prefix. 


8. LOCK does not remain active between all oper- 
and transfers. 


PROTECTED VIRTUAL ADDRESS MODE ONLY 
9. A general protection exception (13) will occur if 
the memory operand cannot be used due to éi- 
ther a segment limit or access rights violation. If 
a stack segment limit is violated, a stack seg- 
ment overrun exception (12) occurs. 


10. For segment load operations, the CPL, RPL, and 
DPL must agree with privilege rules to avoid an 
exception. The segment must be present to 
avoid a not-present exception (11). If the SS reg- 
ister is the destination, and a segment not-pres- 
ent violation occurs, a stack exception (12) oc- 
curs. 
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12. 


13. 


14. 


15. 


16. 


17. 
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All segment descriptor accesses in the GDT or 
LDT made by this instruction will automatically 
assert LOCK to maintain descriptor integrity in 
multiprocessor systems. 


JMP, CALL, INT, RET, IRET instructions refer- 
ring to another code segment will cause a gener- 
al protection exception (13) if any privilege rule is 
violated. 


A general protection exception (13) occurs if 
CPL = 0. 


A general protection exception (13) occurs if 
CPL > IOPL. 


The IF field of the flag word is not updated if CPL 
> IOPL. The IOPL field is updated only if 
CPL = 0. 


Any violation of privilege rules as applied to the 
selector operand do not cause a protection ex- 
ception; rather, the instruction does not return a 
result and the zero flag is cleared. 


If the starting address of the memory operand 
violates a segment limit, or an invalid access is 
attempted, a general protection exception (13) 
will occur before the ESC instruction is execut- 
ed. A stack segment overrun exception (12) will 
occur if the stack limit is violated by the oper- 
and’s starting address. If a segment limit is vio- 
lated during an attempted data transfer then a 
processor extension segment overrun exception 
(9) occurs. 


18. The destination of an INT, JMP, CALL, RET or 


‘ 


IRET instruction must be in the defined limit of a 
code segment or a general protection exception 
(13) will occur. 
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80286 INSTRUCTION SET SUMMARY 


DATA TRANSFER 
OV =Move: 


Register to Register/Memory 
Register/memory to register 
mmediate to register/memory 
mmediate to register 

emory to accumulator 
Accumulator to memory 
Register/memory to segment register 
Segment register to register/memory 
PUSH = Push: 

emory 
Register 


Segment register 


POP = Pop: 


emory 
Register 


Segment register 


XCHG = Exchange: 
Register/memory with register 
Register with accumulator 
N= Input from: 
ixed port 
ariable port 
DUT = Output to: 
ixed port 
ariable port 
XLAT = Translate byte to AL 
EA= Load EA to register 
DS = Load pointer to DS 


ES = Load pointer to ES 


cLock couNT | COMMENTS 


Protected Protected 
FORMAT Virtual Virtual 
Address Address 


1000100w 

1000101w | modreg r/m 

1100011w | mod000 r/m data 

1011w reg data 

1010000w 9 
1010001w addr-low 9 


10001110 | modOreg r/m 9,10,11 


10001100 | modOreg r/m 9 


11111111 | mod110 r/m 


01010 reg 


000reg110 


10001111 |mod000 f/m 
01011 reg 
000reg111 (reg+01) 


mod reg r/m (mod¥ 11) 9,10,11 


11000100 |modreg r/m (mod+¥ 1) 9,10,11 


Shaded areas indicate instructions not available in 8086, 88 microsystems. 
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80286 INSTRUCTION SET SUMMARY (Continued) 


Protected 
FORMAT Virtual 


Address 
Mode 


DATA TRANSFER (Continued) 

AHF Load AH with flags 10011111 
SAHF = Store AH into flags 10071710 
PUSHF = Push flags 10011100 


POPF = Pop flags 


eg/memory with register to either 000000dw | modreg r/m 


mod000 r/m data data ifs w = 01 


mmediate to accumulator 0000010Ww data data ifw=1 


mmediate to register/memory 100000sw 


ADC = Add with carry: 


eg/memory with register to either 000100dw | modreg r/m 


mod010 r/m data dataifsw = 01 


mmediate to accumulator 0001010Ww data data if w= 1 


mmediate to register/memory 100000sw 


NC = Increment: 


mod000 r/m 


01000reg 


SUB = Subtract: 


eg/memory and register to either 001010dw | modreg r/m 


mod 101 r/m 


data data ifs w = 01 


mmediate from accumulator 0010110Ww data data ifw=1 


mmediate from register/memory 100000sw 


SBB = Subtract with borrow: 


eg/memory and register to either 000110dw | modreg r/m 


mod011 r/m data data ifs w=01 
mmediate from accumulator 0001110WwW data data if w=1 


DEC = Decrement 


mmediate from register/memory 100000sw 


1111111wWw |mod001— r/m 


01001 reg 


egister/memory with register 0011101w |modreg r/m 


egister with register/memory 0011100w |modreg r/m 


modii11 r/m data data ifs w=01 > 


mmediate with accumulator 0011110WwW data if w= 1 


mmediate with register/memory 100000sw 


mod011 = r/m 


EG=Change sign 1111011w 


A = ASCIl adjust for add 00110111 


DAA = Decimal adjust for add 00100111 
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80286 INSTRUCTION SET SUMMARY (Continued) 


; 


CLOCK COUNT COMMENTS 


Protected Protected 
Virtual Virtual 
Address Address 

Mode Mode 


Real 
Address 
Mode 


Real 
Address 
Mode 


FORMAT 


ARITHMETIC (Continued) 
AAS = ASCII adjust for subtract 00111111 3 
DAS = Decimal adjust for subtract 


mod100 f/m 


UL = Multiply (unsigned): 


ie) 


Register-Byte 13 

Register-Word 21 
emory-Byte 16" 
emory-Word 24" 

MUL = Integer multiply (signed): mod101 = r/m 

Register-Byte 13 

Register-Word 21 
emory-Byte ‘ 16* 


emory-Word 


DIV = Divide (unsigned) 1111011wWw s|mod 110 r/m 
Register-Byte 
Register-Word 
emory-Byte 
emory-Word 
DIV = Integer divide (signed) 1111011w |mod111 = r/m 
Register-Byte 
Register-Word 
emory-Byte 
emory-Word 
AKAM = ASCIl adjust for multiply 11010100 | 00001010 
AAD = ASCIl adjust for divide 11010101 | 00001010 
BW = Convert byte to word 10011000 


WD= Convert word to double word | 10011001 


OGIC 
Shift/Rotate Instructions: 


| 


Register/Memory by 1 1101000w |modTTT ¢/ 


1101001w |mod r/ 


Register/Memory by CL 


TTT Instruction 
000 ROL 
001 ROR 
010 RCL 
011 RCR 
100 SHL/SAL 
101 SHR 
114 SAR 


Shaded areas indicate instructions not available in 8086, 88 microsystems. 
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80286 INSTRUCTION SET SUMMARY (Continued) 


Protected 
Virtual 
Address 


ARITHMETIC (Continued) 
AND = And: 


Reg/memory and register to either 001000dw | modreg r/m 


mmediate to register/memory 1000000w | mod100 r/m data data if w= 1 


mmediate to accumulator 0010010w data data if w=1 


EST = And function to flags, no result: 


z 
g 
3 


Register/memory and register 1000010w 


mod000 r/m data data if w=1 


mmediate data and accumulator 1010100w data data if w=1 


mmediate data and register/memory 


OR = Or: 
Reg/memory and register to either 000010dw | modreg r/m 


mmediate to register/memory 1000000w data data if w= 1 


mmediate to accumulator 0000110Ww data if w=1 


XOR = Exclusive or: 


Reg/memory and register to either 001100dw 


mmediate to register/memory 1000000w | mod110 r/m data 


mmediate to accumulator 0011010w data data ifw = 1 
OT = Invert register/ memory 010 r/m 

STRING MANIPULATION: 
OVS = Move byte/word 1010010w 
MPS = Compare byte/word 

SCAS = Scan byte/word 
ODS = Load byte/wd to AL/AX 


STOS = Stor byte/wd from AL/A 


Repeated by count in CX 
OVs= Move string 1010010w 


MPS = Compare string 


SCAS = Scan string 


1010110w 


ODS = Load string 


STOS = Store string 


Shaded areas indicate instructions not available in 8086, 88 microsystems. 
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80286 INSTRUCTION SET SUMMARY (Continued) 


CONTROL TRANSFER 
CALL =Call: 


Direct within segment 


10011010 segment offset 


Protected Mode Only (Direct intersegment): 
Via call gate to same privilege level 
Via call gate to different privilege level, no parameters 
Via call gate to different privilege level, x parameters 
Via TSS 
Via task gate 


segment selector 


Indirect intersegment 


Protected Mode Only (Indirect intersegment): 
Via call gate to same privilege level 
Via call gate to different privilege level, no parameters 
Via call gate to different privilege level, x parameters 
Via TSS 
Via task gate 
MP = Unconditional jump: 


Short/long 


Direct within segment 


Register/memory indirect within segment | 11111111 |mod100 r/m 


Direct intersegment 


Protected Mode Only (Direct intersegment): 
Via call gate to same privilege level 
Via TSS 
Via task gate 


Indirect intersegment 


Protected Mode Only (Indirect intersegment): 
Via call gate to same privilege level 
Via TSS 
Via task gate 

RET = Return from CALL: 


Within segment 11000011 
Within seg adding immed to SP 
Intersegment 


Intersegment adding immediate to SP 


Protected Mode Only (RET): 
To different privilege level 


mod011 = r/m (mod¥ 11) 


mod101 r/m|  (mod¥#11) 


80286 


CLOCK COUNT COMMENTS 


Real aoe Real 
Address Address Address 
Mode Mode Mode 


7+m 7+m 18 
7 +m, 11+m* | 7+m, 11+m* 8,9,18 
26+m 11,12,18 
41+m 8,11,12,18 
82+m 8,11,12,18 
86 +4x+m 8,11,12,18 
177+m 8,11,12,18 
182+m 8,11,12,18 
29+m* 8,9,11,12,18 
44+m* 8,9,11,12,18 
83 +m* 8,9,11,12,18 
90+ 4x +m* 8,9,11,12,18 
180+ m* 8,9,11,12,18 
185+ m* 8,9,11,12,18 
7+m 7+m 18 
7+m 7+m 18 
7 +m, 11+m* | 7+m, 114+ 9,18 
1i+m 23+m 11,12,18 
38+m 8,11,12,18 
175+m 8,11,12,18 
180+m 8,11,12,18 
26+m* 8,9,11,12,18 
41+m* 8,9,11,12,18 
178+m* 8,9,11,12,18 
183+ m* 8,9,11,12,18 
8,9,18 
8,9,18 
8,9,11,12,18 
8,9,11,12,18 
9,11,12,18 
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80286 INSTRUCTION SET SUMMARY (Continued) 


FUNCTION 


CONTROL TRANSFER (Continued) 

JE/JZ= Jump on equal zero 

JL/JNGE = Jump on less/not greater or equal 
JLE/JNG = Jump on less or equal/not greater 
JB/JNAE = Jump on below/not above or equal 
JBE/JNA= Jump on below or equal/not above 
JP/JPE = Jump on parity/parity even 

JO= Jump on overflow 

JS=Jump on sign 

JNE/JNZ = Jump on not equal/not zero 
JNL/JGE = Jump on not less/greater or equal 
JNLE/JG = Jump on not less or equal/greater 
JNB/JAE = Jump on not below/above or equal 


JNBE/JA= Jump on not below or equal/above 


JNP/JPO = Jump on not par/par odd 


FORMAT 


01110100 


01110010 


01110110 


01110000 


01111000 


O12 T1114 


01110011 


7+mor3 
7+mor3 
7+mor3 
7+mor3 
7+mor3 
7+mor3 
7+mor3 
7+ mor3 
7+mor3 
7+mor3 
7+mor3 
7+mor3 


7+mor3 


7+mor3 


CLOCKCOUNT | ___ COMMENTS 


7+mor3 
7+mor3 
7+mor3 
7+mor3 
7+mor3 
7+mor3 
7+mor3 
7+mor3 
7+mor3 
7+mor3 
7+mor3 
7+mor3 


7+mor3 


7+mor3 


JNO = Jump on not overflow 01110001 7+mor3 7+mor3 


JNS = Jump on not sign 01111001 7+mor3 7+mor3 


LOOP = Loop CX times 11100010 8 +mor4 8+mor4 


LOOPZ/LOOPE = Loop while zero/equal 11100001 8+mor4 8+mor4 


8+mor4 


LOOPNZ/LOOPNE = Loop while not zero/equal | 11100000 8+mor4 


11100011 8+mor4 8+mor4 


JCXZ= Jump on CX zero 


INT = Interrupt: 


Type specified 23+m 


Type 3 11001100 23+m 


INTO = Interrupt on overflow 11001110 24 +mor3 
(3 if no (3 if no 


interrupt) interrupt) 


ao) 
@o 


Shaded areas indicate instructions not available in 8086, 88 microsystems. 
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CLOCK COUNT COMMENTS 


Protected Real Protected 
FORMAT Virtual pOneam Virtual 
Address Address 


Mode Mode 
ONTROL TRANSFER (Continued) 


Protected Mode Only: 
Via interrupt or trap gate to same privilege level 7,8,11,12,18 
Via interrupt or trap gate to fit different privilege level — 7,8,11,12,18 
Via Task Gate 7,8,11,12,18 


RET = Interrupt return 1AOCT1Tt1 8,9,11,12,15,18 


Protected Mode Only: 
To different privilege level 8,9,11,12,15,18 
To different task (NT = 1) 8,9,11,12,18 


ganatnannnanasaanaas 


Se 
SSS 


PROCESSOR CONTROL 
LC =Clear carry 11111000 
MC = Complement carry 

STC = Set carry 


LD = Clear direction 


\ 


STD = Set direction 
LI = Clear interrupt 1711147010 
STI = Set interrupt 
LT=Halt 
AIT= Wait 


OCK = Bus lock prefix 11110000 


9-20* 9-20* 


Shaded areas indicate instructions not available in 8086, 88 microsystems. 
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80286 INSTRUCTION SET SUMMARY (Continued) 


FUNCTION 


s¥ 
& 


ven 
Shaded areas indicate instructions not available in 8086, 88 microsystems. 
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Footnotes 


The Effective Address (EA) of the memory operand 
is computed according to the mod and r/m fields: 


if mod = 11 then r/m is treated as a’ REG field 

if mod = 00 then DISP = 0%, disp-low and disp-high 
are absent 

if mod = 01 then DISP = disp-low sign-extended to 
16 bits, disp-high is absent 

if mod = 10 then DISP = disp-high: disp-low 


if r/m = 000 then EA = (BX) + (SI) + DISP 
if r/m = 001 then EA = (BX) + (DI) + DISP 
if r/m = 010 then EA = (BP) + (SI) + DISP 


if r/m = 011 then EA = (BP) + (Dl) + DISP 
if r/m = 100 then EA = (SI) + DISP 

if r/m = 101 then EA = (DI) + DISP 

if r/m = 110 then EA = (BP) + DISP* 
ifr/m = 111 then EA = (BX) + DISP 


DISP follows 2nd byte of instruction (before data if 
required) 
*except if mod = 00 and r/m = 110 then EQ = disp-high: disp-low. 


SEGMENT OVERRIDE PREFIX 


001reg 110 


reg is assigned according to the following: 


Segment 
reg Register 
00 ES 
01 CS 
10 SS 
11 DC 


80286 


REG is assigned according to the following table: 


16-Bit (w = 1) 8-Bit (w = 0) 
000 AX 000 AL 
001 CX 001 CL 
010 DX 010 DL 
011 BX 011 BL 
100 SP 100 AH 
101 BP 101 CH 
110 SI 110 DH 
111 Di 111 BH 


The physical addresses of all operands addressed 
by the BP register are computed using the SS seg- 
ment register. The physical addresses of the desti- 
nation operands of the string primitive operations 
(those addressed by the DI register) are computed 
using the ES segment, which may not be overridden. 


DATA SHEET REVISION REVIEW 


The following differences exist between this data 


sheet (210253-017) and the previous version 


(210253-016): 
1. References to the 68-pin LCC (Leadiess Chip 
Carrier) package have been removed. 


2. References to the I2ICE-286 support tool have 
been removed. 


The following list represents key differences be- 

tween the -016 and the -015 versions of this data 

sheet. Please review this summary carefully. 

1. Removed Input CLK, RESET Leakage Current 
(ILcR) specs. 

2. Updated output leakage current (l,o) specs. 


The following list represents key differences be- 
tween the -015 and the -014 versions of this data 
sheet. Please review this summary carefully. 

1. Removed the Range of Clock Rates bullet. 


2. The maximum ambient temperature (T,) vs Vari- 
ous Airflows Table has been updated. 

3. Removed the maximum values of System Clock 
(CLK) LOW period (to) of 8 MHz, 10 MHz, and 
12.5 MHz parts in the A.C. Characteristics table. 

4. Removed the maximum values of System Clock 
(CLK) HIGH period (ts) of 8 MHz, 10 MHz, and 
12.5 MHz parts in the A.C. Characteristics table. 


5. Deleted the 82C284 and 82C288 A.C. Character- 
istics tables. 
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Intel287T™ XL/XLT 


MATH COPROCESSOR 
m Interfaces with 80286 and 80C286 CPUs m Expands Data Types to Include 32-, 64-, 
, : 80-Bit Floating Point, or Integers, and 
= Operates in Any Socket Designed for ne 
Intel 80287 or Intel287™ XL MCP up to 18 Digit BCD Operands 
12.5 MHz Clock Speeds m@ Extends CPU Instruction Set to Include 
Tigonometric, Logarithmic, Exponential, 
= Implements ANSI/IEEE Standard : 
754-1985 for Binary Floating-Point Ae lee s 
Arithmetic = Implements Intel387™ Transcendental 
m 50% Higher Performance than Intel : edi Bid Ba pe 
60287 LOGARITHM 
m Low Power CHMOS Ill Technology m Eight 80-Bit Numeric Registers; for 
m Upward Object Code Compatible from _ Stack use or Individual Access 
Intel 80287 and 8087 m Available in 40-pin DIP as Intel287™ XL 
MCP and 44-pin PLCC as Intel287™ 
XLT MCP 


(See Packaging Outlined and Dimensions, order #231369) 


The Intel287 XL Math CoProcessor is an extension of the Intel 80286 microprocessor architecture. When 
combined with an 80286 microprocessor, the Intel287 XL MCP dramatically increases the processing speed of 
computer application software which utilize floating point mathematical operations. This makes an ideal addi- 
tion to a computer workstation platform for applications such as financial modeling and spreadsheets, CAD/ 
CAM, or business graphics. 


The Intel287 XL Math CoProcessor adds over seventy mnemonics to the Intel 80286 microprocessor instruc- 
tion set. The Intel287 XL MCP is compatible with the Intel 80287 and 8087 Math CoProcessors. The Intel287 
XL MCP increases performance by over 50% in typical floating-point tests, such as a Whetstone test, com- 
pared to the Intel 80287. The Intel287 XL MCP supports integer, floating point and BCD data formats and fully 
conforms to the ANSI/IEEE 754-1985 Floating Point Standard. 


There are two versions of Intel287 XL MCP: the Intel287 XL MCP in a 40-pin DIP package and the Intel287 
XLT MCP in a 44-pin PLCC package for small footprint applications such as portable personal computers. 
Each supports a clock speed up to 12.5 MHz which enables operation in any Math CoProcessor socket 
designed for the Intel 80287-6/8/10 or Intel 80C287A-12. Both versions are manufactured with low-power, 
CHMOS Ill technology. 
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Intel287T™ XL MCP Data Registers 
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Figure 1.1. Intel287™ XL MCP Register Set 


1.0 FUNCTIONAL DESCRIPTION 


The Intel287 XL Math CoProcessor provides arith- 
metic instructions for a variety of numeric data types. 
It also executes numerous built-in transcendental 
functions (e.g. tangent, sine, cosine, and log func- 
tions). The Intel287 XL MCP effectively extends the 
register and instruction set of its CPU for existing 
data types and adds several new data types as well. 
Figure 1.1 shows the additional registers visible to 
programs in a system that includes the Intel287 XL 
MCP. Essentially, the Intel287 XL MCP can be treat- 
ed as an additional resource or an extension to the 
CPU. The CPU together with an Intel287 XL Math 
CoProcessor can be used as a single unified sys- 
tem. 


The Intel287 XL MCP has two operating modes. Af- 
ter reset, the Intel287 XL MCP is in the real-address 
mode. It can be placed into protected mode by exe- 
cuting the FSETPM instruction. It can be switched 
back to real-address mode by executing the 
FRSTPM instruction (note that this feature is useful 
only with CPU’s that can also switch back to real-ad- 
dress mode). These instructions control the format 
of the administrative instructions FLDENV, FSTENV, 
FRSTOR, and FSAVE. Regardless of operating 
mode, all references to memory for numerics data or 
status information are performed by the CPU, and 
therefore obey the memory-management and pro- 
' tection rules of the CPU. 


In real-address mode, a system that includes the In- 
tel287 XL MCP is completely upward compatible 
with software for the 8086/8087 and for 80286/ 
80287 or 80C287A real-address mode. 


In protected mode, a system that includes the In- 
tel287 XL MCP is completely upward compatible 
with software for 80286/80287 or 80C287A protect- 
ed mode systems. The only differences of operation 


that may appear when 8086/8087 programs are 
ported to a protected-mode Intel287 XL MCP sys- 
tem are in the format of operands for the administra- 
tive instructions FLDENV, FSTENV, FRSTOR, and 
FSAVE. These instructions are normally used only 
by exception handlers and operating systems, not by 
applications programs. 


2.0 PROGRAMMING INTERFACE 


The Intel287 XL MCP adds to the CPU additional 
data types, registers, instructions, and interrupts 
specifically designed to facilitate high-speed numeri- 
cs processing. To use the Intel287 XL MCP requires 
no special programming tools, because all new in- 
structions and data types are directly supported by 
the assembler and compilers for high-level lan- 
guages. All 8086/8088 development tools that sup- 
port the 8087 can also be used to develop software 


for the 80286/Intel287 XL MCP in real-address . 


mode. All 80286 development tools that support the 
80287/80C287A can also be used to develop soft- 
ware for the 80286/Intel287 XL MCP and 80C286/ 
Intel287 XL MCP. The Intel287 XL MCP supports all 
80387 instructions, producing the same binary re- 
sults. 


All communication between the CPU and the In- 
tel287 XL MCP is transparent to applications soft- 
ware. The CPU automatically controls the Intel287 
XL MCP whenever a floating point instruction is exe- 
cuted. All physical memory and virtual memory of 
the CPU are available for storage of the instructions 
and operands of programs that use the Intel287 XL 
MCP. All memory addressing modes are available 
for addressing numerics operands. 


Section 6 at the end of this data sheet lists the in- 
structions that the Intel287 XL MCP adds to the 
80286 instruction set. 


2-119 


Intel287™ XL 


2.1 Data Types 


Table 2.1 lists the seven data types that the Intel287 
XL MCP supports and presents the format for each 
type. Operands are stored in memory with the least 
significant digit at the lowest memory address. Pro- 
grams retrieve these values by generating the low- 
est address. For maximum system performance, all 
operands should start at physical-memory address- 
es that correspond to the word size of the CPU; op- 
erands may begin at any other addresses, but will 
require extra memory cycles to access the entire op- 
erand. 


Internally, the Intel287 XL MCP holds all numbers in 
the extended-precision real format. Instructions that 
load operands from memory automatically convert 
operands represented in memory as 16-, 32-, or 64- 
bit integers, 32- or 64-bit floating-point numbers, or 
18-digit packed BCD numbers into extended-preci- 
sion real format. Instructions that store operands in 
memory perform the inverse type conversion. 


2.2 Numeric Operands 


A typical MCP (Math CoProcessor) instruction ac- 
cepts one or two operands and produces one (or 
sometimes two) results. In two-operand instructions, 
one operand is the contents of an MCP register, 
while the other may be a memory location. The oper- 
ands of some instructions are predefined; for exam- 
ple, FSQRT always takes the square root of the 
number in the top stack element. 


2.3 Register Set 


Figure 1.1 shows the Intel287 XL MCP register set. 
When an Intel287 XL MCP is present in a system, 
programmers may use these registers in addition to 
the registers normally available on the CPU. 


2.3.1 DATA REGISTERS 


Intel287 XL MCP computations use the Intel287 XL 
MCP’s data registers. These eight 80-bit registers 
provide the equivalent capacity of 20 32-bit regis- 
ters. Each of the eight data registers in the Intel287 
XL MCP is 80 bits wide and is divided into “fields” 
corresponding to the MCP’s extended-precision real 
data type. 


The Intel287 XL MCP register set can be accessed 
either as a stack, with instructions operating on the 
top one or two stack elements, or as individually ad- 
dressable registers. The TOP field in the status word 
identifies the current top-of-stack register. A “‘push”’ 
operation decrements TOP by one and loads a value 
into the new top register. A “pop” operation stores 
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the value from the current top register and then in- 
crements TOP by one. The Intel287 XL MCP register 
stack grows “down” toward lower-addressed regis- 
ters. 


Instructions may address the data registers either 
implicitly or explicitly. Many instructions operate on 
the register at the TOP of the stack. These instruc- 
tions implicitly address the register at which TOP © 
points. Other instructions allow the programmer to 
explicitly specify which register to use. This explicit 
register addressing is also relative to TOP. 


2.3.2 TAG WORD 


The tag word marks the content of each numeric 
data register, as Figure 2.1 shows. Each two-bit tag 
represents one of the eight data registers. The prin- 
cipal function of the tag word is to optimize the 
MCP’s performance and stack handling by making it 
possible to distinguish between empty and nonemp- 
ty register locations. It also enables exception han- 
dlers to identify special values (e.g. NaNs or denor- 
mals) in the contents of a stack location without the 
need to perform complex decoding of the actual 
data. 


2.3.3 STATUS WORD 


The 16-bit status word (in the status register) shown 
in Figure 2.2 reflects the overall state of the Intel287 
XL MCP. It may be read and inspected by programs. 


Bit 15, the B-bit (busy bit) is included for 8087 com- 
patibility only. It always has the same value as the 
ES bit (bit 7 of the status word); it does not indicate 
the status of the BUSY # output of Intel287 XL MCP. 


Bits 13-11 (TOP) point to the Intel287 XL MCP reg- 
ister that is the current top-of-stack. 


The four numeric condition code bits (C3-Co) are 
similar to the flags in a CPU; instructions that per- 
form arithmetic operations update these bits to re- 
flect the outcome. The effects of these instructions 
on the condition code are summarized in Tables 2.2 
through 2.5. 


Bit 7 is the error summary (ES) status bit. This bit is 
set if any unmasked exception bit is set; it is clear 
otherwise. If this bit is set, the ERROR# signal is 
asserted. 


Bit 6 is the stack flag (SF). This bit is used to distin- 
guish invalid operations due to stack overflow or un- 
derflow from other kinds of invalid operations. When 
SF is set, bit 9 (C1) distinguishes between stack 
overflow (C; =1) and underflow (C; =0). 
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Table 2.1. Intel287™ XL MCP Data Type Representation in Memory 
Data 
Rooms ket Ged 


ee a 
18 sh MAGNITUDE 
Packed BCD | +10 18 Digits , ; 


Most Significant Byte HIGHEST ADDRESSED BYTE 


sures | vom 
Double Precision | +103 se fae Te 
Extended +4932 BIASED 
Precision 64 Bits s| EXPONENT oO 
79 0 
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= Sign bit (0 = positive, 1 = negative) 
= Decimal digit (two per byte) 
= Bits have no significance: Intel287 XL MCP ignores when loading, zeroes when storing 
= Position of implicit binary point 
5. | = Integer bit of significand; stored in temporary real, implicit in single and double precision 
6. Exponent Bias (normalized values): 
Single: 127 (7FH) 
Double: 1023 (SFFH) 
Extended Real: 16383 (SFFFH) 
7. Packed BCD: (—1)S (Dy7 ... Do) 
8. Real: (—1)S (2E-BIAS) (Fo Fy...) 


15 


0 


NOTE: 
The index i of tag(i) is not top-relative. A program typically uses the “top” field of Status Word to determine which taq(i) 
field refers to logical top of stack. 
TAG VALUES: 
00 = Valid 
01 = Zero : 
10 = QNaN, SNaN, Infinity, Denormal and Unsupported Formats 
11 Empty . 


Figure 2.1. Intel287™ XL MCP Tag Word 
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Figure 2.2 shows the six exception flags in bits 5-0 
of the status word. Bits 5-0 are set to indicate that 
the Intel287 XL MCP has detected an exception 
while executing an instruction. A later section enti- 
tled “Exception Handling” explains how they are set 
and used. 


Note that when a new value is loaded into the status 
word by the FLDENV or FRSTOR instruction, the 


DENORMALIZED OPERAND 
INVALID OPERATION 


& 

intel. 
value of ES (bit 7) and its reflection in the B-bit (bit 
15) are not derived from the values loaded from 
memory but rather are dependent upon the values of 
the exception flags (bits 5-0) in the status word and 
their corresponding masks in the control word. If ES 


is set in such a case, the ERROR# output of the 
Intel287 XL MCP is activated immediately. 


BUSY 
TOP OF STACK POINTER 
CONDITION CODE 


ERROR SUMMARY STATUS 

STACK FLAG 

EXCEPTION FLAGS 
PRECISION 
UNDERFLOW 
OVERFLOW 
ZERO DIVIDE 


ES is set if any unmasked exception bit is set; cleared otherwise. 


See Table 2.2 for interpretation of condition code. 
TOP Values: 
000 = Register 0 is Top of Stack 
001 = Register 1 is Top of Stack 
@ 


111 = Register 7 is Top of Stack 


For definitions of exceptions, refer to the section entitled ‘Exception Handling.” 


Figure 2.2. Status Word 
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Table 2.2. Condition Code Interpretation 


FPREM, FPREM1 Three Least Significant Bits 
(See Table 2.3) of Quotient 
QO 


Reduction 

0 = Complete 
or O/U# 1 = Incomplete 
FCOM, FCOMP, 
FCOMPP, FTST, 
FUCOM, FUCOMP, 
FUCOMPP, FICOM, 
FICOMP 


Result of Comparison Zero Operand is Not Comparable 
(See Table 2.4) or O/U# (Table 2.4) 


FCHS, FABS, FXCH, 
FINCTOP, FDECTOP, 
Constant Loads, 
FXTRACT, FLD, 
FILD, FBLD, 

FSTP (Ext Real) 


FIST, FBSTP, 

FRNDINT, FST 

FSTP, FADD, FMUL, 

FDIV, FDIVR, Roundup 
FSUB, FSUBR, ia or O/U# 
FSCALE, FSQRT, 

FPATAN, F2XM1, 

FYL2X, FYL2XP1 


FPTAN, FSIN, Roundup 


Reduction 
FCOS, FSINCOS UNDEFINED or O/U# 0 = Complete 


Undefined 1 = Incomplete 
ifC2 = 1 : 


FLDENV, FRSTOR Each Bit Loaded from Memory 


FLDCW, FSTENV, 
FSTCW, FSTSW, 
FCLEX, FINIT, 
FSAVE 


UNDEFINED — 


UNDEFINED 


O/U# When both IE and SF bits of status word are set, indicating a stack exception, this bit distinguishes between 
stack overflow (C1 = 1) and underflow (C1 = 0). 

Reduction If FPREM or FPREM1 produces a remainder that is less than the modulus, reduction is complete. When 
reduction is incomplete the value at the top of the stack is a partial remainder, which can be used as input to 
further reduction. For FPTAN, FSIN, FCOS, and FSINCOS, the reduction bit is set if the operand at the top of 
the stack is too large. In this case the original operand remains at the top of the stack. 

Roundup When the PE bit of the status word is set, this bit indicates whether one was added to the least significant bit of 
the result during the last rounding. 

UNDEFINED Do not rely on finding any specific value in these bits. 
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Table 2.3. Condition Code Interpretation after FPREM and FPREM1 Instructions 


Condition Code 


QMOD 8 


= 


Table 2.4. Condition Code 
Resulting from Comparison 


TOP > Operand 


TOP < Operand 
TOP = Operand 
Unordered 


Table 2.5. Condition Code 
Defining Operand Class 


ca | c2 | ct | co | VaueatTor 


+ Unsupported 
+NaN 

— Unsupported 
—Nan 

+ Normal 

+ Infinity 

— Normal 

— Infinity 


+ Denormal 
— Denormal 


“=A st et es HSB =| OOO OOO 0 CO 


0 
0 
0 
0 
1 
1 
1 
1 
0 
0 
0 
0 
’ 
1 


sour Oo «= 6 Oa 4o oS 
Sooo +4 60 45 5 = Oo m-O 


2.3.4 CONTROL WORD 


The MCP provides several processing options that 
are selected by loading a control word from memory 
into the control register. Figure 2.3 shows the format 
and encoding of fields in the control word. 
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interpretation after 

FPREM and FPREM1 
incomplete Reduction: Further iteration required for complete 
reduction. 


Complete Reduction: CO, C3, C1 contain three 
least significant bits of quotient. 


The low-order byte of this control word configures 
exception masking. Bits 5-0 of the control word 
contain individual masks for each of the six excep- 
tions that the Intel287 XL MCP recognizes. 


The high-order byte of the control word configures 
the Intel287 XL MCP operating mode, including pre- 
cision, rounding, and infinity control. 


e The “infinity control bit’’ (bit 12) is not meaningful 
to the Intel287 XL MCP, and programs must ig- 
nore its value. To maintain compatibility with the 
8087 and 80287, this bit can be programmed; 
however, regardless of its value, the Intel287 XL 
MCP always treats infinity in the affine sense 
(— 00 < +00), This bit is initialized to zero both 
after a hardware reset and after the FINIT instruc- 
tion. 


e The rounding control (RC) bits (bits 11-10) pro- 
vide for directed rounding and true chop, as well 
as the unbiased round to nearest even mode 
specified in the IEEE standard. Rounding control 
affects only those instructions that perform 
rounding at the end of the operation (and thus 
can generate a precision exception); namely, 
FST, FSTP, FIST, all arithmetic instructions (ex- 
cept FPREM, FPREM1, FXTRACT, FABS, and 
FCHS), and all transcendental instructions. 


e The precision control (PC) bits (bits 9-8) can be 
used to set the Intel287 XL MCP internal operat- 
ing precision of the significand at less than the 
default of 64 bits (extended precision). This can 
be useful in providing compatibility with early gen- 
eration arithmetic processors of smaller preci- 
sion. PC affects only the instructions ADD, SUB, 
DIV, MUL, and SQRT. For all other instructions, 
either the precision is determined by the opcode 
or extended precision is used. 


@ 
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2.3.5 INSTRUCTION AND DATA POINTERS 


Because the MCP operates in parallel with the CPU, 
any exceptions detected by the MCP may be report- 
ed after the CPU has executed the ESC instruction 
which caused it. To allow identification of the failing 
numeric instruction, the Intel287 XL MCP contains 
registers that aid in diagnosis. These registers sup- 
ply the opcode of the failing numeric instruction, the 
address of the instruction, and the address of its nu- 
meric memory operand (if appropriate). 


The instruction and data pointers are provided for 
user-written exception handlers. Whenever the In- 
tel287 XL MCP executes a new ESC instruction, it 
saves the address of the instruction (including any 
prefixes that may be present), the address of the 
operand (if present), and the opcode. CPUs with 


15 7 | 


RESERVED 


EXCEPTION MASKS 
PRECISION —= 
UNDERFLOW 
OVERFLOW 
ZERO DIVIDE 
DENORMALIZED OPERAND 
INVALID OPERATION 


Precision Control 
00-24 bits (single precision) 
01-(reserved) 
10-53 bits (double precision) 
11-64 bits (extended precision) 


Intel287™ XL 


32-bit internal architectures contain 32-bit versions 
of these registers and do not use the contents of the 
MCP registers. This difference is not apparent to 
programmers, however. 


The instruction and data pointers appear in one of 
four formats depending on the operating mode of 
the system (protected mode or real-address mode) 
and (for CPUs with 32-bit internal architectures) de- 
pending on the operand-size attribute in effect (32- 
bit operand or 16-bit operand). (See Figures 2.4, 2.5, 
2.6, and 2.7.) The ESC instructions FLDENV, 
FSTENV, FSAVE, and FRSTOR are used to transfer 
these values between the registers and memory. 
Note that the value of the data pointer is undefined if 
the prior ESC instruction did not have a memory op- 
erand. 


RESERVED 
(INFINITY CONTROL)* 
ROUNDING CONTROL 
PRECISION CONTROL 


0 
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Rounding Control 
00-Round to nearest or even 
01-Round down (toward — ©) 
10-—Round up (toward + ©) 
11-Chop (truncate toward zero) 


*The “infinity control” bit is not meaningful to the Intel287 XL MCP. To maintain compatibility with the 80287, this bit can 
be programmed; however, regardless of its value, the Intel287 XL MCP treats infinity in the affine sense (— 0% < + 0), 


Figure 2.3. Control Word 
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16-BIT PROTECTED MODE FORMAT 
15 7 
CONTROL WORD 
- STATUS WORD 


TAG WORD 


Figure 2-4. instruction and Data Pointer Image in Memory, 16-bit Protected-Mode Format 


16-BIT REAL-ADDRESS MODE AND VIRTUAL 8086 MODE FORMAT 


15 7 
CONTROL WORD 


STATUS WORD 
TAG WORD 


[orn [foe oeeeceeoe 


Figure 2-5. instruction and Data Pointer Image in Memory, 16-bit Real-Mode Format 
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32-BIT PROTECTED MODE FORMAT 


7 0 


31 23 15 
RESERVED CONTROL WORD 


RESERVED — STATUS WORD 
RESERVED | TAG WORD 


IP OFFSET 
00000 OPCODE 9.0 CS SELECTOR 


DATA OPERAND OFFSET 


RESERVED OPERAND SELECTOR 


‘Figure 2-6. Instruction and Data Pointer Image in Memory, 32-bit Protected-Mode Format 


32-BIT REAL-ADDRESS MODE FORMAT 
31 23 15 Fs 


RESERVED CONTROL WORD 
RESERVED STATUS WORD 
RESERVED TAG WORD 


RESERVED INSTRUCTION POINTER 15..0 


0000 INSTRUCTION POINTER 31..16 ee OPCODE 10..0 
RESERVED OPERAND POINTER 15..0 
9000 OPERAND POINTER 31..16 0000 00000000 


Figure 2-7. Instruction and Data Pointer Image in Memory, 32-bit Real-Mode Format 
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Table 2.6. CPU Interrupt Vectors Reserved for MCP 


Interrupt | 
Cause of Interrupt 


ae In a system with a CPU that has control registers, an ESC instruction was encountered when 


EM or TS of CPU control register zero (CRO) was set. EM = 1 indicates that software 
emulation of the instruction is required. When TS is set, either an ESC or WAIT instruction 
causes interrupt 7. This indicates that the current MCP context may not belong to the current 
task. 


In a protected-mode system, an operand of a coprocessor instruction wrapped around an 
addressing limit (OFFFFH for expand-up segments, zero for expand-down segments) and 
spanned inaccessible addresses!. The failing numerics instruction is not restartable. The 
address of the failing numerics instruction and data operand may be lost; an FSTENV does 
not return reliable addresses. The segment overrun exception should be handled by 
executing an FNINIT instruction (i.e., an FINIT without a preceding WAIT). The exception can 
be avoided by never allowing numerics operands to cross the end of a segment. 


In a protected-mode system, the first word of a numeric operand is not entirely within the limit 
of its segment. The return address pushed onto the stack of the exception handler points at 
the ESC instruction that caused the exception, including any prefixes. The Intel287 XL MCP 
has not executed this instruction; the instruction pointer and data pointer register refer to a 
previous, correctly executed instruction. 


~ 


The previous numerics instruction caused an unmasked exception. The address of the faulty 
instruction and the address of its operand are stored in the instruction pointer and data 
pointer registers. Only ESC and WAIT instructions can cause this interrupt. The CPU return 
address pushed onto the stack of the exception handler points to a WAIT or ESC instruction 
(including prefixes). This instruction can be restarted after clearing the exception condition in 
the MCP. FNINIT, FNCLEX, FNSTSW, FNSTENV, and FNSAVE cannot cause this interrupt. 


NOTE: 

1. An operand may wrap around an addressing limit when the segment limit is near an addressing limit and the operand is 
near the largest valid address in the segment. Because of the wrap-around, the beginning and ending addresses of such an 
operand will be at opposite ends of the segment. There are two ways that such an operand may also span inaccessible 
addresses: 1) if the segment limit is not equal to the addressing limit (e.g. addressing limit is FFFFH and segment limit is 
FFFDH) the operand will span addresses that are not within the segment (e.g. an 8-byte operand that starts at valid offset 
FFFCH will span addresses FFFC—FFFFH and 0000-0003H; however addresses FFFEH and FFFFH are not valid, because 
they exceed the limit); 2) if the operand begins and ends in present and accessible segments but intermediate bytes of the 
operand fall in a not-present segment or page or in a segment or page to which the procedure does not have access rights. 


2.4 Interrupt Description 2.5 Exception Handling 

CPU interrupts are used to report exceptional condi- The Intel287 XL MCP detects six different exception 
tions while executing numeric programs in either real conditions that can occur during instruction execu- 
or protected mode. Table 2.6 shows these interrupts tion. Table 2.7 lists the exception conditions in order 
and their functions. of precedence, showing for each the cause and the 


2-128 : 


Intel287™ XL 


a 
intel. 
Table 2.7. Exceptions 
. Default Action 
j excepton | came (If Exception is Masked) 


Invalid Operation on a signalling NaN, Result is a quiet NaN, integer indefinite, 
Operation unsupported format, indeterminate form or BCD indefinite. 

(0* 00, 0/0, (+ 2%) + (— %), etc.), or 

stack overflow/underflow (SF is also 

set). 


Denormalized 
Operand 


At least one of the operands is 
denormailized, i.e., it has the smallest 
exponent but a nonzero significand. 


Zero Divisor The divisor is zero while the dividendisa | Resultis °°. 
: noninfinite, nonzero number. ’ 


The operand is normalized, and normal 
processing continues. 


Overflow The result is too large in magnitude to fit Result is largest finite value or ©. 
in the specified format. 


Underflow The true result is nonzero but too small Result is denormalized or zero. 
to be represented in the specified 


format, and, if underflow exception is 
masked, denormalization causes loss of 


accuracy. 


inexact 
Result 
(Precision) 


The true result is not exactly 


to the rounding mode. 


default action taken by the Intel287 XL MCP if the 
exception is masked by its corresponding mask bit in 
the control word. 


Any exception that is not masked by the control 
word sets the corresponding exception flag of the 
status word, sets the ES bit of the status word, and 
asserts the ERROR# signal. When the CPU at- 
tempts to execute another ESC instruction or WAIT, 
exception 16 occurs. The exception condition must 
be resolved via an interrupt service routine. The re- 
turn address pushed onto the CPU stack upon entry 
to the service routine does not necessarily point to 
the failing instruction nor to the following instruction. 
The Intel287 XL MCP saves the address of the float- 
ing-point instruction that caused the exception and 
the address of any memory operand required by that 
instruction. 


2.6 Initialization 


After FNINIT or RESET, the control word contains. 


the value 037FH (all exceptions masked, precision 
control 64 bits, rounding to nearest) the same values 
as in an 80287 after RESET. For compatibility with 
the 8087 and 80287, the bit that used to indicate 
infinity control (bit 12) is set to zero; however, re- 
gardless of its setting, infinity is treated in the affine 


representable in the specified format 
(e.g. 1/43); the result is rounded according 


Normal processing continues. 


sense. After FNINIT or RESET, the status word is 
initialized as follows: 


e All exceptions are set to zero. 


e Stack TOP is zero, so that after the first push the 
stack top will be register seven (111B). 


e The condition code C3-Cp is undefined. 
e The B-bit is zero. 


The tag word contains FFFFH (all stack locations 
are empty). 


80286/Intel287 XL MCP initialization software 
should execute an FNINIT instruction (i.e an FINIT 
without a: preceding WAIT) after RESET. The FNINIT 
is not strictly required for either 80287, 80C287A or 
Intel287 XL MCP software, but Intel recommends its 
use to help ensure upward compatibility with other 
processors. 


2.7 8087 and 80287 Compatibility 


This section summarizes the differences between 
the Intel287 XL MCP and the 80287. Any migration 
from the 8087 directly to the Intel287 XL MCP must 
also take into account the differences between the 
8087 and the 80287 as listed in the 80286 and 
80287 Programmer’s Reference Manual. There are 
no compatibility differences between the Intel287 XL 
MCP and 80C287A except the pinout configuration. 
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Many changes have been designed into the Intel287 
XL MCP to directly support the IEEE standard in 
hardware. These changes result in increased per- 
formance by eliminating the need for software that 
supports the standard. 


2.7.1 GENERAL DIFFERENCES 


The Intel287 XL MCP supports only affine closure 
for infinity arithmetic, not projective closure. 


Operands for FSCALE and FPATAN are no longer 
restricted in range (except for +); F2XM1 and 
FPTAN accept a wider range of operands. 


Rounding control is in effect for FLD constant. 


Software cannot change entries of the tag word to 
values (other than empty) that differ from actual reg- 
ister contents. ; 
After reset, FINIT, and incomplete FPREM, the In- 
tel287 XL MCP resets to zero the condition code bits 
C3-Cpo of the status word. 


In conformance with the IEEE standard, the Intel287 
XL MCP does not support the special data formats 
pseudozero, pseudo-NaN, pseudoinfinity, and un- 
normal. 


The denormal exception has a different purpose on 
the Intel287 XL MCP. A system that uses the denor- 
mal-exception handler solely to normalize the denor- 
mal operands, would better mask the denormal ex- 
ception on the Intel287 XL MCP. The Intel287 XL 
MCP automatically normalizes denormal operands 
when the denormal exception is masked. 


2.7.2 EXCEPTIONS 


A number of differences exist due to changes in the 
IEEE standard and to functional improvements to 
the architecture of the Intel287 XL MCP: 


1. When the overflow or underflow exception is 
masked, the Intel287 XL MCP differs from the 
80287 in rounding when overflow or underflow 
occurs. The Intel287 XL MCP produces results 
that are consistent with the rounding mode. 


2. When the underflow exception is masked, the 
Intel287 XL MCP sets its underflow flag only if 
there is also a loss of accuracy during denormal- 
ization. 


3. Fewer invalid-operation exceptions due to de- 
normal operands, because the _ instructions 
FSQRT, FDIV, FPREM, and conversions to BCD 
or to integer normalize denormal operands be- 
fore proceeding. 
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. The FSQRT, FBSTP, and FPREM instructions 


may cause underflow, because they support de- 
normal operands. 


. The denormal exception can occur during the 


transcendental instructions and the FXTRACT 
instruction. 


. The denormal exception no longer takes prece- 


dence over all other exceptions. 


. When the denormal .exception is masked, the 


Intel287 XL MCP automatically normalizes de- 
normal operands. The 8087/80287 performs 
unnormal arithmetic, which might produce an 
unnormal result. 


. When the operand is zero, the FXTRACT in- 


struction reports a zero-divide exception and 
leaves — 9 in ST(1). 


. The status word has a new bit (SF) that signals 


when invalid-operation exceptions are due to 
stack underflow or overflow. 


FLD extended precision no longer reports de- 
normal exceptions, because the instruction is 
not numeric. 


FLD single/double precision when the operand 
is denormal converts the number to extended 
precision and signals the denormalized operand 
exception. When loading a signalling NaN, FLD 
single/double precision signals an invalid-oper- 
and exception. 


The Intel287 XL MCP only generates quiet 
NaNs (as on the 80287); however, the Intel287 
XL MCP distinguishes between quiet NaNs and 
signaling NaNs. Signaling NaNs trigger excep- 
tions when they are used as operands; quiet 
NaNs do not (except for FCOM, FIST, and 
FBSTP which also raise IE for quiet NaNs). 


When stack overflow occurs during FPTAN and 

overflow is masked, both ST(0) and ST(1) con- 

tain quiet NaNs. The 8087/80287 leaves the 

original operand in ST(1) intact. 

When the scaling factor is +o, the FSCALE 

(ST(0), ST(1)) instruction behaves as follows 

(ST(0) and ST(1) contain the scaled and scaling 

operands respectively): 

e FSCALE(0,°) generates the invalid opera- 
tion exception. 

e FSCALE(finite, — °°) generates zero with the 
same sign as the scaled operand. 

e FSCALE(finite, + °°) generates — % with the 
same sign as the scaled operand. 

The 8087/80287 returns zero in the first case 

and raises the invalid-operation exception in the 

other cases. 
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15. The Intel287 XL MCP returns signed infinity/ 
zero as the unmasked response to massive 
overflow/underflow. The 8087 and 80287 sup- 
port a limited range for the scaling factor; within 


this range either massive overflow/underflow 
do not occur or undefined results are produced. 


3.0 HARDWARE INTERFACE 


In the following description of hardware interface, 
the # symbol at the end of a signal name indicates 
that the active or asserted state occurs when the 
signal is at a low voltage. When no # is present after 
the signal name, the signal is asserted when at the 
high voltage level. 
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3.1. Signal Description 


In the following signal descriptions, the Intel287 XL 
MCP pins are grouped by function as follows: 


1. Execution control—CLK, CKM, RESET 

2. MCP handshake—PEREQ, PEACK#, BUSY#, 
ERROR # 

3. Bus interface pins—D;5-Dp, NPWR#, NPRD# 

4. Chip/Port Select—NPS1#, NPS2, CMDO, CMD1 

5. Power supplies—Vcc, Vss 


Table 3.1 lists every pin by its identifier, gives a brief 
description of its function, and lists some of its char- 
acteristics. Figure 3.1 shows the locations of pins on 
the Ceramic package, while Figure 3.2 shows the 
locations of pins on the PLCC package. Table 3.2 
helps to locate pin identifiers in Figures 3.1 and 3.2. 


Table 3.1. Pin Summary 


Active Input/ 
eae | 
CLocKk 


ClocKing Mode 
System reset 


PEREQ 
PEACK # 
BUSY # 
ERROR # 


D1i5-—D0 
NPRD# 
NPWR # 


Busy status 
Error status 


Data pins 


MCP select #1 
MCP select #2 
CoMmanbD 0. 
CoMmanbD 1 


Numeric Processor ReaD 
Numeric Processor WRite 


Processor Extension REQuest 
Processor Extension ACKnowledge 


Vcc System power — 
Vss System ground 
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NOTE: 
The Intel287 XL will operate in any coprocessor socket designed for an NMOS 80287 or the CMOS 80C287A. 


6 5 4 3 2 1 44 43 42 


Intel287'™™ XLT 
Top View* 


18 19 20 21 22 23 24 25 26 27 


re) 
3 


290376-6 
*“Top View” means as the package is seen from the component side of the board. 


Figure 3.2. PLCC Pin Configuration 
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Table 3.2. PLCC Pin Cross-Reference 


ERROR # 

No Connect | 1,2,3,4,13,37,38,40 | 6,11,23,33,40 
NPRD# 27 30 

NPS1 # 34 38 

NPS2 33 37 
NPWR# | 28 31 
PEACK# | 36 At 

PEREQ 24 27 

RESET 35 39 

Voc 9 1,3,10,15,42 
Vss 10,30 2,4,12,34,43 


3.1.1 CLOCK (CLK) 


This input provides the basic timing for internal oper- 
ation. This pin does not require MOS-level input; it 
will operate at either TTL or MOS levels up to the 
maximum allowed frequency. A minimum frequency 
must be provided to keep the internal logic properly 
functioning. Depending on the signal on CKM, the 
signal on CLK can be divided by two to produce the 
internal clock signal. 


3.1.2 CLOCKING MODE (CKM) 
This pin is a strapping option. When it is strapped to 


Voc (HIGH), the CLK input is used directly; when 
strapped to Vss (LOW), the CLK input is divided by 
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two to produce the internal clock signal. During the 
RESET sequence, this input must be stable at least 
four internal clock cycles (i.e. CLK clocks when CKM 
is HIGH; 2 X CLK clocks when CKM is LOW) before 
RESET goes LOW. 


3.1.3 SYSTEM RESET (RESET) 


A LOW to HIGH transition on this pin causes the 
Intel287 XL MCP to terminate its present activity and 
to enter a dormant state. RESET must remain active 
(HIGH) for at least four CLK periods (i.e., the RESET 
signal presented to the Intel287 XL MCP must be at 
least four Intel287 XL MCP clocks long, regardless 
of the frequency of the CPU). Note that the Intel287 
XL MCP is active internally for 25 clock cycles after 
the termination of the RESET signal (the HIGH to 
LOW transition of RESET); therefore, the first in- 
struction should not be written to the Intel287 XL 
MCP until 25 clocks after the falling edge of RESET. 
Table 3.3 shows the status of the output pins during 
the reset sequence. After a reset, all output pins re- 
turn to their inactive states. | 


Table 3.3. Output Pin Status during Reset 


ee 


| Dis-Do | Tristate OFF 


3.1.4 PROCESSOR EXTENSION REQUEST 
(PEREQ) 


When active, this pin signals to the CPU that the 
Intel287 XL MCP is ready for data transfer to/from 
its data FIFO. With 80286 and 80C286 CPUs, 
PEREQ can be deactivated after assertion of 
PEACK#. These CPUs rely on the MCP to deassert 
PEREQ when all operands have been transfered. 
When there are more than five data transfers, 
PEREQ is deactiviated after the first three transfers 
and subsequently after every four transfers. This sig- 
nal always goes inactive before BUSY # goes inac- 
tive. 


3.1.5 BUSY STATUS (BUSY #) 
When active, this pin signals to the CPU that the 
Intel287 XL MCP is currently executing an instruc- 


tion. It should be connected to the CPU’s BUSY # 
pin. During the RESET sequence this pin is HIGH. 
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3.1.6 ERROR STATUS (ERROR #) 


This pin reflects the ES bit of the status register. 
When active, it indicates that an unmasked excep- 
tion has occurred. This signal can be changed to 
inactive state only by the following instructions (with- 
out a _ preceding WAIT): FNINIT, FNCLEX, 
FNSTENV, FNSAVE, FLDCW, FLDENV, and 
FRSTOR. This pin should be connected to the ER- 
ROR # pin of the CPU. ERROR# can change state 
only when BUSY # is active. 


3.1.7 PROCESSOR EXTENSION 
ACKNOWLEDGE (PEACK #) 


During execution of escape instructions, an 80286 or 
80C286 CPU asserts PEACK# to acknowledge that 
the request signal (PEREQ) has been recognized 
and that data transfer is in progress. The 80286/ 
80C286 also drives this signal HIGH during RESET. 


This input may be asynchronous with respect to the 
Intel287 XL MCP clock except during a RESET se- 
quence, when it must satisfy setup and hold require- 
ments relative to RESET. 


3.1.8 DATA PINS (D45-Do) 


These bidirectional pins are used to transfer data 
and opcodes between the CPU and Intel287 XL 
MCP. They are normally connected directly to the 
corresponding CPU data pins. Other buffers/drivers 
driving the local data bus must be disabled when the 
CPU reads from the MCP. HIGH state indicates a 
value of one. Do is the least significant data bit. 


3.1.9 NUMERIC PROCESSOR WRITE (NPWR#) 


A signal on this pin enables transfers of data from 
the CPU to the MCP. This input is valid only when 
NPS1# and NPS2 are both active. 


3.1.10 NUMERIC PROCESSOR READ (NPRD#) 


A signal on this pin enables transfers of data from 
the MCP to the CPU. This input is valid only when 
NPS1# and NPS2 are both active. 


3.1.11 NUMERIC PROCESSOR SELECTS 
(NPS1# and NPS2) 


Concurrent assertion of these signals indicates that 
the CPU is performing an escape instruction and en- 
ables the Intel287 XL MCP to execute that instruc- 
tion. No data transfer involving the Intel287 XL MCP 
occurs unless the device is selected by these lines. 
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3.1.12 COMMAND SELECTS (CMD0 AND 
CMD1) 


These pins along with the select pins allow the CPU 
to direct the operation of the Intel287 XL MCP. 


3.1.13 SYSTEM POWER (Vcc) 


System power provides the +5V+10% DC supply 
input. All Voc pins should be tied together on the 
circuit board and local decoupling capacitors should 
be used between Vcc and Vss. 


3.1.14 SYSTEM GROUND (Vss) 


All Vss pins should be tied together on the circuit 
board and local decoupling capacitors should be 
used between Vcc and Vss. 


3.2 Processor Architecture 


As shown by the block diagram on the front page, 
the Intel287 XL MCP is internally divided into three 
sections: the bus control logic (BCL), the data inter- 
face and control unit, and the floating point unit 
(FPU). The FPU (with the support of the control unit 
which contains the sequencer and other support 
units) executes all numerics instructions. The data 
interface and control unit is responsible for the data 
flow to and from the FPU and the control registers, 
for receiving the instructions, decoding them, and 
sequencing the microinstructions, and for handling 
some of the administrative instructions. The BCL is 
responsible for CPU bus tracking and interface. 


3.2.1 BUS CONTROL LOGIC 


The BCL communicates solely with the CPU using 
1/O bus cycles. The BCL appears to the CPU as a 
special peripheral device. It is special in two re- 
spects: the CPU initiates |/O automatically when it 
encounters ESC instructions, and the CPU uses re- 
served I/O addresses to communicate with the BCL. 
The BCL does not communicate directly with memo- 
ry. The CPU performs all memory access, transfer- 
ring input operands from memory to the Intel287 XL 
MCP and transferring outputs from the Intel287 XL 
MCP to memory. A dedicated communication proto- 
col makes possible high-speed transfer of opcodes 
and operands between the CPU and Intel287 XL 
MCP. 


3.2.2 DATA INTERFACE AND CONTROL UNIT 
The data interface and control unit latches the data 


and, subject to BCL control, directs the data to the 
FIFO or the instruction decoder. The instruction de- 
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Table 3.4. Bus Cycles Definition 


NPS1# NPS2 CMDO CMD1 # £=“NPRD# 


x< 
x< 
< 


oocoooocoo 6.4 
ee ee ee ae ee oe 
aw OO 00x 
uta OOOO x x 
a~OO4 OO x 


coder decodes the ESC instructions sent to it by the 
CPU and generates controls that direct the data flow 
in the FIFO. It also triggers the microinstruction se- 
quencer that controls execution of each instruction. 
If the ESC instruction is FINIT, FCLEX, FSTSW, 
FSTSW AX, FSTCW, FSETPM, or FRSTPM, the 
control executes it independent ly of the FPU and 
the sequencer. The data interface and control unit is 
the one that generates the BUSY#, PEREQ, and 
ERROR# signals that synchronize Intel287 XL ac- 
tivities with the CPU. 


3.2.3 FLOATING-POINT UNIT 


The FPU executes all instructions that involve the 
register stack, including arithmetic, logical, transcen- 
dental, constant, and data transfer instructions. The 
data path in the FPU is 84 bits wide (68 significant 
bits, 15 exponent bits, and a sign bit) which allows 
internal operand transfers to be performed at very 
high speeds. 


3.3 Bus Cycles 


The pins NPS1#, NPS2, CMDO, CMD1, NPRD#, 
and NPWR # identify bus cycles for the MCP. Table 
3.4 defines the types of Intel287 XL MCP bus cycles. 


3.3.1 Intel287™ XL MCP ADDRESSING 


The NPS1#, NPS2, CMDO, and CMD1 signals allow 
the MCP to identify which bus cycles are intended 
for the MCP. The MCP responds to I/O cycles when 
the I/O address is OOF8H, OOFAH, OOFCH. The cor- 
respondence between I/O addresses and control 
signals is defined by Table 3.5. To guarantee correct 
operation of the MCP, programs must not perform 
any |/O operations to these reserved port address- 
es. 


NPWR # Bus Cycle Type 


Intel287 XL MCP not selected 
Intel287 XL MCP not selected 
Opcode write to Intel287 XL MCP 

CW or SW read from Intel287 XL MCP 


x< 


Read data from Intel287 XL MCP 
Write data to Intel287 XL MCP 
Write exception pointers 
Reserved 

Reserved 

Reserved 


o-- "00+ —$ ~ XK 
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I/O Address Command Inputs 


(Hexadecimal) 


3.3.2 CPU/MCP SYNCHRONIZATION 


The pins BUSY #, PEREQ, and ERROR# are used 
for various aspects of synchronization between the 
CPU and the MCP. 


BUSY # is used to synchronize instruction transfer 
from the CPU to the Intel287 XL MCP. When the 
Intel287 XL MCP recognizes an ESC instruction, it 
asserts BUSY#. For most ESC instructions, the 
CPU waits for the Intel287 XL MCP to deassert 
BUSY # before sending the new opcode. 


The MCP uses the PEREQ pin of the CPU to signal 
that the MCP is ready for data transfer to or from its 
data FIFO. The MCP does not directly access mem- 
ory; rather, the CPU provides memory access serv- 
ices for the MCP. Thus, memory access on behalf of 
the MCP always obeys the rules applicable to the 
mode of the CPU, whether the CPU be in real-ad- 
dress mode or protected mode. 


Once the CPU initiates an Intel287 XL MCP instruc- 
tion that has operands, the CPU waits for PEREQ 
signals that indicate when the Intel287 XL MCP is 
ready for operand transfer. Once all operands have 
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been transferred (or if the instruction has no oper- 
ands) the CPU continues program execution while 
the Intel287 XL MCP executes the ESC instruction. 


In 8086/8087 systems, WAIT instructions may be 
required to achieve synchronization of both com- 
mands and operands. In Intel287 XL MCP systems, 
however, WAIT instructions are required only for op- 
erand synchronization; namely, after MCP stores to 
memory (except FSTSW and FSTCW) or load from 
memory. (In 80286/Intel287 XL MCP systems, WAIT 
is required before FLDENV and FRSTOR; with other 
CPU’s, WAIT is not required in these cases.) Used 
this way, WAIT ensures that the value has already 
been written or read by the MCP before the CPU 
reads or changes the value. 


Once it has started to execute a numerics instruction 
and has transferred the operands from the CPU, the 
Intel287 XL MCP can process the instruction in par- 
allel with and independent of the host CPU. When 
the MCP detects an exception, it asserts the ER- 
ROR # signal, which causes a CPU interrupt. 


3.4 Bus Operation 


With respect to bus interface, the Intel287 XL MCP 
is fully asynchronous with the CPU, even when it 
operates from the same clock source as the CPU. 
The CPU initiates a bus cycle for the MCP by activat- 
ing both NPS1# and NPS2, the MCP select signals. 
During the CLK period in which NPS1# and NPS2 
are activated, the Intel287 XL MCP also examines 
the NPRD# and NPWR # input signals to determine 
whether the cycle is a read or a write cycle and ex- 
amines the CMDO and CMD1 inputs to determine 
whether an opcode, operand, or control/status reg- 
ister transfer is to occur. The Intel287 XL MCP acti- 
vates its BUSY # output some time after the leading 
edge of the NPRD# or NPWR# signal. Input and 
output data are referenced to the trailing edges of 
the NPRD# and NPWR# signals. 


The Intel287 XL MCP activates the PEREQ signal 
when it is ready for data transfer. In 80286/80C286 
systems, the CPU activates PEACK# when no more 
data transfers are required, which causes the In- 
‘tel287 XL MCP to deactivate PEREQ, halting the 
data transfer. 
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3.5 80286/Intel287™ XL MCP, 
80C286/Intel287™ XL MCP 
Interface and Socket Compatibilty 


The ceramic Intel287 XL MCP device can fit into ex- 
isting 80287 sockets since the pin configuration is 
identical. 


The CERDIP 80C287A utilizes a different pin config- 
uration with extra power and ground pins. However, 
the Intel287 XL MCP operates in 80C287A sockets 
also. The extra power and ground pins are not con- 
nected inside the Intel287 XL MCP and not used. 
Refer to 80C287A data sheet (Order #240347). 


Note that when the clock selection is CKM = 0, the 
Intel287 XL MCP divides the clock input by two, not 
by three as on the 80287. In this case, the Intel287 
XL MCP will operate faster. 


The interface between the Intel287 XL MCP and the 
80286/80C286 CPU (illustrated in Figure 3.3) has 
these characteristics: 


e The Intel287 XL MCP resides on the local data 
bus of the CPU. , 


e The CPU and Intel287 XL MCP share the same 
RESET signals. They may also share the same 
clock input; however, for greatest performance, 
an external oscillator may be needed. 

e The corresponding BUSY#, ERROR#, PEREQ, 
and PEACK# pins are connected together. 

e NPS2 is tied HIGH permanently, while NPS1#, 
CMD1, and CMDO come from the latched ad- 
dress pins. The 80286 generates I/O addresses 
OOF8H, OOFAH, and OOFCH during MCP bus cy- 
cles. Address OOFEH is reserved. 

e The Intel287 XL MCP NPRD# and NPWR# in- 
puts are connected to I/O read and write signals 
from local bus control logic. 
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ADDRESS 


RESET 
READY # 
CLK 


820284 Si* 
So# 


A15-A0 


RESET 


READY # READY#  80C286/ 
CLK CLK 80286 
S18 ee D15-D0 
so# so# 
M/lo# M/l0# 
ERROR# PEREQ 
BUSY# PEACK# 
COD/INTA# 
820288 
OR i ee 


DEN 
DT/R# 


ALE 
lOwC# lORC# 


PEACK# 
PEREQ 


RESET 


intel287"™ xL_ MCP 
OE# 
DIR 
TRANS- 
CEIVER 


NPRD# 
NPWR# 
ERROR# 
BUSY# 


CLK 


4 \ 
CLOCK ey’ 
GENERATOR 
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Figure 3.3. 80286/Intel287™ XL System Configuration 
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4.0 ELECTRICAL DATA 


4.1 Absolute Maximum Ratings 


NOTE 

Stresses above those listed may cause permanent 
damage to the device. This is a stress rating only 
and functional operation of the device at these or 
any other conditions above those indicated in the 
operational sections of this specification is not im- 
plied. Exposure to absolute maximum rating condi- 
tions for extended periods may affect device reli- 
ability. 


Case temperature Tc under bias ....... 0°C to 85°C 
Storage temperature ........... ~§5"°C to + 150°C 
Voltage on any pin 

with respect to ground....... —0.5 to Voc + 0.5V 
POWOS GiORIORUGI 04.30% va cshawent De cena os 1.5 Watt 


4.3 D.C. Characteristics 
Table 4.1. D.C. Specifications Tc = 0 to 85 deg C, Voc = 5V +10% 


Test 
Conditions 


Input LOW Voltage 

Input HIGH Voltage 
Clock Input LOW Voltage 
Clock Input HIGH Voltage 
Output LOW Voltage 
Output HIGH Voltage 
Power Supply Current 
Input Leakage Current 
|/O Leakage Current 
Input Capacitance 

1/O or Output Capacitance 
Clock Capacitance 


NOTES: 

1. 12.5 MHz operation, output load = 100 pF 
2.0V < Vin < Voc 

3. 0.45V < Vout < Voc —0.45 

4.Fo = 1MHz 
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4.2 Power and Frequency 
Requirements 


The typical relationship between Ico and the fre- 
quency of operation F is as follows: 


Icctyp = 55 + 5*F mA, where F is in MHz. 


When the frequency is reduced below the minimum 
operating frequency specified in the AC Characteris- 
tics table, the internal states of the Intel287 XL MCP 
may become indeterminate. The Intel287 XL MCP 
clock cannot be stopped; otherwise, Icc would in- 
crease significantly beyond what the equation above 
indicates. Power dissipation decreases with frequen- 
cy for frequencies = 4 MHz. 


NOTICE: This is a production data sheet. The specifi- 
cations are subject to change without notice. 


* WARNING: Stressing the device beyond the “Absolute 
Maximum Ratings” may cause permanent damage. 
These are stress ratings only. Operation beyond the 
“Operating Conditions” is not recommended and ex- 
tended exposure beyond the “Operating Conditions” 
may affect device reliability. 
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4.4 A.C. Characteristics 


Table 4.2. Timing Requirements Tc = 0 to 85 deg C, Voc = 5V +10% 
All timings are measured at 1.5V unless otherwise ranean 


Test 
Parameter , Conditions 
(ns) 
Tdvwh (t6) Data setup to NPWR # 43 
Twhdx (t7) Data hold from NPWR # 14 
Trirh (t8) NPRD # active time 
Twlwh (t9) _ NPWR# active time 
Tavwi (t10) Command valid to NPWR # 
Tavrl (t11) Command valid to NPRD # 
Tmhrl (t12) Min delay from PEREQ active 
to NPRD# active 


Tkikh (t33) PEACK # active time 
Tkhkl (t34) PEACK # inactive time 
Tkhch (t35) PEACK # inactive to 
NPRD #, NPWR # inactive 
PEACK # active setup to 
NPRD#, NPWR# active 


Tchkl (t37) NPRD#, NPWR # inactive 

to PEACK # active 
Twhax (t18) Command hold from NPWR # 
Trhax (t19) Command hold from NPRD # 


Tivel (t20) NPRD#, NPWR#, RESET to 
CLK setup time 
NPRD#, NPWR#, RESET from 


CLK hold time 
PEACK# setup to RESET 


Tkicl (t36) 


Tclih (t21) 


Tpaksu (t38) 


falling edge 

Tpakhd (t39) PEACK # hold from RESET 
falling edge 

Trscl (t24) RESET to CLK setup 


RESET from CLK hold 


Command inactive time 
Write to write 
Read to read 
Read to write 
Write to read 


Tclrs (t25) 
Temdi (t26) 


\ 


NOTE: 
1. This is an asynchronous input. This specification is given for testing purposes only, to assure recognition at a specific CLK 
edge (not tested). 
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Table 4.3. Timing Responses 


Test 
arameter Conditions 


Trhqz (t27) NPRD # inactive to data float* 
Triqv (t28) NPRD # active to data valid 


Tilbh (t29) ERROR # active to BUSY # inactive 
Twlbv (t30) NPWR # active to BUSY # active 


Tkiml (t31) NPRD#, NPWR# or PEACK# 
active to PEREQ inactive 
Trhgh (t32) Data hold from NPRD # inactive 


NOTES: 

* The data float delay is not tested. 

2. The float condition occurs when the measured output current is less than Io, on Dy5—-Do. 
3. Dy5-Dpo loading: C_ = 100pf. 

4. BUSY # loading: C, = 100pf. 

5. On last data transfer of numeric instruction. 


Table 4.4. Clock Timings 


. Parameter Feet 
Max Conditions 
(ns) 
80 


Tclcl (tla) CLK period CKM=1 
(t1b) | CKM=0 
Telch (t2a) CLK low time CKM=1 
(t2b) f CKM=0 Note 6, 10 
Tchcl (t3a) CLK high ttme CKM=1 Voc = +10% 
CKM=1 Voc = +5%, Note 11 
(t3b) CKM=0 Note 7, 10 , 
Tch1ch2 (t4) Note 8 
Tch2chi (t5) Note 9 
NOTES: 
6. At 0.8V. 
7. At 2.0V. 


8. CKM= 1: 3.5V to 1.0V 
9. CKM=1: 1.0V to 3.5V 
10. Proper operation can also be achieved by meeting the CPU specification 
11. Provides compatibility for sockets designed for Intel 80287-6/8/10 MHz Math CoProcessors. 
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Figure 4.2. AC Setup, Hold, and Delay Time Measurements—General 


RESET, NPWR#, NPRD# inputs are asynchronous 
DEVICE to CLK. Timing requirements in Figures 4.7 through 


OUTPUT ° . 
| 4.10 are given for testing purposes only, to assure 
recognition at a specific CLK edge. 


iz 
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Figure 4.3. AC Test Loading on Outputs 
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CMDO, CMD1 
NPS1#,NPS2 


DATA 
TRANSFER 
FROM Intei287™ x_ mcp 


AAAS 


t10 9 t18 


DATA 


t6 —>|.— t7 TRANSFER 


TO Intel287™ xL MCP 
DATA MAY CHANGE ae VALID DATA MAY CHANGE 


t30 —| 
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Figure 4.4. Data Transfer Timing (Initiated by CPU) 


CMDO, CMD1 
NPS1#, NPS2 


t10, t11 


NPRD#, NPWR# 
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Figure 4.5. Data Channel Timing (Initiated by Intel287™ XL) 
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BUSY# 


ERROR# 
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Figure 4.6. ERROR # Output Timing 


CLK 
(IF CKM=1) 
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Figure 4.7. CLK, RESET Timing (CKM = 1) 


CLK 
(IF CKM=1) 


NPRD#, NPWR# 
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Figure 4.8. CLK, NPRD#, NPWR# Timing (CKM= 1) 


PHASE INDETERMINATE 
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NOTE: 
RESET must meet timing shown to guarantee known phase of internal divide by 2 circuit. 


Figure 4.9. CLK, RESET Timing (CKM= 0) 
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Figure 4.11. RESET, PEACK # Setup and Hold Timing 
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5.0 Intel287™ XL MCP EXTENSIONS 
Mg CPU’S INSTRUCTION 


Instructions for the Intel287 XL MCP assume one of 
the five forms shown in Table 5-1. In all cases, in- 
structions are at least two bytes long and begin with 
the bit pattern 11011B, which identifies the ESCAPE 
class of instruction. Instructions that refer to memory 
operands specify addresses using the CPU’s ad- 
dressing modes. 


MOD (Mode field) and R/M (Register/Memory spec- 
ifier) have the same interpretation as the corre- 
sponding fields of CPU instructions (refer to Pro- 
grammer’s Reference Manual for the CPU). The 
DISP (displacement) is optionally present in instruc- 
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tions that have MOD and R/M fields. Its presence 
depends on the values of MOD and R/M, as for in- 
structions of the CPU. 


The instruction summaries that follow assume that 
the instruction has been prefetched, decoded, and is 
ready for execution; that bus cycles do not require 
wait states; that there are no local bus HOLD re- 
quests delaying processor access to the bus; and 
that no exceptions are detected during instruction 
execution. Timings are given in internal Intel287 XL 
MCP clocks and include the time for opcode and 
data transfer between the CPU and the MCP. If the 
instruction has MOD and R/M fields that call for 
both base and index registers, add one clock. 


Table 5.1. Instruction Formats 


Optional 


First ene Second Byte Field 


a fF OD wp — 


1 


Poo 5 [| ore a 


OP = Instruction opcode, possibly split into two fields OPA and OPB 


MF = Memory Format d = Destination 
00-32-bit real 
01-32-bit integer 
10-64-bit real 
11-16-bit integer 


0-Destination is ST(0) 
1-Destination is ST(i) 


R XOR d = 0-Destination (Op) Source 


R XOR d = 1-Source (Op) Destination 
*In FSUB and FDIV, the low-order bit of the OPB is the R (reversed) bit 


= Pop ST(i) = Register stack element i 


0-Do not pop stack 
1-—Pop stack after operation 


ESC = 11011 . 


000 = Stack top 
001 = Second stack element 


111 = Eighth stack element 
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DATA TRANSFER 
FLD = Loada 
Integer/real memory to ST(0) 


Long integer memory to ST(0) 


BCD memory to ST(0) 
ST(i) to ST(0) 
FST = Store 
ST(0) to integer/real memory 
ST(0) to ST(i) 
FSTP = Store and Pop 
ST(0) to integer/real memory 
ST(0) to long integer memory 
ST(0) to extended real 
ST(0) to BCD memory 
ST(0) to ST(i) 
FXCH = Exchange 
ST(i) and ST(0) 
COMPARISON 
FCOM = Compare 
Integer/real memory to ST(0) 
ST(i) to ST(0) 


FCOMP = Compare and pop 
Integer/real memory to ST 


ST(i) to ST(0) 


ST(1) to ST(0) 
FTST = Test ST(0) 


FXAM = Examine ST(0) 


CONSTANTS 
FLDZ = Load +0.0 into ST(0) 
FLD1 


Load + 1.0 into ST(0) 
FLDPI = Load pi into ST(0) 


[Encoding | Clock CountRange 
Byte Byte Optional 32-Bit 32-Bit 64-Bit 
0 1 Bytes 2-3 Real Integer Real 


Extended real memory to ST(0) 


FCOMPP = Compare and pop twice 


FLDL2T = Load logo(10) into ST(0) 


intel287™ XL MCP Extension to the CPU’s Instruction Set 


Encoding Clock Count Range 


16-Bit 
Integer 


61-68 
76-87 
48 
270-279 
21 


45 


[ESCMFI | MODOOOR/M | SIB/DISP_| 
[—ESCii | MODI01A/M | _SIB/DISP 
[Esco | MODIOIR/M | SIB/DISP 
[_ESC1it | MODI00R/M | SIB/DISP__ 


86-100 56 


ESCMF1 | MODO10R/M | _ SIB/DISP 
| ESC101_— | 11010 ST() 


18 


[Esc | MODI1IA/M | SIB/DISP 
[_eSC1i1 | MODII0R/M | SIB/DISP 
[_Esci01 [| 11001ST@) 


ESC 001 11001 ST(i) 


ESC MF 0 MOD 010 R/M SIB/DISP 
ESC 000 11010 ST(i) 


ESC MF 0 MOD 011 R/M SIB/DISP 
- ESC 000 11011 ST(i) | 


ESC 110 | 11011001 _| 
ESC 001 1110 0100 


EES 


Escooi | 11100101 


| escoot | 11101110 


Shaded areas indicate instructions not available in 8087/80287, but available on 80C287A and Intel287 XL MCP. 


NOTE: 


a. When loading single- or double-precision zero from memory, add 5 clocks. 
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Intel287™ XL MCP Extension to the CPU’s Instruction Set (Continued) 
ne ee 
ae me Loe | Slot ie 
* Bytes 2-3 Real integer Real Integer 
CONSTANTS (Continued) 
FLDL2E = Load loga(e) into ST(0) | Escoot | 11101010 | 
FLDLG2 = Load logio(2) intoST(0)  [__eScoo1 | 11101100 | 
FLDLN2 = Load loga(2) into ST(0) 


ARITHMETIC 
FADD = Add 


Integer/real memory with ST(0) ESC MF 0 MOD 000 R/M SIB/DISP 40-48 73-78 49-79 71-85 
ST(i) and ST(0) ESC dP0O 11000 ST(i) 30-385 


FSUB = Subtract 


Integer/real memory with ST(0) ESC MF 0 MOD 10 R R/M SIB/DISP 


73-98 49-77 71-83¢ 


ST(i) and ST(0) 33-414 

FMUL = Multiply 
Integer/real memory with ST(0) 77-88 52-77 76-87 
ST(i) and ST(0) 25-53¢ 

FDIV = Divide 
Integer/real memory with ST(0) 105 136-143f 114 136-1409 
ST(i) and ST(0) | ESCdPO | 1111RR/M | g5h 

FSQRT! = Square root 129-136 


74-93 


FSCALE = Scale ST(0) by ST(1) | escoo1 | 11111101 
FPREM = Partial remainder of ESC 001 


ST(0) + ST(1) 


DOT 
FRNDINT = Round ST(0) ESC 001 1111 1100 
to integer 


FXTRACT = Extract components 


of ST(0) ESC 001 11110100 
FABS = Absolute value of ST(0) ESC 001 
FCHS = Change sign of ST(0) ESC 001 1110 0000 
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Shaded areas indicate instructions not available in 8087/80287, but available on Intel287 XL MCP and 80C287A. 


NOTES: 

b. Add 3 clocks to the range when d = 1. e 
c. Add 1 clock to each range when R = 1. 

d. Add 3 clocks to the range when d = 0. 

e. Typical = 48 (When d = 0, 42-50, typical = 45). 
f. Add 1 clock to the range when R = 1. 

g. 135-141 when R = 1. 

h. Add 3 clocks to the range when d = 1. 

i. —O < ST(O) < +0. 
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Intel287™ XL MCP Extension to the CPU’s Instruction Set (Continued) 


Encoding 
Byte Byte Optional Clock Count Range 
0 ’ 1 Bytes 2-3 


TRANSCENDENTAL 


Ss II 


Escoo1 | 11110010 __ 
ESC 001 11110011 


7 sie 


FPTANK = Partial tangent of ST(0) 
FPATAN = Partial arctangent 


: = Sede 
F2Xm1! = 2ST(0) — 4 ESC 001 
FYL2Xm = ST(1) * logo(ST(0)) ESC001 | 11110001 | 


FYL2XP1n = ST(1) * logo(ST(0) + 1.0) 

PROCESSOR CONTROL 

FINIT = Initialize MCP 

FSETPM = Set protected mode 

FRSTPM = Reset protected mode 

FSTSW AX = Store status word 

FLDCW = Load control word 


FSTCW = Store control word ESC 101 MOD 111 R/M SIB/DISP 
FSTSW = Store status word ESC 101 MOD 111 R/M SIB/DISP 


FCLEX = Clear exceptions 
FSTENV = Store environment 
FLDENV = Load environment 
FSAVE = Save state 
FRSTOR = Restore state 
FINCSTP = Increment stack pointer 
FDECSTP = Decrement stack pointer 
FFREE = Free ST(i) 
FNOP = No operations 


Shaded areas indicate instructions not available in 8087/80287, but available on Intel287 XL MCP and 80C287A. 


NOTES: 

j. These timings hold for operands in the range |x| < 2/4. For operands not in this range, up to 78 additional clocks may be 
needed to reduce the operand. 

k. 0 < | ST(O)| < 263, 

L -1.0 = STO) < 1.0. 

m. 0 < ST(0) < «©, —o < ST(1) < +0. 

n. 0 < |ST(O)| < (2 — SQRT(2))/2, — 2 < ST(1) < +0. 
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82C288 
BUS CONTROLLER FOR 80286 PROCESSORS 
(82C288-12, 82C288-10, 82C288-8) 


m= Provides Commands and Controls for m@ Fully Static Device 
Local and System Bus m Available in 20 Pin PLCC (Plastic 

m Wide Flexibility in System Leaded Chip Carrier) and 20 Pin Cerdip 
Configurations Packages 

m High Speed CHMOS III Technology Se eee ee Sen 


m@ Fully Compatible with the HMOS 82288 


The Intel 82C288 Bus Controller is a 20-pin CHMOS Ill component for use in 80286 microsystems. The 
82C288 is fully compatible with its predecessor the HMOS 82288. The bus controller is fully static and 
supports a low power mode. The bus controller provides command and control outputs with flexible timing 
options. Separate command outputs are used for memory and I/O devices. The data bus is controlled with 
separate data enable and direction control signals. 


Two modes of operation are possible via a strapping option: MULTIBUS | compatible bus cycles, and high 
speed bus cycles. 


CONTROL 
OUTPUT 
LOGIC 


240042-1 
Figure 1. 82C288 Block Diagram 


September 1989 
Order Number: 240042-003 2-149 


820288 | 3 in ® 


20 Pin Cerdip Package 


CEN/IAEN 
CENL 


INTA 


240042-2 


P.C. Board Views—As viewed from the compo- Component Pad Views—As viewed from under- 
nent side of the P.C. board. side of component when mounted on the board. 


20 Pin PLCC Package 


240042-3 
240042-4 


Figure 2. 82C288 Pin Configuration 
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Table 1. Pin Description 


The following pin function descriptions are for the 82C288 bus controller. 
Name and Function 


SYSTEM CLOCK provides the basic timing control for the 82C288 in an 80286 
microsystem. Its frequency is twice the internal processor clock frequency. The falling 
edge of this input signal establishes when inputs are sampled and command and control 
outputs change. 


BUS CYCLE STATUS starts a bus cycle and, along with M/IO, defines the type of bus 
cycle. These inputs are active LOW. A bus cycle is started when either S1 or SO is 
sampled LOW at the falling edge of CLK. Setup and hold times must be met for proper 
operation. 


Type of Bus Cycle 


Interrupt Acknowledge 
I/O Read 

I/O Write 

None; Idle 

Halt or Shutdown 
Memory Read 
Memory Write 

None; Idle 


MEMORY OR I/O SELECT determines whether the current bus cycle is in the memory 
space or |/O space. When LOW, the current bus cycle is in the |/O space. Setup and 
hold times must be met for proper operation. 


MULTIBUS MODE SELECT determines timing of the command and control outputs. 
When HIGH, the bus controller operates with MULTIBUS | compatible timings. When 
LOW, the bus controller optimizes the command and control output timing for short bus 
cycles. The function of the CEN/AEN input pin is selected by this signal. This input is 
typically a strapping option and not dynamically changed. 


COMMAND ENABLE LATCHED is a bus controller select signal which enables the bus 
controller to respond to the current bus cycle being initiated. CENL is an active HIGH 
input latched internally at the end of each Ts cycle. CENL is used to select the 
appropriate bus controller for each bus cycle in a system where the CPU has more than 
one bus it can use. This input may be connected to Vcc to select this 82C288 for all 
transfers. No control inputs affect CENL. Setup and hold times must be met for proper 
operation. 


COMMAND DELAY allows delaying the start of a command. CMDLY is an active HIGH 
input. If sampled HIGH, the command output is not activated and CMDLY is again 
sampled at the next CLK cycle. When sampled LOW the selected command is enabled. If 
READY is detected LOW before the command output is activated, the 82C288 will 
terminate the bus cycle, even if no command was issued. Setup and hold times must be 
satisfied for proper operation. This input may be connected to GND if no delays are 
required before starting a command. This input has no effect on 82C288 control outputs. 


READY indicates the end of the current bus cycle. READY is an active LOW input. 
MULTIBUS | mode requires at least one wait state to allow the command outputs to 
become active. READY must be LOW during reset, to force the 82C288 into the idle 
state. Setup and hold times must be met for proper operation. The 82C284 drives READY 
LOW during RESET. 
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Table 1. Pin Description (Continued) 


| Symbol | Type | Name and Function 


CEN/AEN COMMAND ENABLE/ADDRESS ENABLE controls the command and DEN 
outputs of the bus controller. CEN/AEN inputs may be asynchronous to CLK. 
Setup and hold times are given to assure a guaranteed response to 
synchronous inputs. This input may be connected to Vcc or GND. 

When MB is HIGH this pin has the AEN function. AEN is an active LOW input 
which indicates that the CPU has been granted use of a shared bus and the 
bus contoller command outputs may exit 3-state OFF and become inactive 
(HIGH). AEN HIGH indicates that the CPU does not have control of the shared 
bus and forces the command outputs into 3-state OFF and DEN inactive 
(LOW). 

When MB is LOW this pin has the CEN function. CENi is an unlatched active 
HIGH input which allows the bus controller to activate its command and DEN 


outputs. With MB LOW, CEN LOW forces the command and DEN outputs 
inactive but does not tristate them. 


ADDRESS LATCH ENABLE controls the address latches used to hold an 
address stable during a bus cycle. This control output is active HIGH. ALE will 
not be issued for the halt bus cycle and is not affected by any of the control 
inputs. 


MASTER CASCADE ENABLE signals that a cascade address from a master 
8259A interrupt controller may be placed onto the CPU address bus for 
latching by the address latches under ALE control. The CPU’s address bus 
may then be used to broadcast the cascade address to slave interrupt 
controllers so only one of them will respond to the interrupt acknowledge cycle. 
This control output is active HIGH. MCE is only active during interrupt 


acknowledge cycles and is not affected by any control input. Using MCE to 
enable cascade address drivers requires latches which save the cascade 
address on the falling edge of ALE. 


DATA ENABLE controls when data transceivers connected to the local data 
bus should be enabled. DEN is an active HIGH control output. DEN is delayed 
for write cycles in the MULTIBUS | mode. 


DATA TRANSMIT/RECEIVE establishes the direction of data flow to or from 
the local data bus. When HIGH, this control output indicates that a write bus 
cycle is being performed. A LOW indicates a read bus cycle. DEN is always 
inactive when DT/R changes states. This output is HIGH when no bus cycle is 
active. DT/R is not affected by any of the control inputs. 


1/O WRITE COMMAND instructs an |/O device to read the data on the data 
bus. This command output is active LOW. The MB and CMDLY inputs control 
when this output becomes active. READY controls when it becomes inactive. 


1/O READ COMMAND instructs an I/O device to place data onto the data bus. 
This command output is active LOW. The MB and CMDLY inputs control when 
this output becomes active. READY controls when it becomes inactive. 


MEMORY WRITE COMMAND instructs a memory device to read the data on 
the data bus. This command output is active LOW. The MB and CMDLY inputs 
control when this output becomes active. READY controls when it becomes 
inactive. 


MEMORY READ COMMAND instructs the memory device to place data onto 
the data bus. This command output is active LOW. The MB and CMDLY inputs 
control when this output becomes active. READY controls when it becomes 
inactive. 
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Table 1. Pin Description (Continued) 


| Symbol | Type | Name and Function 


INTERRUPT ACKNOWLEDGE tells an interrupting device that its interrupt 
request is being acknowledged. This command output is active LOW. The MB 
and CMDLY inputs control when this output becomes active. READY controls 


when it becomes inactive. 


Rr eee System Power: + 5V Power Supply 
a ee System Ground: 0V 


Table 2. Command and Control Outputs for Each Type of Bus Cycle 


Type of M /10 Command DT/R ALE, DEN MCE 
Bus greece meee ieee rie, oe 


Interrupt | Interrupt Acknowledge 


ai SB 


Halt/Shutdown 


Operating Modes 


Two types of buses are supported by the 82C288: 
MULTIBUS | and non-MULTIBUS |. When the MB 
input is strapped HIGH, MULTIBUS | timing is used. 
In MULTIBUS | mode, the 82C288 delays command 
and data activation to meet IEEE-796 requirements 
on address to command active and write data to 
command active setup timing. MULTIBUS | mode 
requires at least one wait state in the bus cycle since 
the command outputs are delayed. The non- 
MULTIBUS | mode does not delay any outputs and 
does not require wait states. The MB input affects 
the timing of the command and DEN outputs. 


Command and Control Outputs 


The type of bus cycle performed by the local bus 
master is encoded in the M/IO, S1, and SO inputs. 
Different command and control outputs are activat- 
ed depending on the type of bus cycle. Table 2 indi- 
cates the cycle decode done by the 82C288 and the 
effect on command, DT/R, ALE, DEN, and MCE out- 
puts. 


Bus cycles come in three forms: read, write, and 
halt. Read bus cycles include memory read, |/O 
read, and interrupt acknowledge. The timing of the 
associated read command outputs (MRDC, IORC, 


a a 
Peneise fo | | ene Fc | 90 [no 


and INTA), control outputs (ALE, DEN, DT/R) and 
control inputs (CEN/AEN, CENL, CMDLY, MB, and 


READY) are identical for all read bus cycles. Read 
cycles differ only in which command output is acti- 
vated. The MCE control output is only asserted dur- 
ing interrupt acknowledge cycles. 


Write bus cycles activate different control and com- 
mand outputs with different timing than read bus cy- 
cles. Memory write and I/O write are write bus cy- 
cles whose timing for command outputs (MWTC and 
lIOWC), control outputs (ALE, DEN, DT/R) and con- 
trol inputs (CEN/AEN, CENL, CMDLY, MB, and 
READY) are identical. They differ only in which com- 
mand output is activated. 


Halt bus cycles are different because no command 
or control output is activated. All control inputs are 
ignored until the next bus cycle is started via S1 and 


Static Operation 


All 820288 circuitry is of static design. Internal regis- 
ters and logic are static and require no refresh as 
with dynamic circuit design. This eliminates the mini- 
mum operating frequency restriction placed on the 
HMOS 82288. The CHMOS III 82C288 can operate 
from DC to the appropriate upper frequency limit. 
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The clock may be stopped in either state (HIGH/ 
LOW) and held there indefinitely. 


Power dissipation is directly related to operating fre- 
quency. As the system frequency is reduced, so is 
the operating power. When the clock is stopped to 
the 82C288, power dissipation is at a minimum. This 
is useful for low-power and portable applications. 


FUNCTIONAL DESCRIPTION 


Introduction 


The 82C288 bus controller is used in 80286 systems 
to provide address latch control, data transceiver 
control, and standard level-type command outputs. 
The command outputs are timed and have sufficient 
drive capabilities for large TTL buses and meet all 
IEEE-796 requirements for MULTIBUS I. A special 
MULTIBUS | mode is provided to satisfy all address/ 
data setup and hold time requirements. Command 
timing may be tailored to special needs via a CMDLY 
input to determine the start of a command and 
READY to determine the end of a command. 


Connection to multiple buses are supported with a 
latched enable input (CENL). An address decoder 
can determine which, if any, bus controller should be 
enabled for the bus cycle. This input is latched to 
allow an address decoder to take full advantage of 
the pipelined timing on the 80286 local bus. 


intel. 


Buses shared by several bus controllers are sup- 
ported. An AEN input prevents the bus controller 
from driving the shared bus command and data 
signals except when enabled by an_ external 
MULTIBUS | type bus arbiter. 


Separate DEN and DT/R outputs control the data 
transceivers for all buses. Bus contention is eliminat- 
ed by disabling DEN before changing DT/R. The 
DEN timing allows sufficient time for tristate bus driv- 
ers to enter 3-state OFF before enabling other driv- 
ers onto the same bus. 


The term CPU refers to any 80286 processor or 
80286 support component which may become an 
80286 local bus master and thereby drive the 
82C288 status inputs. 


Processor Cycle Definition 


Any CPU which drives the local bus uses an internal 
clock which is one half the frequency of the system 
clock (CLK) (see Figure. 3). Knowledge of the phase 
of the local bus master internal clock is required for 
proper operation of the 80286 local bus. The local 
bus master informs the bus controller of its internal 
clock phase when it asserts the status signals. 
Status signals are always asserted beginning in 
Phase 1 of the local bus master’s internal clock. 


ONE PROCESSOR CLOCK CYCLE 


ONE BUS T STATE 


PHASE 1 
OF PROCESSOR 


CLOCK CYCLE 


82C284 
(FOR REFERENCE) 


PHASE 2 
OF PROCESSOR 
CLOCK CYCLE 


240042-5 


Figure 3. CLK Relationship to the Processor Clock and Bus T-States 
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Bus State Definition 


The 82C288 bus controller has three bus states (see 
Figure 4): Idle (T\) Status (Ts) and Command (Tc). 
Each bus state is two CLK cycles long. Bus state 
phases correspond to the internal CPU processor 
clock phases. 


The T; bus state occurs when no bus cycle is cur- 
rently active on the 80286 local bus. This state may 
be repeated indefinitely. When control of the local 
bus is being passed between masters, the bus re- 
mains in the T, state. 


NEW CYCLE 


MINI 


Figure 5. Bus Cycle Definition 
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Bus Cycle Definition 


The S1 and SO inputs signal the start of a bus cycle. 
When either input becomes LOW, a bus cycle is 
started. The Ts bus state is defined to be the two 
CLK cycles during which either Si or SO are active 


_ (see Figure 5). These inputs are sampled by the 


82C288 at every falling edge of CLK. When either 
Si or SO are sampled LOW, the next CLK cycle is 
considered the second phase of the internal CPU 
clock cycle. 


The local bus enters the Tc bus state after the Ts 
state. The shortest bus cycle may have one Ts state 
and one Tc state. Longer bus cycles are formed by 
repeating Tc state. A repeated Tc bus state is called 
a wait state. | 


The READY input determines whether the current 
Tc bus state is to be repeated. The READY input 
has the same timing and effect for all bus cycles. 
READY is sampled at the end of each Tc bus state 
to see if it is active. If sampled HIGH, the Tc bus | 
state is repeated. This is called inserting a wait state. 
The control and command outputs do not change 
during wait states. 


When READY is sampled LOW, the current bus cy- 
cle is terminated. Note that the bus controller may 
enter the Ts bus state directly from Tc if the status 
lines are sampled active at the next falling edge of 
CLK. 


MLL 


240042-7 
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- CENL and CMDLY are described later in the section 
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Figures 6 through 10 show the basic command and 
control output timing for read and write bus cycles. 
Halt bus cycles are not shown since they activate no 
outputs. The basic idle-read-idie and idle-write-idle 
bus cycles are shown. The signal label CMD repre- 
sents the appropriate command output for the bus 
cycle. For Figures 6 through 10, the CMDLY input is 
connected to GND and CENL to Vcc. The effects of 


on control inputs. 


Figures 6, 7 and 8 show non-MULTIBUS | cycles. 
MB is connected to GND while CEN is connected to 
Vcc. Figure 6 shows a read cycle with no wait states 
while Figure 7 shows a write cycle with one wait 
state. The READY input is shown to illustrate how 
wait states are added. 


FEY OOM, 


240042-8 
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Figure 7. Idlie-Write-idie Bus Cycles with MB = 0 
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Bus cycles can occur back to back with no T; bus 
states between Tc and Ts. Back to back cycles do 
not affect the timing of the command and control 
outputs. Command and control outputs always 
reach the states shown for the same clock edge 
(within Ts, Tc or following bus state) of a bus cycle. | 


1ST WRITE CYCLE 2ND WRITE CYCLE 


A special case in control timing occurs for back to 
back write cycles with MB = 0. In this case, DT/R 
and DEN remain HIGH between the bus cycles (see 
Figure 8). The command and ALE output timing 


does not change. READY YY, 


Figures 9 and 10 show a MULTIBUS | cycle with MB 
= 1. AEN and CMDLY are connected to GND. The 
effects of CMDLY and AEN are described later in 
the section on control inputs. Figure 9 shows a read 
cycle with one wait state and Figure 10 shows a 
write cycle with two wait states. The second wait 
state of the write cycle is shown only for example 
purposes and is not required. The READY input is 
shown to illustrate how wait states are added. 


‘pwA 


MM Wi) WM 


Figure 9. idie-Read-idie Bus Cycles with 1 Wait State and with MB = 1 
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Figure 10. idle-Write-idie Bus Cycles with 2 Wait States and with MB = 1 


The MB control input affects the timing of the com- 
mand and DEN outputs. These outputs are automat- 
ically delayed in MULTIBUS | mode to satisfy three 
requirements: 


1) 50 ns minimum setup time for valid address be- 
fore any command output becomes active. 


2) 50 ns minimum setup time for valid write data 
before any write command output becomes ac- 
tive. 

3) 65 ns maximum time from when any read com- 
mand becomes inactive until the slave’s read 
data drivers reach 3-state OFF. 


Three signal transitions are delayed by MB = 1 as 

compared to MB = 0: 

1) The HIGH to LOW transition of the read com- 
mand outputs (IORC, MRDC, and INTA) are de- 
layed one CLK cycle. 

2) The HIGH to LOW transition of the write com- 
mand outputs ((OWC and MWTC) are delayed 
two CLK cycles. 

3) The LOW to HIGH transition of DEN for write cy- 
cles is delayed one CLK cycle. 
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Back to back bus cycles with MB = 1 do not change 
the timing of any of the command or control outputs. 
DEN always becomes inactive between bus cycles 
with MB = 1. 


Except for a halt or shutdown bus cycle, ALE will be 
issued during the second half of Ts for any bus cy- » 
cle. ALE becomes inactive at the end of the Ts to 
allow latching the address to keep it stable during 
the entire bus cycle. The address outputs may 
change during Phase 2 of any Tc bus state. ALE is 
not affected by any control input. 


Figure 11 shows how MCE is timed during interrupt 
acknowledige (INTA) bus cycles. MCE is one CLK 
cycle longer than ALE to hold the cascade address 
from a master 8259A valid after the falling edge of 
ALE. With the exception of the MCE control output, 
an INTA bus cycle is identical in timing to a read bus 
cycle. MCE is not affected by any control input. 
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Figure 11. MCE Operation for an INTA Bus Cycle 


Control Inputs 


The control intputs can alter the basic timing of com- 
mand outputs, allow interfacing to multiple buses, 
and share a bus between different masters. For 
many 80286 systems, each CPU will have more than 
one bus which may be used to perform a bus cycle. 
Normally, a CPU will only have one bus controller 
active for each bus cycle. Some buses may be 
shared by more than one CPU (i.e. MULTIBUS) re- 
quiring only one of them use the bus at a time. 


Systems with multiple and shared buses use two 
control input signals of the 82C288 bus controller, 
CENL and AEN (see Figure 12). CENL enables the 
bus controller to control the current bus cycle. The 
AEN input prevents a bus controller from driving its 
command outputs. AEN HIGH means that another 
bus controller may be driving the shared bus. 


In Figure 12, two buses are shown: a local bus and a 
MULTIBUS |. Only one bus is used for each CPU 
bus cycle. The CENL inputs of the bus controller 
select which bus controller is to perform the bus cy- 
cle. An address decoder determines which bus to 
use for each bus cycle. The 82C288 connected to 
the shared MULTIBUS | must be selected by CENL 
and be given access to the MULTIBUS | by AEN 
before it will begin a MULTIBUS | operation. 


82C288 


CENL must be sampled HIGH at the end of the Ts 
bus state (See waveforms) to enable the bus control- 
ler to activate its command and control outputs. If 
sampled LOW the commands and DEN will not go 
active and DT/R will remain HIGH. The bus control- 
ler will ignore the CMDLY, CEN, and READY inputs 
until another bus cycle is started via S1 and SO. 
Since an address decoder is commonly used to 
identify which bus is required for each bus cycle, 
CENL is latched to avoid the need for latching its 
input. 


The CENL input can affect the DEN control output. 
When MB = 0, DEN normally becomes active dur- 
ing Phase 2 of Ts in write bus cycles. This transition 
occurs before CENL is sampled. If CENL is sampled 
LOW, the DEN output will be forced LOW during Tc 
as shown in the timing waveforms. 


When MB = 1, CEN/AEN becomes AEN. AEN con- 
trols when the bus controller command outputs en- 
ter and exit 3-state OFF. AEN is intended to be driv- 
en by a MULTIBUS | type bus arbiter, which assures 
only one bus controller is driving the shared bus at 
any time. When.AEN makes a LOW to HIGH tran- 
sition, the command outputs immediately enter 
3-state OFF and DEN is forced inactive. An inactive 
DEN should force the local data transceivers con- 
nected to the shared data bus into 3-state OFF (see 
Figure 12). The LOW to HIGH transition of AEN 
should only occur during T; or Ts bus states. 


The HIGH to LOW transition of AEN signals that the 
bus controller may now drive the shared bus com- 
mand signals. Since a bus cycle may be active or be 
in the process of starting, AEN can become active 
during any T-state. AEN LOW immediately allows 
DEN to go to the appropriate state. Three CLK edg- 
es later, the command outputs will go active (see 
timing waveforms). The MULTIBUS | requires this 
delay for the address and data to be valid on the bus 
before the command becomes active. 


When MB = 0, CEN/AEN becomes CEN. CEN is an 
asynchronous input which immediately affects the 
command and DEN outputs. When CEN makes a 
HIGH to LOW transition, the commands and DEN 
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are immediately forced inactive. When CEN makes a 
LOW to HIGH transition, the commands and DEN 
outputs immediately go to the appropriate state (see 
timing waveforms). READY must still become active 
to terminate a bus cycle if CEN remains LOW for a 
selected bus controller (CENL was latched HIGH). 


x1 X2 


SRDY ARDY 
ARDYEN 


SRDYEN 


CLK READY S$1,S0 


LOCAL BUS 


ADDRESS 
DECODER 


ADDRESS 
DATA 


CLK READY Mio 
$1,S0 
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Some memory or I/O systems may require more ad- 
dress or write data setup time to command active 
than provided by the basic command output timing. 
To provide flexible command timing, the CMDLY in- 
put can delay the activation of command outputs. 
The CMDLY input must be sampled LOW to activate 
the command outputs. CMDLY does not affect the 
control outputs ALE, MCE, DEN, and DT/R. 


MULTIBUS 


READY AEN 
MULTIBUS® | 
x TYPE BUS CONTROL 


oi een era Coe: 
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Figure 12. System Use of AEN and CENL 
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CMDLY is first sampled on the falling edge of the 
CLK ending Ts. If sampled HIGH, the command out- 
put is not activated, and CMDLY is again sampled 
on the next falling edge of CLK. Once sampled 
LOW, the proper command output becomes active 
immediately if MB = 0. If MB = 1, the proper com- 
mand goes active no earlier than shown in Figures 9 
and 10. 


READY can terminate a bus cycle before CMDLY 
allows a command to be issued. In this case no 
commands are issued an the bus controller will de- 
activate DEN and DT/R in the same manner as if a 
command had been issued. 


Waveforms Discussion 


The waveforms show the timing relationships of in- 
puts and outputs and do not show all possible tran- 


82C288 


sitions of all signals in all modes. Instead, all signal 
timing relationships are shown via the general cas- 
es. Special cases are shown when needed. The 
waveforms provide some functional descriptions of 
the 82C288; however, most functional descriptions 
are provided in Figures 5 through 11. 


To find the timing specification for a signal transition 
in a particular mode, first look for a special case in 
the waveforms. If no special case applies, then use 
a timing specification for the same or related func- 
tion in another mode. 


2-161 


82C288 


ABSOLUTE MAXIMUM RATINGS* 


Ambient Temperature Under Bias 0°C to + 70°C 


Storage Temperature —65°C to + 150°C 
Voltage on Any Pin with 

Respect to GND =0).5V to 4- 7V 
Power Dissipation 1 Watt 


*WARNING: Stressing the device beyond the “Absolute 
Maximum Ratings” may cause permanent damage. 
These are stress ratings only. Operation beyond the 
“Operating Conditions” is not recommended and ex- 
tended exposure beyond the “Operating Conditions”’ 
may affect device reliability. 


D.C. CHARACTERISTICS Voc = 5V +5%, Toase = 0°C to 85°C* 


|Symbol | —Parameter—— 

Input LOW Voltage 

Input HIGH Voltage 

CLK Input LOW Voltage 

CLK Input HIGH Voltage 
VoL 
VOH 
Nie 
ILo 
Icc 
loc 
C 
Co 


Output LOW Voltage 
Command Outputs 
Control Outputs 


Output HIGH Voltage 
Command Outputs 
Control Outputs 


To, | input apactenoe 
co | inptvOutput Capacitance 


lo. = 32 mA (Note 1) 
lo. = 16 mA (Note 2) 


lon = —5 mA (Note 1) 
lon = —1 mA (Note 1) 
lon = —1 mA (Note 2) 
lon = —0.2 mA (Note 2) 


*Ta is guaranteed from 0°C to + 70°C as long as Tcase is not exceeded. 


NOTES: 


1. Command Outputs are INTA, IORC, IOWC, MRDC and MWRC. 


2. Control Outputs are DT/R, DEN, ALE and MCE. 


3. Tested while outputs are unloaded, and inputs at Vcc or Vss. 
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A.C. CHARACTERISTICS 


Voc = 5V, +5%, Tcase = 0°C to + 85°C.* AC timings are referenced to 0.8V and 2.0V points of signals as 
illustrated in data sheet waveforms, unless otherwise noted. 


Parameter 


: 
uk Fal Time 


CLK Fall Time 
Setup Time 
Hold Time 


CMDLY Hold Time 
AEN Setup Time 


AEN Hold Time 


= 
9 
x 


—* 
— _ 


= 
oO 


4 
7 
11 
12 
13 
14 
15 


— —_, —"s 


ALE, MCE Active (Note 4) 
Delay from CLK 
(Note 4) 


= 
<e) 
wail 
© 


ALE, MCE Inactive 
Delay from CLK 
DEN (Write) 

Inactive from CENL 
DT/R LOW from CLK 
DEN (Read) ActiveR 
from DT/ 

DEN (Read) Inactive 
Dly from CLK 

DT/R HIGH from 
DEN Inactive 


DEN (Write) Active 


oe Gk TP Gh et boot 
ra Tao 


ee Sak Dies wo 


fel ba cll 
ibd all 


16 
17 
19 
21 

4 


oO 


Delay from CLK 
2 DEN (Write) Inactive 3 (Note 4) 
Dly from CLK 


*Ta is guaranteed from 0°C to + 70°C as long as Tcase is not exceeded. 
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A.C. CHARACTERISTICS 


Voc = 5V, 5%, Tcase = 0°C to + 85°C.* AC timings are referenced to 0.8V and 2.0V points of signals as 
illustrated in data sheet waveforms, unless otherwise noted. (Continued) 


DEN Inactive from 
CEN 


DEN Active from 
CEN 


27. |DT/RHIGH from CLK 
(when CEN = LOW) 


3 


0 
31 
Z 


3 


Command Float Time from MB T 


DEN Inactive from MB T 
40 |DEN Active from MB | 
*Ta is guaranteed from 0°C to + 70°C as long as Tcase is not exceeded. 


NOTES: 

3. AEN is an asynchronous input. This specification is for testing purposes only, to assure recognition at a specific CLK 
edge. . 

4. Control output load: Cl = 150 pF. 

5. Command output load: Cl = 300 pF. 

6. Float condition occurs when output current is less than |, 9 in magnitude. 
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Note 7: AC Setup, Hold and Delay Time Measurement—General 


DEVICE 


OUTPUT | 
CL 


Note 8: AC Test Loading on Outputs 


WAVEFORMS 


CLK CHARACTERISTICS 


240042-17 


240042-18 
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WAVEFORMS (Continued) 


STATUS, ALE, MCE, CHARACTERISTICS 


© 
cENL ANN 
© 
CMDLY YY | \\\ 
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READ CYCLE CHARACTERISTICS WITH MB = 0 AND CEN = 1 


OQ AN 
OL 


0 


4 


240042-21 
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WAVEFORMS (Continued) ; 


WRITE CYCLE CHARACTERISTIC WITH MB = 0 AND CEN = 1 


mesa 


i 


@ 
o 
eMoty NOOO lam MA UU 
~ | © 
| Ee 
READY INOMIT” YUM 
Sa RE. WO'0W0KX( WW. 


240042-22 


CEN CHARACTERISTICS WITH MB = 0 
ere Gl ees. 
DEN 
© oe T 
© 


DOT/R a a 


240042-23 
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WAVEFORMS (Continued) 


EN CHARACTERISTICS WITH MB = 1 


CMD —-— —— +. —. 


240042-24 


NOTE: 
1. AEN is an asynchronous input. AEN setup and hold time is specified to guarantee the response shown in the waveforms. 


MB CHARACTERISTICS WITH AEN/CEN = HIGH 


240042-25 
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WAVEFORMS (Continued) 


MB CHARACTERISTICS WITH AEN/CEN = HIGH (Continued) 


240042-26 


FLOATING 


240042-27 


NOTES: 
1. MB is an asynchronous input. MB setup and hold times specified to guarantee the response shown in the waveforms. 
2. If the setup time, t35, is met two clock cycles will occur before CMD becomes active after the falling edge of MB. 


DATA SHEET REVISION REVIEW 


The following list represents key differences between this and the -002 data sheet. Please review this summa- 
ry carefully. 


1. The Iocs specification was changed from 1 mA to 3 mA maximum. 
2. The “PRELIMINARY” .markings have been removed from the data sheet. 
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82C284 
CLOCK GENERATOR AND READY INTERFACE 
FOR 80286 PROCESSORS 
(82C 284-12, 82C284-10, 82C284-8) 

m@ Generates System Clock for 80286 m@ High Speed CHMOS Ill Technology 

Processors m Generates System Reset Output 
m Uses Crystal or TTL Signal for m Available in 18-Lead Cerdip and 20-Pin 

Frequency Source PLCC (Plastic Leaded Chip Carrier) 
m@ Provides Local READY and MULTIBUSI Packages 

READY Synchronization (See Packaging Spec, Order #231369) 


The 82C284 is a clock generator/driver which provides clock signals for 80286 processors and support 
components. It also contains logic to supply READY to the CPU from either asynchronous or synchronous 
sources and synchronous RESET from an asynchronous input. 


RESET 


CLK 


a 
LOGIC ee READY 


PCLK 
GENERATOR PCLK 


210453-1 
Figure 1. 820284 Biock Diagram 


October 1990 
2-170 ¢ Order Number: 210453-011 


in | : : | 82C284 


18-Lead Cerdip 


210453-2 
P.C. Board Views—As viewed from the compo- Component Pad Views—As viewed from under- 
nent side of the P.C. Board. side of component when mounted on the board. 


20 Pin PLCC 


403 SRDYEN 


wo LU! 


ARDYEN 


210453-18 
NOTE: 210453-19 


1. N.C. Signals must not be connected. 
Figure 2. 82C284 Pin Configuration 
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Table 1. Pin Description 


The following pin function descriptions are for the 82C284 clock generator. 


SYSTEM CLOCK is the signal used by the processor and support 
devices which must be synchronous with the processor. The frequency 
of the CLK output has twice the desired internal processor clock 
frequency. CLK can drive both TTL and MOS level inputs. 


FREQUENCY/CRYSTAL SELECT is a strapping option to select the 
source for the CLK output. When F/C is strapped LOW, the internal 
crystal oscillator drives CLK. When F/C is strapped HIGH, the EFI 
input drives the CLK output. 


CRYSTAL IN are the pins to which a parallel resonant fundamental 
mode crystal is attached for the internal oscillator. When F/C is LOW, 
the internal oscillator will drive the CLK output at the crystal frequency. 
The crystal frequency must be twice the desired internal processor 
clock frequency. 


EXTERNAL FREQUENCY IN drives CLK when the F/C input is 
strapped HIGH. The EFI input frequency must be twice the desired 
internal processor clock frequency. 


PERIPHERAL CLOCK is an output which provides a 50% duty cycle 
clock with 1/2 the frequency of CLK. PCLK will be in phase with the 
internal processor clock following the first bus cycle after the 
processor has been reset. 


ASYNCHRONOUS READY ENABLE is an active LOW input which 
qualifies the ARDY input. ARDYEN selects ARDY as the source of 
ready for the current bus cycle. Inputs to ARDYEN may be applied 
asynchronously to CLK. Setup and hold times are given to assure a 
guaranteed response to synchronous inputs. 


ASYNCHRONOUS READY is an active LOW input used to terminate 
the current bus cycle. The ARDY input is qualified by ARDYEN. Inputs 
to ARDY may be applied asynchronously to CLK. Setup and hold times 
are given to assure a guaranteed response to synchronous outputs. 


SYNCHRONOUS READY ENABLE is an active LOW input which 
qualifies SRDY. SRDYEN selects SRDY as the source for READY to 
the CPU for the current bus cycle. Setup and hold times must be 
satisfied for proper operation. 


SYNCHRONOUS READY is an active LOW input used to terminate 
the current bus cycle. The SRDY input is qualified by the SRDYEN 
input. Setup and hold times must be satisfied for proper operation. 


READY is an active LOW output which signals the current bus cycle is 
to be completed. The SRDY, SRDYEN, ARDY, ARDYEN, S1, SO and 
RES inputs control READY as explained later in the READY generator 
section. READY is an open drain output requiring an external pull-up 
resistor. 
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Table 1. Pin Description (Continued) 


The following pin function descriptions are for the 82C284 clock generator. 


S| 
a 


ra aera 


FUNCTIONAL DESCRIPTION 


introduction 


The 82C284 generates the clock, ready, and reset 
signals required for 80286 processors and support 
components. The 82C284 contains a crystal con- 
trolled oscillator, clock generator, peripheral clock 
generator, Multibus ready synchronization logic and 
system reset generation logic. 


Clock Generator 


The CLK output provides the basic timing control for 
an 80286 system. CLK has output characteristics 
sufficient to drive MOS devices. CLK is generated by 
either an internal crystal oscillator or an external 
source as selected by the F/C strapping option. 
When F/C is LOW, the crystal oscillator drives the 
CLK output. When F/C is HIGH, the EFI input drives 
the CLK output. 


The 82C284 provides a second clock output, PCLK, 
for peripheral devices. PCLK is CLK divided by two. 
PCLK has a duty cycle of 50% and MOS output 
drive characteristics. PCLK is normally synchronized 
to the internal processor clock. 


After reset, the PCLK signal may be out of phase 
with the internal processor clock. The $1 and SO 
signals of the first bus cycle are used to synchronize 


STATUS input prepare the 82C284 for a subsequent bus cycle. SO and 
S1 synchronize PCLK to the internal processor clock and control 
READY. These inputs have internal pull-up resistors to keep them 
HIGH if nothing is driving them. Setup and hold times must be satisfied 
for proper operation. 


RESET is an active HIGH output which is derived from the RES input. 
RESET is used to force the system into an initial state. When RESET is 
active, READY will be active (LOW). ? 


RESET IN is an active LOW input which generates the system reset 
signal, RESET. Signals to RES may be applied asynchronously to CLK. 
Setup and hold times are given to assure a guaranteed response to 
synchronous inputs. 


| = Vcc | ————S~Ss«d:Ss SYSTEM POWER: + 5V Power Supply 


PCLK to the internal processor clock. The phase of 
the PCLK output. changes by extending its HIGH 
time beyond one system clock (see waveforms). 
PCLK is forced HIGH whenever either SO or S1 were 
active (LOW) for the two previous CLK cycles. PCLK 
continues to oscillate when both SO and Si are 
HIGH. 


Since the phase of the internal processor clock will 
not change except during reset, the phase of PCLK 
will not change except during the first bus cycle after 
reset. 


Oscillator 


The oscillator circuit of the 82C284 is a linear Pierce 
oscillator which requires an external parallel reso- 
nant, fundamental mode, crystal. The output of the 
oscillator is internally buffered. The crystal frequency 
chosen should be twice the required internal proces- 
sor clock frequency. The crystal should have a typi- 
cal load capacitance of 32 pF. 


X1 and X2 are the oscillator crystal connections. For 
stable operation of the oscillator, two loading capac- 
itors are recommended, as shown in Table 2. The 
sum of the board capacitance and loading capaci- 
tance should equal the values shown. It is advisable 
to limit stray board capacitances (not including the 
effect of the loading capacitors or crystal capaci- 
tance) to less than 10 pF between the X1 and X2 
pins. Decouple Vcc and GND as close to the 
82C284 as possible. 


2-173 


820284 


210453-3 
Figure 3. Recommended Crystal 
and READY Connections 


CLK Termination 


Due to the CLK output having a very fast rise and fall 
time, it is recommended to properly terminate the 
CLK line at frequencies above 10 MHz to avoid sig- 
nal reflections and ringing. Termination is accom- 
plished by inserting a small resistor (typically 100- 
74Q) in series with the output, as shown in Figure 4. 
This is known as series termination. The resistor val- 
ue plus the circuit output impedance should be 
made equal to the impedance of the transmission 
line. 


CLOSELY 
PLACED 
LOADS 


Z 
2 aS 
ZA 
TRANSMISSION 
LINE 


CLOSELY 
PLACED 
LOADS 


210453-15 


Figure 4. Series Termination 


Reset Operation 


The reset logic provides the RESET output to force 
the system into a known, initial state. When the RES 
input is active (LOW), the RESET output becomes 
active (HIGH). RES is synchronized internally at the 
falling edge of CLK before generating the RESET 
output (See waveforms). Synchronization of the RES 
input introduces a one or two CLK delay before af- 
fecting the RESET output. 


At power up, a system does not have a stable Vo> 
and CLK. To prevent spurious activity, RES should 
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be asserted until Ve, and CLK stabilize at their oper- 
ating values. 80286 processors and support compo- 
nents also require their RESET inputs be HIGH a 
minimum of 16 CLK cycles. A network such as 
shown in Figure 5 will keep RES LOW long enough 
to satisfy both needs. 


82C284 


210453-4 


Figure 5. Typical RES Timing Circuit 


Ready Operation 


The 82C284 accepts two ready sources for the sys- 
tem ready signal which terminates the current bus 
cycle. Either a synchronous (SRDY) or asynchro- 
nous ready (ARDY) source may be used. Each ready 
input has an enable (SGRDYEN and ARDYEN) for se- 
lecting the type of ready source required to termi- 
nate the current bus cycle. An address decoder 
would normally select one of the enable inputs. 


READY is enabled (LOW), if either SRDY + 
SRDYEN = O or ARDY + ARDYEN = 0O when 
sampled by the 82C284 READY generation logic. 
READY will remain active for at least two CLK cy- 
cles. 


The READY output has an open-drain driver allow- 
ing other ready circuits to be wire or’ed with it, as 
shown in Figure 3. The READY signal of an 80286 
system requires an external pull-up resistor. To force 
the READY signal inactive (HIGH) at the start of a 
bus cycle, the READY output floats when either S1 
or SO are sampled LOW at the falling edge of CLK. 
Two system clock periods are allowed for the pull-up 
resistor to pull the READY signal to Vi. When RE- 
SET is active, READY is forced active one CLK later 
(see waveforms). 


Figure 6 illustrates the operation of SRDY and 
SRDYEN. These inputs are sampled on the falling 
edge of CLK when S1 and SO are inactive and PCLK 
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is HIGH. READY is forced active when both SRDY and ARDYEN as active, the SRDY and SRDYEN in- 
and SRDYEN are sampled as LOW. puts are ignored. Either ARDY or ARDYEN must be 
HIGH at the end of Ts (see Figure 7). 


Figure 7 shows the operation of ARDY and 

ARDYEN. These inputs are sampled by an internal © READY remains active until either S1 or SO are sam- 
synchronizer at each falling edge of CLK. The output pled LOW, or the ready inputs are sampled as inac- 
of the synchronizer is then sampled when PCLK is tive. 

HIGH. If the synchronizer resolved both the ARDY 


Table 2. 82C284 Crystal Loading Capacitance Values 


Crystal Frequency i —o C2 aa 


1 to 8 MHz 60 pF 40 pF 
8 to 20 MHz 25 pF 15 pF 
Above 20 MHz 15 pF 15 pF 


Capacitance values must include stray board capacitance. — 


RRS SS sa 


210453-5 


Figure 6. Synchronous Ready Operation 
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READY 
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Figure 7. Asynchronous Ready Operation 
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ABSOLUTE MAXIMUM RATINGS* 


Temperature Under Bias ............ 0°C to + 70°C 
Storage Temperature .......... —65°C to + 150°C 
All Output and Supply Voltages ..... —0,5V.te:-F 7V 
All Input Voltages................ —1.0V to +5.5V 
POO? (AORRTRNY sci ou wabhcceceecevonsues 1 Watt 


In ® 


NOTICE: This is a production data sheet. The specifi- 
cations are subject to change without notice. 


*WARNING: Stressing the device beyond the “Absolute 
Maximum Ratings’ may cause permanent damage. 
These are stress ratings only. Operation beyond the 
“Operating Conditions” is not recommended and ex- 
tended exposure beyond the “Operating Conditions” 
may affect device reliability. 


D.C. CHARACTERISTICS Tcoase = 0°C to + 85°C,* Voc = 5V +5% 


NOTE: 


VoH RESET, PCLK Output 
HIGH Voltage 
READY, Output LOW Voltage 


CLK Output LOW Voltage 
CLK Output HIGH Voltage Pe 


He Input Sustaining Current 
on SO and S1 Pins 


ly Input Leakage Current 


loc Power Supply Current 


*Ta is guaranteed from 0°C to + 70°C as long as Tcase is not exceeded. 


ae Sree ee 
permed 


Test Condition 


ee 


pA O<Vin s Veco 
at 25 MHz Output 
im ws CLK Frequency 


pF | Fo =1MHz 


al 
Oo 


1. Status lines SO and S1 excluded because they have internal pull-up resistors. 
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A.C. CHARACTERISTICS Vcc = 5V +5%, Toase = 0°C to +85°C.* 


Timings are referenced to 0.8V and 2.0V points of signals as illustrated in the datasheet waveforms, unless 
otherwise noted. 


82C284 A.C. Timing Parameters 


On aa 
[EFILOWTime | 28 
[EFIHIGH Time | 28 
¢ [OLKPeriod | 62 
[oLKLOWTime | 15 
[LKHIGHTime | 25 
7 [CiKRise Time |__| 70 
[CuK FaitTime | 
[Status Setup Time | 22 


Status Setup Time for 
Status Going Active 


Status Setup Time for 
Status Going Inactive 


10 Status Hold Time 
11 SRDY or SRDYEN 
Setup Time 
12 SRDY or SRDYEN 
Hold Time ~ 
ARDY or ARDYEN 
Setup Time 
ARDY or ARDYEN 
Hold Time 
RESSetupTime | 20 
E I ee 


(Notes 1, 3) 
(Notes 1, 3) 


ta 
Tre Weis 
= 
= 
= 
= 
= 
= 
= 


CLK Delay 
ESET Delay 


(Notes 1, 3) 


t 0.8V (4) 


A 


14 
15 
16 
17 
18 


mF 


19 


at 


CLK LOW Time (Notes 5, 6) 
PCLK HIGH Time (Notes 5, 6) 
*Ta is guaranteed from 0°C to 70°C as long as Tcase is not exceeded. 
NOTES: 


1. CLK loading: C_ = 100 pF. The 82C284’s X1 and X2 inputs are designed primarily for parallel-resonant crystals. Serial- 
resonant crystals may also be used, however, they may oscillate up to 0.01% faster than their nominal frequencies when 
used with the 82C284. For either type of. crystal, capacitive loading should be as specified by Table 2. 

2. With the internal crystal oscillator using recommended crystal and capacitive loading; or with the EFI input meeting speci- 
fications t2 and t3. The recommended crystal loading for CLK frequencies of 8 MHz-—20 MHz are 25 pF from pin X; to 
ground, and 15 pF from pin Xp to ground; for CLK frequencies above 20 MHz 15 pF from pin X; to ground, and 15 pF from 
pin Xp to ground. These recommended values are +5 pF and include all stray capacitance. Decouple Vcc and GND as 
close to the 82C284 as possible. 

3. This is an asynchronous input. This specification is given for testing purposes only, to assure recognition at specific CLK 
edge. 
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NOTES: 
4. Pull-up Resistor values for READY Pin: 


CPU Frequency | 8 MHz | 10 MHz| 12.5 MHz, 


eT 9109 | 7000 6000 
150 pF| 150 pF} 150 pF 
= 7mA | 7mA 9mA 


5. PCLK and RESET loading: C_ = 75 pF. 
6. t4 refers to any allowable CLK period. 
7. When driving the 82C284 with EFI, provide minimum EFI HIGH and LOW times as follows: 


CLK Output Frequency 


Min. Required EFI HIGH Time ewe ns - ns 
Min. Required EFl LOW Time 28 ns 13 ns 


8. When using a crystal (with recommended capacitive loading per Table 2) appropriate for the speed of the 80286, CLK 
output HIGH and LOW times guaranteed to meet the 80286 requirements. 


Reset Drive EFI Drive and CLK Output Measurement s 
Measurement Points Points F/C Drive Points 
2.0 
3.6V 
1.5V 1.0V , 
45 
210453-7 210453-8 210453-9 
Note 9 Note 10 Note 11 


Se % SS 


210453-10 


Note 12. AC Setup, Hold and Delay Time Measurement—General 
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Note 13. AC Test Loading on Outputs 


WAVEFORMS 


CLK as a Function of EFI 
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NOTE: 
The EFI input LOW and HIGH times as shown are required to guarantee the CLK LOW and HIGH times shown. 


RESET and READY Timing as a Function of RES with S1, SO, ARDY + ARDYEN, and SRDY + 
SRDYEN High 


o& 
= I Sy MIN vil UW | I 
oy 
RESET ——— 


| &) 
reoy AW 
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1. This is an asynchronous input. The setup and hold times shown are required to guarantee the response shown. 
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WAVEFORMS (Continued) 


READY and PCLK Timing with RES High 


scm aon det 
me 


ais es A oe a 
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“ NOTE 2 
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NOTES: 

1. This is an asynchronous input. The setup and hold times shown are required to guarantee the response shown. 

2. If SRDY + SRDYEN or ARDY + ARDYEN are active before and/or during the first bus cycle after RESET, READY 
may not be deasserted until after the falling edge of $2 of Ts. 


Icc vs Frequency @ Nominal Conditions lec vs Case Temperature @ 25 MHz 


1 
99 
.96 
95 
94 
93 
2 


Icc, NORMALIZED AT 16 MHz 
lcc, NORMALIZED AT 25°C 


Ow 


18 20 22 24 


CLK OUTPUT FREQUENCY, MH 


‘3 CASE TEMPERATURE, °C 
2310453-16 


2310453-17 
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DATA SHEET REVISION REVIEW 

The following list represents key differences between this and the -010 data sheet. Please review this summa- 


ry carefully. 


1. The DC Characteristics Input Sustaining Current on So and S; pins (lj) has been changed from —30 pA to 
—60 PA. 


2. The AC Timing parameter SRDY or SRDYEN setup time (t;1) has been changed to 17.5 ns for the 10 MHz 
and 17 ns for the 12.5 MHz parts. 
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16-BIT HMOS MICROPROCESSOR 
8086/8086-2/8086-1 


Direct Addressing Capability 1 MByte 


of Memory 


Architecture Designed for Powerful 
Assembly Language and Efficient High 


Level Languages 


14 Word, by 16-Bit Register Set with 


Symmetrical Operations 


24 Operand Addressing Modes 
Bit, Byte, Word, and Block Operations | 


8 and 16-Bit Signed and Unsigned 
Arithmetic in Binary or Decimal 


Including Multiply and Divide 


The Intel 8086 high performance 16-bit CPU is available in three clock rates: 5, 8 and 10 MHz. The CPU is 
implemented in N-Channel, depletion load, silicon gate technology (HMOS-III), and packaged in a 40-pin 
CERDIP or plastic package. The 8086 operates in both single processor and multiple processor configurations 


to achieve high performance levels. 


EXECUTION UNIT BUS INTERFACE UNIT 


RELOCATION 
REGISTER FILE REGISTER FILE 


DATA. 
POINTER. AND 
INDEX REGS 


(8 WORDS) 


16: BIT ALU 
FLAGS 


TEST ———+ 
INT ———e 


NMI 


ROIGTo; ae 


HQLD 
HLDA 


CLK RESET READY MN/MX GND 


Figure 1. 8086 CPU Block Diagram 


September 1990 
Order Number: 231455-005 


INSTRUCTION 


INSTRUCTION 


CONTROL & TIMING 


m Range of Clock Rates: 
5 MHz for 8086, 
8 MHz for 8086-2, 
10 MHz for 8086-1 


= MULTIBUS System Compatible 
Interface 


@ Available in EXPRESS 
— Standard Temperature Range 
— Extended Temperature Range 


m Available in 40-Lead Cerdip and Plastic 
Package 
(See Packaging Spec. Order #231369) 


MAX { MIN } 
MODE | MODE 
GND C1 40D) Voc 
AD14(42 397) AD15 
AD13(43 38 A16/S3 
AD120)4 37 A17/s4 
AD11095 36() A18/S5 
AD10 C6 3512 A19/S6 
AD9 (47 3410) BHE/S7 
AD8 C8 33 [J MN/MX 
AD7 Ci9 3210) RD 


AD6 (310 312) RQ/GTO (HOLD) 
AD5 (411 30[2) RQ/GT1 ~(HLDA) 
AD4 (412 29) LOCK (WR) 

AD3 (413 28) $2 (M/I0) 


Ab2 (414 27051 (DT/R) 
— ADIE15 2601S0 ~~ (DEN) 
ADO (416 25 as0 (ALE) 
NMI (17 24 as1 (INTA) 
INTR 918 232) TEST 
CLK (J19 22 [I READY 
GND (J 20 2117) RESET 
231455-2 
40 Lead 
Figure 2. 8086 Pin 
Configuration 
231455-1 
3-1 
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Table 1. Pin Description 


The following pin function descriptions are for 8086 systems in either minimum or maximum mode. The “Local 
Bus”’ in these descriptions is the direct multiplexed bus interface connection to the 8086 (without regard to 
additional bus buffers). 


AD15-ADp | 2-16, 39 1/0 ADDRESS DATA BUS: These lines constitute the time multiplexed 
memory/IO address (T+), and data (To, T3, Tw, T4) bus. Ag is 
analogous to BHE for the lower byte of the data bus, pins D7—Dp. It is 
LOW during T; when a byte is to be transferred on the lower portion 
of the bus in memory or I/O operations. Eight-bit oriented devices tied 
to the lower half would normally use Ag to condition chip select 
functions. (See BHE.) These lines are active HIGH and float to 3-state 


OFF during interrupt acknowledge and local bus “hold acknowledge’”’. 


ADDRESS/STATUS: During T; these are the four most significant 
address lines for memory operations. During I/O operations these 
lines are LOW. During memory and I/O operations, status information 
is available on these lines during To, T3, Tw, T4. The status of the 
interrupt enable FLAG bit (Ss) is updated at the beginning of each 
CLK cycle. A;7/S4 and A;¢/S3 are encoded as shown. 

This information indicates which relocation register is presently being 
used for data accessing. | 

These lines float to 3-state OFF during local bus “hold acknowledge.” 


0 


0 (LOW) Alternate Data 
0 1 Stack 
1 (HIGH) 0 Code or None 
1 1 Data 
Sg is 0 
(LOW) 


BUS HIGH ENABLE/STATUS: During T; the bus high enable signal 
(BHE) should be used to enable data onto the most significant half of 
the data bus, pins D;5—Dg. Eight-bit oriented devices tied to the upper 
half of the bus would normally use BHE to condition chip select 
functions. BHE is LOW during T; for read, write, and interrupt 
acknowledge cycles when a byte is to be transferred on the high 
portion of the bus. The S7 status information is available during To, 
T3, and T4. The signal is active LOW, and floats to 3-state OFF in 
“hold’’. It is LOW during T, for the first interrupt acknowledge cycle. 


Whole word 
Upper byte from/to odd address 

Lower byte from/to even address 
None 


READ: Read strobe indicates that the processor is performing a 
memory or |/O read cycle, depending on the state of the So pin. This 
signal is used to read devices which reside on the 8086 local bus. RD 
is active LOW during To, T3 and Tw of any read cycle, and is 

guaranteed to remain HIGH in To until the 8086 local bus has floated. 
This signal floats to 3-state OFF in “hold acknowledge’”’. 
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Table 1. Pin Description (Continued) 


Name and Function 


READY: is the acknowledgement from the addressed memory or I/O 
device that it will complete the data transfer. The READY signal from 
memory/IO is synchronized by the 8284A Clock Generator to form 
READY. This signal is active HIGH. The 8086 READY input is not 
synchronized. Correct operation is not guaranteed if the setup and hold 
times are not met. 


INTERRUPT REQUEST: is a level triggered input which is sampled 
during the last clock cycle of each instruction to determine if the 
processor should enter into an interrupt acknowledge operation. A 
subroutine is vectored to via an interrupt vector lookup table located in 
system memory. It can be internally masked by software resetting the 
interrupt enable bit. INTR is internally synchronized. This signal is 
active HIGH. 


TEST: input is examined by the “Wait” instruction. If the TEST input is 
LOW execution continues, otherwise the processor waits in an “‘Idle”’ 
state. This input is synchronized internally during each clock cycle on 
the leading edge of CLK. 


NON-MASKABLE INTERRUPT: an edge triggered input which causes 
a type 2 interrupt. A subroutine is vectored to via an interrupt vector 
lookup table located in system memory. NMI is not maskable internally 
by software. A transition from LOW to HIGH initiates the interrupt at the 
end of the current instruction. This input is internally synchronized. 


RESET: causes the processor to immediately terminate its present 
activity. The signal must be active HIGH for at least four clock cycles. It 
restarts execution, as described in the Instruction Set description, when 
RESET returns LOW. RESET is internally synchronized. 


CLOCK: provides the basic timing for the processor and bus controller. 
It is asymmetric with a 33% duty cycle to provide optimized internal 
timing. 


Vcec: + 5V power supply pin. 


MINIMUM/MAXIMUM: indicates what mode the processor is to 
operate in. The two modes are discussed in the following sections. 


The following pin function descriptions are for the 8086/8288 system in maximum mode (i.e., MN/MX = Vsgs). 
Only the pin functions which are unique to maximum mode are described; all other pin functions are as 
described above. 


STATUS: active during T4, T;, and To and is returned to the passive state 
(1, 1, 1) during T3 or during Tw when READY is HIGH. This status is used 
by the 8288 Bus Controller to generate all memory and I/O access control 


signals. Any change by So, $3, or So during T, is used to indicate the 
beginning of a bus cycle, and the return to the passive state in T3 or Tw is 
used to indicate the end of a bus cycle. 
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Table 1. Pin Description (Continued) 


Name and Function | 


These signals float to 3-state OFF in “hold acknowledge’”’. These status 


lines are encoded as shown. 
Characteristics 


Interrupt Acknowledge 
Read I/O Port 

Write |/O Port 

Halt 

Code Access 

Read Memory 

Write Memory 

Passive 


REQUEST/GRANT: pins are used by other local bus masters to force 
the processor to release the local bus at the end of the processor's 
current bus cycle. Each pin is bidirectional with RQ/GTo having higher 
priority than RQ/GT4. RQ/GT pins have internal pull-up resistors and 
may be left unconnected. The request/grant sequence is as follows 
(see Page 2-24): 

1. A pulse of 1 CLK wide from another local bus master indicates a local 
bus request (“‘hold’’) to the 8086 (pulse 1). 

2. During a T4 or T; clock cycle, a pulse 1 CLK wide from the 8086 to 
the requesting master (pulse 2), indicates that the 8086 has allowed the 
local bus to float and that it will enter the “hold acknowledge” state at 
the next CLK. The CPU’s bus interface unit is disconnected logically 
from the local bus during “hold acknowledge’”’. 

3. A pulse 1 CLK wide from the requesting master indicates to the 8086 
(pulse 3) that the ‘‘hold’’ request is about to end and that the 8086 can 
reclaim the local bus at the next CLK. 

Each master-master exchange of the local bus is a sequence of 3 
pulses. There must be one dead CLK cycle after each bus exchange. 
Pulses are active LOW. | 

If the request is made while the CPU is performing a memory cycle, it 
will release the local bus during T4 of the cycle when all the following 
conditions are met: : 

1. Request occurs on or before To. 

2. Current cycle is not the low byte of a word (on an odd address). 

3. Current cycle is not the first acknowledge of an interrupt acknowledge 
sequence. 

4. A locked instruction is not currently executing. 

If the local bus is idle when the request is made the two possible events 
will follow: 

1. Local bus will be released during the next clock. 

2. Amemory cycle will start within 3 clocks. Now the four rules for a 
currently active memory cycle apply with condition number 1 already 
satisfied. 


(Continued) 


0 (LOW) 


--oe-=50/a 
wonono ola 


LOCK: output indicates that other system bus masters are not to gain 
control of the system bus while LOCK is active LOW. The LOCK signal 
is activated by the “LOCK” prefix instruction and remains active until the 
completion of the next instruction. This signal is active LOW, and floats 
to 3-state OFF in “hold acknowledge”’. 


; ) 
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Table 1. Pin Description (Continued) 


| Symbol_| PinNo. | Type Name and Function 


QS, QSo 24, 25 QUEUE STATUS: The queue status is valid during the CLK cycle after 


which the queue operation is performed. 
QS, and QSo provide status to allow external tracking of the internal 

The following pin function descriptions are for the 8086 in minimum mode (i.e., MN/MX = Vcc). Only the pin 

functions which are unique to minimum mode are described; all other pin functions are as described above. 


8086 instruction queue. 


0 (LOW) No Operation | 
0 First Byte of Op Code from Queue 
1 (HIGH) Empty the Queue 


1 Subsequent Byte from Queue 


STATUS LINE: logically equivalent to So in the maximum mode. It is used to 
distinguish a memory access from an I/O access. M/IO becomes valid in 
the T4 preceding a bus cycle and remains valid until the final T4 of the cycle 
(M = HIGH, lO = LOW). M/IO floats to 3-state OFF in local bus “hold 
acknowledge”. 


WRITE: indicates that the processor is performing a write memory or write 
|/O cycle, depending on the state of the M/IO signal. WR is active for To, T3 
and Tw of any write cycle. It is active LOW, and floats to 3-state OFF in 

local bus “hold acknowledge’”’. 


INTA: is used as a read strobe for interrupt acknowledge cycles. It is active 
LOW during To, T3 and Tw of each interrupt acknowledge cycle. 


ADDRESS LATCH ENABLE: provided by the processor to latch the 
address into the 8282/8283 address latch. It is a HIGH pulse active during 
T; of any bus cycle. Note that ALE is never floated. 


DATA TRANSMIT/RECEIVE: needed in minimum system that desires to 
use an 8286/8287 data bus transceiver. It is used to control the direction of 
data flow through the transceiver. Logically DT/R is equivalent to S; in the 
maximum mode, and its timing is the same as for M/IO. (T = HIGH, R = 
LOW.) This signal floats to 3-state OFF in local bus “‘hold acknowledge”. | 


DATA ENABLE: provided as an output enable for the 8286/8287 ina 
minimum system which uses the transceiver. DEN is active LOW during 
each memory and I/O access and for INTA cycles. For a read or INTA cycle 
itis active from the middle of To until the middle of T4, while for a write cycle 
it is active from the beginning of T» until the middle of T4. DEN floats to 3- 
state OFF in local bus “hold acknowledge’”’. 


HOLD: indicates that another master is requesting a local bus “hold.” To be 
acknowledged, HOLD must be active HIGH. The processor receiving the 
“hold” request will issue HLDA (HIGH) as an acknowledgement in the 
middle of a T4 or T; clock cycle. Simultaneous with the issuance of HLDA 
the processor will float the local bus and control lines. After HOLD is 
detected as being LOW, the processor will LOWer the HLDA, and when the 
processor needs to run another cycle, it will again drive the local bus and 
control lines. Hold acknowledge (HLDA) and HOLD have internal pull-up 
resistors. 

The same rules as for RQ/GT apply regarding when the local bus will be 
released. 

HOLD is not an asynchronous input. External synchronization should be 
provided if the system cannot otherwise guarantee the setup time. 


HOLD, 31, 30 I/O 
HLDA 
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8086 
FUNCTIONAL DESCRIPTION 


General Operation 


The internal functions of the 8086 processor are 
partitioned logically into two processing units. The 
first is the Bus Interface Unit (BIU) and the second is 
the Execution Unit (EU) as shown in the block dia- 
gram of Figure 1. 


These units can interact directly but for the most 
part perform as separate asynchronous operational 
processors. The bus interface unit provides the func- 
tions related to instruction fetching and queuing, op- 
erand fetch and store, and address relocation. This 
unit also provides the basic bus control. The overlap 
of instruction pre-fetching provided by this unit 
serves to increase processor performance through 
improved bus bandwidth utilization. Up to 6 bytes of 
the instruction stream can be queued while waiting 
for decoding and execution. 


The instruction stream queuing mechanism allows 
the BIU to keep the memory utilized very efficiently. 
Whenever there is space for at least 2 bytes in the 
queue, the BIU will attempt a word fetch memory 
cycle. This greatly reduces “dead time’ on the 
memory bus. The queue acts as a First-In-First-Out 
(FIFO) buffer, from which the EU extracts instruction 
bytes as required. If the queue is empty (following a 
branch instruction, for example), the first byte into 
the queue immediately becomes available to the EU. 


The execution unit receives pre-fetched instructions 
from the BIU queue and provides un-relocated oper- 
and addresses to the BIU. Memory operands are 
passed through the BIU for processing by the EU, 
which passes results to the BIU for storage. See the 
Instruction Set description for further register set 
and architectural descriptions. 


MEMORY ORGANIZATION 


The processor provides a 20-bit address to memory 
which locates the byte being referenced. The memo- 
ry is organized as a linear array of up to 1 million 


Memory _| Segment Register Segment 
Reference Need Used Selection Rule 


‘Instructions CODE (CS) Automatic with all instruction prefetch. 
Stack STACK (SS) All stack pushes and pops. Memory references relative to BP 
base register except data references. 
Local Data DATA (DS) Data references when: relative to stack, destination of string 
operation, or explicitly overridden. 
External (Global) Data | EXTRA (ES) Destination of string operations: explicitly selected using a 
segment override. 


wi 

intel. 
bytes, addressed as O0000(H) to FFFFF(H). The 
memory is logically divided into code, data, extra 
data, and stack segments of up to 64K bytes each, 


with each segment falling on 16-byte boundaries. 
(See Figure 3a.) 


All memory references are made relative to base ad- 
dresses contained in high speed segment registers. 
The segment types were chosen based on the ad- 
dressing needs of programs. The segment register 
to be selected is automatically chosen according to 
the rules of the following table. All information in one 
segment type share the same logical attributes (e.g. 
code or data). By structuring memory into relocat- 
able areas of similar characteristics and by automati- 
cally selecting segment registers, programs are 
shorter, faster, and more structured. 


Word (16-bit) operands can be located on even or 
odd address boundaries and are thus not con- 
strained to even boundaries as is the case in many 
16-bit computers. For address and data operands, 
the least significant byte of the word is stored in the 
lower valued address location and the most signifi- 
cant byte in the next higher address location. The 
BIU automatically performs the proper number of 
memory accesses, one if the word operand is on an 
even byte boundary and two if it is on an odd byte 
boundary. Except for the performance penalty, this 
double access is transparent to the software. This 
performance penalty does not occur for instruction 
fetches, only word operands. 


Physically, the memory is organized as a high bank 
(D45-Dg) and a low bank (D7-Dpo) of 512K 8-bit 
bytes addressed in parallel by the processor’s ad- 
dress lines Ayg—-A;. Byte data with even addresses 
is transferred on the D7—Dpo bus lines while odd ad- 
dressed byte data (Ag HIGH) is transferred on the 
D45-Dg bus lines. The processor provides two en- 
able signals, BHE and Ap, to selectively allow read- . 
ing from or writing into either an odd byte location, 
even byte location, or both. The instruction stream is 
fetched from memory as words and is addressed 
internally by the processor to the byte level as nec- 
essary. | 


p— FFFFFH 
| [| CODE SEGMENT 
XXXXOH 


| STACK SEGMENT 
+ OFFSET 


SEGMENT | 
REGISTER FILE 
| DATA SEGMENT 


ig k | EXTRA DATA SEGMENT 
C——S 9000 


H 
231455-3 


Figure 3a. Memory Organization 


In referencing word data the BIU requires one or two 
memory cycles depending on whether or not the 
starting byte of the word is on an even or odd ad- 
dress, respectively. Consequently, in referencing 
word operands performance can be optimized by lo- 
cating data on even address boundaries. This is an 
especially useful technique for using the stack, since 
odd address references to the stack may adversely 
affect the context switching time for interrupt pro- 
cessing or task multiplexing. 


FFFFFH 
RESET BOOTSTRAP 
PROGRAM JUMP 
FFFFOH 


INTERRUPT POINTER 
FOR TYPE 255 


INTERRUPT POINTER 
FOR TYPE 1 


RT 
INTERRUPT POINTER 
FOR TYPE 0 


Figure 3b. Reserved Memory Locations 
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Certain locations in memory are reserved for specific 
CPU operations (see Figure 3b). Locations. from 


8086 


address FFFFOH through FFFFFH are reserved for 
operations including a jump to the initial program 
loading routine. Following RESET, the CPU will al- 
ways begin execution at location FFFFOH where the 
jump must be. Locations O00000H through 003FFH 
are reserved for interrupt operations. Each of the 
256 possible interrupt types has its service routine 
pointed to by a 4-byte pointer element consisting of 
a 16-bit segment address and a 16-bit offset ad- 
dress. The pointer elements are assumed to have 
been stored at the respective places in reserved 
memory prior to occurrence of interrupts. 


MINIMUM AND MAXIMUM MODES | 


The requirements for supporting minimum and maxi- 
mum 8086 systems are sufficiently different that 
they cannot be done efficiently with 40 uniquely de- 
fined pins. Consequently, the 8086 is equipped with 
a strap pin (MN/MX) which defines the system con- 
figuration. The definition of a certain subset of the 
pins changes dependent on the condition of the 
strap pin. When MN/MxX pin is strapped to GND, the 
8086 treats pins 24 through 31 in maximum mode. 
An 8288 bus controller interprets status information 
coded into Sp, Sx, So to generate bus timing and 
control signals compatible with the MULTIBUS ar- 
chitecture. When the MN/MxX pin is strapped to Vcc, 
the 8086 generates bus control signals itself on pins 
24 through 31, as shown in parentheses in Figure 2. 
Examples of minimum mode and maximum mode 
systems are shown in Figure 4. 


BUS OPERATION 


The 8086 has a combined address and data bus 
commonly referred to as a time multiplexed bus. 
This technique provides the most efficient use of 
pins on the processor while permitting the use of a 
standard 40-lead package. This “local bus” can be 
buffered directly and used throughout the system 
with address latching provided on memory and |/O 
modules. In addition, the bus can also be demulti- 
plexed at the processor with a single set of address 
latches if a standard non-multiplexed bus is desired 
for the system. 


Each processor bus cycle consists of at least four 
CLK cycles. These are referred to as T;, To, T3 and 
T4 (see Figure 5). The address is emitted from the 
processor during T; and data transfer occurs on the 
bus during T3 and T4. To is used primarily for chang- 
ing the direction of the bus during read operations. In 
the event that a “NOT READY” indication is given 
by the addressed device, ‘Wait’ states (Tw) are in- 
serted between T3 and Ty. Each inserted ‘Wait’ 
state is of the same duration as a CLK cycle. Periods 
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| GENERATOR | 


shane 


ADDRIDATA 


ah 


TRANSCEIVER | 


aa SIT IAT 


OPTIONAL CSOn CSO, WEOD 
FOR INCREASED 


DATA BUS DRIVE 2142 RAM (4) 2716-2 PROM (2) 


(2) (2) 
1Kx8 1Kx8 


Figure 4a. Minimum Mode 8086 Typical Configuration 
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82868 iORC 
DEN ctrin iOWC 
OT/R AlOwc 
ALE INTA 
WAIT 


STATE 
GENERATOR 


| 
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ADDRIDATA 


TRANSCEIVER 
(2) 


Figure 4b. Maximum Mode 8086 Typical Configuration 
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can occur between 8086 bus cycles. These are re- 
ferred to as “Idle” states (Tj) or inactive CLK cycles. 


The processor uses these cycles for internal house- 
keeping. 


During T; of any bus cycle the ALE (Address Latch 
Enable) signal is emitted (by either the processor or 
the 8288 bus controller, depending on the MN/MX 
strap). At the trailing edge of this pulse, a valid ad- 
dress and certain status information for the cycle 
may be latched. 


Status bits So, S;, and So are used, in maximum 
mode, by the bus controller to identify the type of 
bus transaction according to the following table: 


8086 


$i | So | Characteristics 
0 | 0 | Interrupt Acknowledge 
011 | Readiig 
pti] 0 | wittstOoy ol 
A ee 2 eee 
poe 0. 4 
£URa 


0 (LOW) 
aes 
Bes 
es 


: 
To | wte Data to Memory —_ 


(4 + Nwait) = Toy (4 + Nwair) = Toy 
| T3 | Twait | Ta | Ti | T2 | T3 | 


a 


KW 


WAIT 


<+—_—— MEMORY ACCESS TIME ——> 


GOES INACTIVE IN THE STATE 
JUST PRIOR TO T, 


ee 


TT 


Mt wart 
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Figure 5. Basic System Timing 
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Status bits Sg through S7 are multiplexed with high- 
order address bits and the BHE signal, and are 
therefore valid during To through T4. S3 and Sz, indi- 
cate which segment register (see Instruction Set de- 
scription) was used for this bus cycle in forming the 
address, according to the following table: 


Characteristics 
Alternate Data (extra segment) 


mae 
rt ee 


Ss is a reflection of the PSW interrupt enable bit. 
Sg = 0 and S7 is a spare status bit. 


1/0 ADDRESSING 


In the 8086, I/O operations can address up to a 
maximum of 64K I/O byte registers or 32K I/O word 
registers. The |/O address appears in the same for- 
mat as the memory address on bus lines Ay5—Ap. 
The address lines Ay9—A 46 are zero in I/O opera- 
tions. The variable |/O instructions which use regis- 
ter DX as a pointer have full address capability while 
the direct I/O instructions directly address one or 
two of the 256 I/O byte locations in page 0 of the 
I/O address space. 


I/O ports are addressed in the same manner as 
memory locations. Even addressed bytes are trans- 
ferred on the D7-Do bus lines and odd addressed 
bytes on D;5—Dg. Care must be taken to assure that 
each register within an 8-bit peripheral located on 
the lower portion of the bus be addressed as even. 


External Interface 


PROCESSOR RESET AND INITIALIZATION 


Processor initialization or start up is accomplished 
with activation (HIGH) of the RESET pin. The 8086 
RESET is required to be HIGH for greater than 4 
CLK cycles. The 8086 will terminate operations on 
the high-going edge of RESET and will remain dor- 
mant as long as RESET is HIGH. The low-going 
transition of RESET triggers an internal reset se- 
quence for approximately 10 CLK cycles. After this 
interval the 8086 operates normally beginning with 
the instruction in absolute location FFFFOH (see Fig- 
ure 3b). The details of this operation are specified in 
the Instruction Set description of the MCS-86 Family 
User’s Manual. The RESET input is internally syn- 
chronized to the processor clock. At initialization the 
HIGH-to-LOW transition of RESET must occur no 
sooner than 50 ys after power-up, to allow complete 
initialization of the 8086. 
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NMI asserted prior to the 2nd clock after the end of 
RESET will not be honored. If NMI is asserted after 
that point and during the internal reset sequence, 
the processor may execute one instruction before 
responding to the interrupt. A hold request active 


immediately after RESET will be honored before the 
first instruction fetch. 


All 3-state outputs float to 3-state OFF during 
RESET. Status is active in the idle state for the first 
clock after RESET becomes active and then floats 
to 3-state OFF. ALE and HLDA are driven low. 


INTERRUPT OPERATIONS 


Interrupt operations fall into two classes; software or 
hardware initiated. The software initiated interrupts 
and software aspects of hardware interrupts are 
specified in the Instruction Set description. Hard- 
ware interrupts can be classified as non-maskable or 
maskable. 


Interrupts result in a transfer of control to a new pro- 
gram location. A 256-element table containing ad- 
dress pointers to the interrupt service program loca- 
tions resides in absolute locations 0 through 3FFH 
(see Figure 3b), which are reserved for this purpose. 
Each .element in the table is 4 bytes in size and 
corresponds to an interrupt “type’’. An interrupting 
device supplies an 8-bit type number, during the in- 
terrupt acknowledge sequence, which is used to 
“vector” through the appropriate element to the new 
interrupt. service program location. 


NON-MASKABLE INTERRUPT (NMI) 


The processor provides a single non-maskable inter- 
rupt pin (NMI) which has higher priority than the 
maskable interrupt request pin (INTR). A typical use 
would be to activate a power failure routine. The 
NMI is edge-triggered on a LOW-to-HIGH transition. 
The activation of this pin causes a type 2 interrupt. 
(See Instruction Set description.) 


NMI is required to have a duration in the HIGH state 
of greater than two CLK cycles, but is not required to 
be synchronized to the clock. Any high-going tran- 
sition of NMI is latched on-chip and will be serviced 
at the end of the current instruction or between 
whole moves of a block-type instruction. Worst case 
response to NMI would be for multiply, divide, and 
variable shift instructions. There is no specification 
on the occurrence of the low-going edge; it may oc- 
cur before, during, or after the servicing of NMI. An- 
other high-going edge triggers another response if it 
occurs after the start of the NMI procedure. The sig- 
nal must be free of logical spikes in general and be 
free of bounces on the low-going edge to avoid trig- 
gering extraneous responses. 


a , 
intel. 
MASKABLE INTERRUPT (INTR) 


The 8086 provides a single interrupt request input 
(INTR) which can be masked internally by software 
with the resetting of the interrupt enable FLAG 
status bit. The interrupt request signal is level trig- 
gered. It is internally synchronized during each clock 
cycle on the high-going edge of CLK. To be re- 
sponded to, INTR must be present (HIGH) during 
the clock period preceding the end of the current 
instruction or the end of a whole move for a block- 
type instruction. During the interrupt response se- 
quence further interrupts are disabled. The enable 
bit is reset as part of the response to any interrupt 
(INTR, NMI, software interrupt or single-step), al- 
though the FLAGS register which is automatically 
pushed onto the stack reflects the state of the proc- 
essor prior to the interrupt. Until the old FLAGS reg- 
ister is restored the enable bit will be zero unless 
specifically set by an instruction. 


During the response sequence (Figure 6) the proc- 
essor executes two successive (back-to-back) inter- 
rupt acknowledge cycles. The 8086 emits the LOCK 
signal from To of the first bus cycle until To of the 
second. A local bus “hold” request will not be hon- 
ored until the end of the second bus cycle. In the 
second bus cycle a byte is fetched from the external 
interrupt system (e.g., 8259A PIC) which identifies 
the source (type) of the interrupt. This byte is multi- 
plied by four and used as a pointer into the interrupt 
vector lookup table. An INTR signal left HIGH will be 
continually responded to within the limitations of the 
enable bit and sample period. The INTERRUPT RE- 
TURN instruction includes a FLAGS pop which re- 
turns the status of the original interrupt enable bit 
when it restores the FLAGS. 


8086 


HALT 


When a software “HALT” instruction is executed the 
processor indicates that it is entering the “HALT” 
state in one of two ways depending upon which 
mode is strapped. In minimum mode, the processor 
issues one ALE with no qualifying bus control sig- 
nals. In maximum mode, the processor issues ap- 
propriate HALT status on So, S;, and So; and the 
8288 bus controller issues one ALE. The 8086 will 
not leave the “HALT” state when a local bus “hold”’ 
is entered while in “HALT’’. In this case, the proces- 
sor reissues the HALT indicator. An interrupt request 
or RESET will force the 8086 out of the “HALT” 
state. 


READ/MODIFY/WRITE (SEMAPHORE) 
OPERATIONS VIA LOCK 


The LOCK status information is provided by the 
processor when directly consecutive bus cycles are 
required during the execution of an_ instruc- 
tion. This provides the processor with the capability 
of performing read/modify/write operations on 
memory (via the Exchange Register With Memory 
instruction, for example) without the possibility of an- 
other system bus master receiving intervening mem- 
ory cycles. This is useful in multi-processor system 
configurations to accomplish “test and set lock” op- 
erations. The LOCK signal is activated (forced LOW) 


~ in the clock cycle following the one in which the soft- 


ware ‘‘LOCK” prefix instruction is decoded by the 
EU. It is deactivated at the end of the last bus cycle 
of the instruction following the “LOCK” prefix in- 
struction. While LOCK is active a request on a RQ/ 
GT pin will be recorded and then honored at the end 
of the LOCK. 


TYPE VECTOR 


FLOAT 
ADjg-AD\< 
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Figure 6. Interrupt Acknowledge Sequence 
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EXTERNAL SYNCHRONIZATION VIA TEST 


As an alternative to the interrupts and general |/O 
capabilities, the 8086 provides a single software- 
testable input known as the TEST signal. At any time 
the program may execute a WAIT instruction. If at 
that time the TEST signal is inactive (HIGH), pro- 
gram execution becomes suspended while the proc- 
essor waits for TEST to become active. It must 
remain active for at least 5 CLK cycles. The WAIT 
instruction is re-executed repeatedly until that time. 
This activity does not consume bus cycles. The 
processor remains in an idle state while waiting. All 
8086 drivers go to 3-state OFF if bus “Hold” is en- 
tered. If interrupts are enabled, they may occur while 
the processor is waiting. When this occurs the proc- 
essor fetches the WAIT instruction one extra time, 
processes the interrupt, and then re-fetches and re- 
executes the WAIT instruction upon returning from 
the interrupt. 


Basic System Timing 


Typical system configurations for the processor op- 
erating in minimum mode and in maximum mode are 
shown in Figures 4a_and 4b, respectively. In mini- 
mum mode, the MN/MxX pin is strapped to Voc and 
the processor emits bus control signals in a manner 
similar to the 8085. In maximum mode, the MN/MX 
pin is strapped to Vss and the processor emits cod- 
ed status information which the 8288 bus controller 
uses to generate MULTIBUS compatible bus control 
signals. Figure 5 illustrates the signal timing relation- 
ships. 


ACCUMULATOR 
BASE 

COUNT 

DATA 


STACK POINTER 
BASE POINTER 
SOURCE INDEX 
DESTINATION INDEX 


INSTRUCTION POINTER 
STATUS FLAGS 


CODE SEGMENT 
DATA SEGMENT 
STACK SEGMENT 
EXTRA SEGMENT 
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SYSTEM TIMING—MINIMUM SYSTEM 


The read cycle begins in T; with the assertion of the 
Address Latch Enable (ALE) signal. The trailing (low- 
going) edge of this signal is used to latch the ad- 
dress information, which is valid on the local bus at 
this time, into the address latch. The BHE and Ao 
signals address the low, high, or both bytes. From T, 
to T4 the M/IO signal indicates a memory or |/O 
operation. At To the address is removed from the 
local bus and the bus goes to a high impedance 
state. The read control signal is also asserted at To. 
The read (RD) signal causes the addressed device 
to enable its data bus drivers to the local bus. Some 
time later valid data will be available on the bus and 
the addressed device will drive the READY line 
HIGH. When the processor returns the read signal to 
a HIGH level, the addressed device will again 3- 
state its bus drivers. If a transceiver is required to 
buffer the 8086 local bus, signals DT/R and DEN 
are provided by the 8086. 


A write cycle also begins with the assertion of ALE 
and the emission of the address. The M/IO signal is 
again asserted to indicate a memory or |/O write 
operation. In the To immediately following the ad- 
dress emission the processor emits the data to be 
written into the addressed location. This data re- 
mains valid until the middle of T4. During To, T3, and 
Tw the processor asserts the write control signal. 
The write (WR) signal becomes active at the begin- 
ning of To as opposed to the read which is delayed 
somewhat into To to provide time for the bus to float. 


The BHE and Ap signals are used to select the prop- 
er byte(s) of the memory/IO word to be read or writ- 
ten according to the following table: 


| BHE | Ao | Characteristics 
0 0 


Whole word 
0 1 Upper byte from/to 
odd address 
Lower byte from/to 
even address 
None 


1 0 


1 1 


I/O ports are addressed in the same manner as 
memory location. Even addressed bytes are trans- 
ferred on the D7—Do bus lines and odd addressed 
bytes on Di5-Dg. 


The basic difference between the interrupt acknowl- 
edge cycle and a read cycle is that the interrupt ac- 
knowledge signal (INTA) is asserted in place of the 
read (RD) signal and the address bus is floated. 
(See Figure 6.) In the second of two successive 
INTA cycles, a byte of information is read from bus 


| 

intel. 

lines D7—Do as supplied by the inerrupt system logic 
(i.e., 8259A Priority Interrupt Controller). This byte 
identifies the source (type) of the interrupt. It is multi- 


plied by four and used as a pointer into an interrupt 
vector lookup table, as described earlier. 


BUS TIMING—MEDIUM SIZE SYSTEMS 


For medium size systems the MN/MX pin is con- 
nected to Vss and the 8288 Bus Controller is added 
to the system as well as a latch for latching the sys- 
tem address, and a transceiver to allow for bus load- 
ing greater than the 8086 is capable of handling. 
Signals ALE, DEN, and DT/R are generated by the 
8288 instead of the processor in this configuration 
although their timing remains relatively the same. 
The 8086 status outputs (So, S;, and So) provide 
type-of-cycle information and become 8288 inputs. 
This bus cycle information specifies read (code, 
data, or !/O), write (data or 1!/O), interrupt 


8086 


acknowledge, or software halt. The 8288 thus issues 
control signals specifying memory read or write, I/O 
read or write, or interrupt acknowledge. The 8288 
provides two types of write strobes, normal and ad- 
vanced, to be applied as required. The normal write 
strobes have data valid at the leading edge of write. 
The advanced write strobes have the same timing 
as read strobes, and hence data isn’t valid at the 
leading edge of write. The transceiver receives the 
usual DIR and G inputs from the 8288’s DT/R and 
DEN. 


The pointer into the interrupt vector table, which is 
passed during the second INTA cycle, can derive 
from an 8259A located on either the local bus or the 
system bus. If the master 8259A Priority Interrupt 
Controller is positioned on the local bus, a TTL gate 
is required to disable the transceiver when reading 
from the master 8259A during the interrupt acknowl- 
edge sequence and software “‘poll’’. 
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ABSOLUTE MAXIMUM RATINGS* 


Ambient Temperature Under Bias ...... 0°C to 70°C 
Storage Temperature .......... —65°C' to + 150°C 
Voltage on Any Pin with 

Respect to Ground.............. —1.0V to +7V 
Power DISSIDANON ses caw h hc tue kevaee then 2.5W 


intel. 


NOTICE: This is a production data sheet. The specifi- 
cations are subject to change without notice. 


*WARNING: Stressing the device beyond the “Absolute 
Maximum Ratings” may cause permanent damage. 
These are stress ratings only. Operation beyond the 
“Operating Conditions” is not recommended and ex- 
tended exposure beyond the “Operating Conditions”’ 
may affect device reliability. 


D.C. CHARACTERISTICS (8086: Ta, = 0°C to 70°C, Voc = 5V +10%) 
(8086-1: Ta = 0°C to 70°C, Voc = 5V +5%) 
(8086-2: Ta = 0°C to 70°C, Voc = 5V +5%) 


Power Supply Current: 8086 
8086-1 | 
8086-2 


Input Leakage Current 


Output Leakage Current 
Clock Input Low Voltage 
Clock Input High Voltage 


Capacitance of Input Buffer 


(All input except 
ADo-AD15, RQ/GT) 


Capacitance of I/O Buffer 
(ADo-AD15, RQ/GT) 


| Symbol _ 


NOTES: 


[Units 
en ae ae ee 


Test Conditions 


(Notes 1, 2) 
lo. = 2.5mA 
lon = — 400 pA 


1. Vi, tested with MN/MX Pin = OV. Vi tested with MN/MX Pin = 5V. MN/MX Pin is a Strap Pin. 


2. Not applicable to RQ/GTO and RQ/GT1 (Pins 30 and 31). 


3. HOLD and HLDA |; min = 30 pA, max = 500 pA. 
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A.C. CHARACTERISTICS (8086: Ta = 0°C to 70°C, Voc = 5V + 10%) 
(8086-1: Ta, = 0°C to 70°C, Voc = 5V + 5%) 


(8086-2: Ta = 0°C to 70°C, Voc = 5V + 5%) 
MINIMUM COMPLEXITY SYSTEM TIMING REQUIREMENTS 


Max | 
500 | ns 
DatainHoldTime | 1 


TRIVCL RDY Setup Time 
into 8284A (See 
Notes 1, 2) 

TCLR1X RDY Hold Time 
into 8284A (See 
Notes 1, 2) 

TRYHCH READY Setup 11 
Time into 8086 

TCHRYX READY Hold Time 
into 8086 

TRYLCL READY Inactive to 
CLK (See Note 3) 

THVCH HOLD Setup Time 

TINVCH INTR, NMI, TEST 
Setup Time (See 
Note 2) 

TILIH Input Rise Time 
(Except CLK) 

TIHIL Input Fall Time 
(Except CLK) 


| 10 | ns_| From 1.0vt03.5V_ 
| 10 | ns_| From3.5V to 1.0V_ 
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A.C. CHARACTERISTICS (Continued) 


TIMING RESPONSES 


CLAX |Address Hold Time 


TCLAX 
Delay 


Max 

50° 

= = 

ALE ActiveDelay | | 80 

85 | 
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110 50 
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110 foe 
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*C_ = 20-100 pF 
for all 8086 


ee a 
HDX | Data Hold Time TCLCH-30 TCLCH-30 
After WR 
i 10 10 70 
Delay 1 
i 10 
Delay 2 


i 10 110 
Delay 


a 
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TCLCH-25 addition to 8086 
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NOTES: 

1. Signal at 8284A shown for reference only. 

2. Setup requirement for asynchronous signal only to guarantee recognition at next CLK. 
3. Applies only to T2 state. (8 ns into T3). 
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A.C. TESTING INPUT, OUTPUT WAVEFORM A.C. TESTING LOAD CIRCUIT 


DEVICE 
UNDER 
TEST 


1.5 <—— TEST POINTS ——® 1.5 
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A.C. Testing: Inputs are driven at 2.4V for a Logic “1” and 0.45V 
for a Logic “0”. Timing measurements are made at 1.5V for both 
a Logic “1” and “0”. 
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C, Includes Jig Capacitance 


WAVEFORMS 


MINIMUM MODE 


T2 T3 Tw 


TCHICH2 . TCL2CL1 
Vcn 


CLK (8284A Output) ’ 
TCHCTV 


BHE/S7, A1e/Se-Are/S3 BHE, A19-Aie 


RDY (8284A Input) 
SEE NOTE 4 


READY (8086 Input) | 


| 


i DATA IN 


TRHAV 


means me ] oe 


(NOTE 1) 
(WR, INTA = Von) 


TCVCTV—> 
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8086 intel ‘ 
WAVEFORMS (Continued) 


MINIMUM MODE (Continued) 


Ty T2 T3 Tw 
TCLCL TCHICH2 TCL2CL1 


CLK (6284A Output) 


BHE/S7, Arg/Se-Are/Ss 


WRITE CYCLE 
WOTE 1) 


RO 
eat 


TCHCTV TCHCTV 
INTA CYCLE ; Li 
(NOTES 1 & 3) ? 
RD, WR = Von ra 
en i Ee 


INVALID ADORESS SOFTWARE HALT 


231455-14 
SOFTWARE HALT— 
RD, WR, INTA = Von 
DT/R = INDETERMINATE 


NOTES: 

1. All signals switch between Voy and Vo, unless otherwise specified. 

2. RDY is sampled near the end of To, T3, Tw to determine if Tw machines states are to be inserted. 

3. Two INTA cycles run back-to-back. The 8086 LOCAL ADDR/DATA BUS is floating during both INTA cycles. Control 
signals shown for second INTA cycle. 

4. Signals at 8284A are shown for reference only. 

5. All timing measurements are made at 1.5V unless otherwise noted. 


3-18 


r ntel ; | 8086 


A.C. CHARACTERISTICS — 


MAX MODE SYSTEM (USING 8288 BUS CONTROLLER) 
TIMING REQUIREMENTS 


Parameter Test 
in [wax | in [ Max | win [ Max |” | Conettons 


Trerct [eux oyae Perea | 200 | s00 | 100-| 500 | 125] 500 | ne 

Trouch [ouctowtine [vet [ss | [os] [re 

rronct | cuxtigntine | 66 | [se TT |] na 

Tromona [cuxrisetine | [0] [0 | [0 | | Fomtavesav 
Proc. | ouxFantine | [10 | Pao | [10 | ne From vio 10 
Trovot | Oeanseuptme [oot ts] [=] | 

Data inHoldTime | 10 fA 


TRIVCL RDY Setup Time 
into 8284A 
(Notes 1, 2) 

TCLR1X RDY Hold Time 
into 8284A 
(Notes 1, 2) 

TRYHCH | READY Setup 1 
Time into 8086 

TCHRYX READY Hold Time 
into 8086 

TRYLCL READY Inactive to = 
CLK (Note 4) 


TINVCH Setup Time for 
, Recognition (INTR, 

NMI, TEST) 
(Note 2) 

TGVCH RQ/GT Setup Time 
(Note 5) 

TCHGX RQ Hold Time into 4 
8086 

TILIH Input Rise Time 
(Except CLK) 

TIHIL Input Fall Time 
(Except CLK) 


co 


2) 


ili 
© 
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A.C. CHARACTERISTICS (Continued) 


TIMING RESPONSES 


| rene a 
TCLML Command Active Poa 


oJ 
o 
Co 
oO 


Test 
Conditions 


Delay (See Note 1) 


TCLMH Command Inactive 
Delay (See Note 1) 


TRYHSH | READY Active to 
Status Passive (See 
Note 3) 


TCHSV Status Active Delay 


TCLSH Status Inactive 
Delay 

TCLAV Address Valid Delay 

TCLAX Address Hold Time 


TCLAZ | Address Float Delay 


TSVLH Status Valid to ALE 
High (See Note 1) 


TSVMCH | Status Valid to 
MCE High (See 
Note 1) 


10 
10 
+ 
TCLLH CLK Low to ALE 
Valid (See Note 1) 
TCLMCH | CLK Low to MCE 
High (See Note 1) 
TCHLL ALE Inactive Delay 
(See Note 1) 
TCLMCL | MCE Inactive Delay 
(See Note 1) 


—_ 
— 
i) 


= 
=n 
© 


10 


p10 | 40 | TcLax| 50 | ns 
15 15 


Ci = 20-100 pF 
for all 8086 
Outputs (In 
addition to 8086 
self-load) 


oaks 
ol 
aks 
on 


TCLDV Data Valid Delay 
TCHDX Data Hold Time 


TCVNV Control Active 
Delay (See Note 1) 
TCVNX Control Inactive 
Delay (See Note 1) 
TAZRL Address Float to 
READ Active 
TCLRL RD Active Delay 
TCLRH RD Inactive Delay 
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® 
A.C. CHARACTERISTICS (Continued) 


TIMING RESPONSES “sg A Se 


Parameter 6066-1 og Test 
oe ea 
TRHAV {RD Inactive to Next} TCLCL-45 TCLCL-35 —_sen_|te 
Address Active 


TCHDTL | Direction Control C_ = 20-100 pF 
Active Delay for all 8086 
(Note 1) Outputs (In 
addition to 8086 
self-load) 


TCHDTH| Direction Control 
Inactive Delay 
(Note y 


ToLat [at Acivedeay | 0 [es] 0 |[ae| 0 | 0] vs 
reach [etimeweoony | 0 es{ 0 [a5] 0 [| ne 
TALAH [ROWah —__[aroucL7e| _[areuciaol _[aroucLeo] | ne 
reo [oupureotes | [an] [oo| [oo | ma [roma 
TOHOL [OutputFal Time | [| | 2 | 12 1s [Fromzovtoosv 


NOTES: 

1. Signal at 8284A or 8288 shown for reference only. 

2. Setup requirement for asynchronous signal only to guarantee recognition at next CLK. 
3. Applies only to T3 and wait states. 

4. Applies only to T2 state (8 ns into T3). 
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WAVEFORMS 


MAXIMUM MODE 


Ta T3 
TCL2CL1 Tw 


: File BE se 
§2,51,5o (EXCEPT HALT) Ne NOTE 8) 
| 


a 
Fi ts DX teers X [ [tse [1 


ALE (6288 OUTPUT) 


RDY (8284A INPUT) ROMA 


4 
READY (8086 INPUT) | in TCHRYX 
—— 
| \ 
<——— 


READ CYCLE . rraae 
ae 


TCHDTL 


OT/R 


8288 OUTPUTS 


SEE NOTES 5,6 . sais 


TCVNX —> 


231455-15 


3.29 


intel i | 8086 
WAVEFORMS (Continued) 


MAXIMUM MODE (Continued) 


af) 


I es 
§53,5;.59 (EXCEPT HALT) eae eek cee eee , 


WRITE CYCLE a oe TCHOX—> 
————. 


ToOvNx—= —- 


a TCLMH 
8288 OUTPUTS 
SEE NOTES 5,6 | AMWC OR AlOWC 


-— TCLMH 


MWTC OR jOWC 
INTA CYCLE 
AD15-ADo ra G.-5 FO 


(SEE NOTES 3 & 4) CASCADE ame FLOAT 
TCLDX 


POINTER ae 
Bane ee FLOAT 
TCLMCH-> 
en INTA 
NOTES 5,6 
er ee ei 


AD15-ADo 


+ TCLMH 


DEN 


SOFTWARE HALT — TCVNX —> 
(DEN = Vo. ;AD,MADC,IORC, MWTC,AMWC,IOWC,AIOWC,INTA, = Von) 


AD i5-ADo INVALID ADDRESS 
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NOTES: 

1. All signals switch between Voy and Vo, unless otherwise specified. 

2. RDY is sampled near the end of To, T3, Tw to determine if Tw machines states are to be inserted. 

3. Cascade address is valid between first and second INTA cycle. 

4. Two INTA cycles run back-to-back. The 8086 LOCAL ADDR/DATA BUS is floating during both INTA cycles. Control for 
pointer address is shown for second INTA cycle. 

5. Signals at 8284A or 8288 are shown for reference only. 

6. The issuance of the 8288 command and control signals (MRDC, MWTC, AMWC, IORC, IOWC, AIOWC, INTA and DEN) 
lags the active high 8288 CEN. 

7. All timing measurements are made at 1.5V unless otherwise noted. 

8. Status inactive in state just prior to T4. 
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WAVEFORMS (Continued) 


ASYNCHRONOUS SIGNAL RECOGNITION 


TINVCH (see note 1) 
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NOTE: 
1. Setup requirements for asynchronous signals only to guarantee recognition at next CLK. 


BUS LOCK SIGNAL TIMING (MAXIMUM MODE 
ONLY) RESET TIMING 


Any CLK Cycle aa 


231455-18 24 CLK CYCLES 
231455-19 


j-—— Any CLK Cycle —e= 


j-——TGVCH —_—_————— TCLCL 
TCHGX—= — -—TCLGH 
PULSE 1 PULSE 3 
COPROCESSOR PULSE 2 COPROCESSOR 
Fret 8086 GT RELEASE 


Previous grant 


AD15-ADo ss 


A -Aie/S 
gts a” 3 8086 COPROCESSOR 
AD, COCK 


a 


BHE/s7 (SEE NOTE 1) 


231455-20 


NOTE: 
The coprocessor may not drive the buses outside the region shown without risking contention. 
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WAVEFORMS (Continued) 


HOLD/HOLD ACKNOWLEDGE TIMING (MINIMUM MODE ONLY) 


o——2 1 CLK CYCLE— —10OR 2 CYCLES 


CLK 


—_ >— THVCH ed -—THVCH 
HOLD 


—_ TCLAZ — 
er ra rane nei tnammn 
AD15-ADo, 8086 COPROCESSOR 
Arg/Se-Are/Ss, 
(heen sensu neem ar ans-enmtsecanemna amend 


RD. 
one 
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Table 2. Instruction Set Summary 


Instruction Code 


DATA TRANSFER 
MOV = Move: 76543210 76543210 76543210 76543210 


Register/Memory to/from Register 


immediate to Register/Memory mod000r/m data data ifw = 1 
Immediate to Register data ifw = 1 
Memory to Accumulator addr-low addr-high 


Accumulator to Memory addr-low addr-high 


Register/Memory to Segment Register 


Segment Register to Register/Memory 10001100 mod 0 reg r/m 


PUSH = Push: 
Register/Memory TEL T41 mod 110r/m 
Register 01010reg 


Segment Register 000reg110 


POP = Pop: 


Register/Memory 10001111 mod000Or/m — 


Register 01011reg 


Segment Register 000reg111 


XCHG = Exchange: 
Register/Memory with Register 1000011w mod reg r/m 


Register with Accumulator 10010reg 


IN = Input from: 
Fixed Port 1110010w 


a 


Variable Port 1110110w 


OUT = Output to: 
Fixed Port 1110011Ww 


Variable Port 11407114 
XLAT = Translate Byte to AL 141010711 
LEA = Load EA to Register 10001101 mod reg r/m 


LDS = Load Pointer to DS 11000101 mod reg r/m 
LES = Load Pointer to ES 11000100 
LAHF = Load AH with Flags 10079111 


mod reg r/m 


SAHF = Store AH into Flags 10011110 
PUSHF = Push Flags 10011100 
POPF = Pop Flags 
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Table 2. Instruction Set Summary (Continued) 


Instruction Code 


ARITHMETIC 76543210 76543210 76543210 76543210 
ADD = Add: 


Reg./Memory with Register to Either mod reg r/m 

Immediate to Register/Memory mod 0.0 0r/m data 
Immediate to Accumulator data 

ADC = Add with Carry: 

Reg./Memory with Register to Either 


Immediate to Register/Memory data data if s: w = 01 
Immediate to Accumulator data if w = 1 


INC = Increment: 
Register/Memory mod000r/m 
Register 01000reg 

AAA = ASCII Adjust for Add 
BAA = Decimal Adjust for Add 00100111 
SUB = Subtract: 

Reg./Memory and Register to Either 001010dw 


mod reg r/m 
mod 1011r/m 


Q 
© 
rx 


data ifs w = 01 


Immediate from Register/Memory 100000sw 


immediate from Accumulator 0010110wWw da data if w = 1 


SSB = Subtract with Borrow 
Reg./Memory and Register to Either 000110dw mod reg r/m 


immediate from Register/Memory 100000sw mod 0111r/m 


data ifs w = 01 


Immediate from Accumulator data data ifw = 1 


DEC = Decrement: 
Register/memory 1111111w mod 0011r/m 


Register 01001 reg 

NEG = Change sign 1.170110 mod011 r/m 
CMP = Compare: 
Register/Memory and Register 001110dw mod reg r/m 


a 
sy 


Immediate with Register/Memory 100000sw mod 1 111r/m a data ifsw = 01 


Immediate with Accumulator 0011110w data 
AAS = ASCII Adjust for Subtract 
DAS = Decimal Adjust for Subtract 
MUL = Multiply (Unsigned) 

IMUL = Integer Multiply (Signed) 1111011w 
AAM = ASCII Adjust for Multiply 11010100 
DIV = Divide (Unsigned) 
IDIV = Integer Divide (Signed) 1111011w mod 1111r/m 
AAD = ASCIl Adjust for Divide 11010101 00001010 
CBW = Convert Byte to Word 10011000 

CWD = Convert Word to Double Word 10011001 


mod 100r/m 
mod 1011r/m 
00001010 
mod 110r/m 
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Table 2. Instruction Set Summary (Continued) 


Mnemonic and instruction Code 
Description 


LOGIC 76543210 76543210 76543210 


76543210 


SHL/SAL = Shift Logical/Arithmetic Left 

SHR = Shift Logical Right 

SAR = Shift Arithmetic Right 

ROL = Rotate Left 

ROR = Rotate Right 

RCL = Rotate Through Carry Flag Left 

RCR = Rotate Through Carry Right | §110100vw | mod011r/m | 

AND = And: | 

Reg./Memory and Register to Either 

immediate to Register/Memory 
Immediate to Accumulator | 0010010w | data =| ~~ datafw=1 | 


TEST = And Function to Flags, No Result: 


Register/Memory and Register 1000010w mod reg r/m 


mod000r/m data data ifw = 1 


data ifw = 1 


Immediate Data and Register/Memory 1111011w 


Immediate Data and Accumulator 1010100w data 


OR = Or: 
Reg./Memory and Register to Either 000010dw mod reg r/m 


Immediate to Register/Memory 1000000w mod001r/m da data ifw = 1 


Immediate to Accumulator 0000110w data ifw = 1 


XOR = Exclusive or: 


Reg./Memory and Register to Either 001100dw mod reg r/m 
Immediate to Register/Memory 1000000w mod 110r/m data ifw = 1 


Immediate to Accumulator 0011010Ww data 


STRING MANIPULATION 
REP = Repeat LTT PO012 
MOVS = Move Byte/Word 1010010w 
CMPS = Compare Byte/Word 
SCAS = Scan Byte/Word 1010111w 


LODS = Load Byte/Wd to AL/AX 1010110w 


STOS = Stor Byte/Wd from AL/A 1010101w 


CONTROL TRANSFER 

CALL = Call: 

Direct within Segment [11101000 | _displow | __disp-high 
Indirect within Segment 

Direct Intersegment [roo1010 | offsetiow —[_offsethigh | 


seg-high 
Indirect Intersegment He eT ee mod0111r/m 
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Table 2. instruction Set Summary (Continued) 


Mnemonic and | 
Description Instruction Code 


JMP = Unconditional Jump: 76543210 76543210 76543210 


Direct within Segment-Short 
Indirect within Segment 
Direct Intersegment 
Indirect Intersegment 


RET = Return from CALL: 
Within Segment 11000011 


Within Seg Adding Immed to SP 11000010 data-low data-high 


| Intersegment 11001011 


Intersegment Adding Immediate to SP 11001010 data-high 
JE/JZ = Jump on Equal/Zero 04110100 ee 
JL/JNGE = Jump on Less/Not Greater 01111100 [disp sid 
or Equal 
JLE/JNG = Jump on Less or Equal/ 01111110 Pon aa.) | 
Not Greater 
JB/JNAE = Jump on Below/Not Above 01110010 a “aan 
or Equal 
JBE/JNA = Jump on Below or Equal/ 01110110 
Not Above 


JP/JPE = Jump on Parity/Parity Even 


JO = Jump on Overflow 01110000 | disp | 
JS = Jump on Sign 01111000 ta “ae 
. JNL/JGE = Jump on Not Less/Greater 01111101 nas ee 
or Equal P 
JNLE/JG = Jump on Not Less or Equal/ 01111111 i, aa Ne a | 
Greater 
or Equal 
JNBE/JA = Jump on Not Below or 01110111 ee | 
Equal/Above 
JNP/JPO = Jump on Not Par/Par Odd Til (|. ae 
JNO = Jump on Not Overflow 01110001 Rak “ae 
JNS = Jump on Not Sign 01111001 a “eae 
LOOP = Loop CX Times 1100010 - | . dep "| 
LOOPZ/LOOPE = Loop While Zero/Equal 12100001 |°  osaieps : 3] 
Zero/Equal 
JCXZ = Jump on CX Zero (4400011 |] dep | 
INT = Interrupt 
Type Specified 11001107 type 
Type 3 11001100 
INTO = Interrupt on Overflow 11001110 
IRET = Interrupt Return 17003424 
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Table 2. Instruction Set Summary (Continued) 


Mnemonic and 
Description 
PROCESSOR CONTROL 
CLC = Clear Carry 


76543210 


CMC = Complement Carry 117401017 
STC = Set Carry 
CLD = Clear Direction 


STD = Set Direction 


1TV1T3 TCO 
1174-11TOT 


CLI = Clear Interrupt 11111610 


STI = Set Interrupt 


HLT = Halt 11110100 


WAIT = Wait 10011011 


ESC = Escape (to External Device) 11011%xx 


LOCK = Bus Lock Prefix 


NOTES: 

AL = 8-bit accumulator 

AX = 16-bit accumulator 

CX = Count register 

DS = Data segment 

ES = Extra segment 

Above/below refers to unsigned value 

Greater = more positive; 

Less = less positive (more negative) signed values 

if d = 1 then “to” reg; if d = 0 then “from” reg 

if w = 1 then word instruction; if w = 0 then byte instruc- 
tion 

if mod = 11 then r/m is treated as a REG field 

if mod = 00 then DISP = 0%, disp-low and disp-high are 
absent 

if mod = 01 then DISP = disp-low sign-extended to 
16 bits, disp-high is absent 

if mod = 10 then DISP = disp-high; disp-low 

if r/m = 000 then EA = (BX) + (SI) + DISP 


11110000 


if r/m = 001 then EA = (BX) + (Dl) + DISP 
if r/m = 010 then EA = (BP) + (SI) + DISP 
if r/m = 011 then EA = (BP) + (DI) + DISP 
ifr/m = 100 then EA = (SI) + DISP 

if r/m = 101 then EA = (Dl) + DISP 

ifr/m = 110 then EA = (BP) + DISP* 

if r/m = 111 then EA = (BX) + DISP 


DISP follows 2nd byte of instruction (before data if re- 
quired) 

*except if mod = 00 and r/m = 110 then EA = disp-high; 
disp-low. 
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DATA SHEET REVISION REVIEW 


instruction Code 


76543210 


mod x x x r/m 


if sw = 01 then 16 bits of immediate data form the oper- 
and 

if s w = 11 then an immediate data byte is sign extended 
to form the 16-bit operand 

if v = 0 then “count” = 1; if v = 1 then “count” in (CL) 
= don’t care 

z is used for string primitives for comparison with ZF FLAG 


SEGMENT OVERRIDE PREFIX 


001regi10 


REG is assigned according to the following table: 


| 16-Bit(w = 1) | B-Bit(w = 0) 
000 AX 000 AL 


Instructions which reference the flag register file as a 16-bit 
object use the symbol FLAGS to represent the file: 
FLAGS = X:X:X:X:(OF):(DF):(IF):(TF):(SF):(ZF):X:(AF):X:(PF):X:(CF) 


The following list represents key differences between this and the -004 data sheet. Please review this summa- 


ry carefully. 


1. The Intel 8086 implementation technology (HMOS) has been changed to (HMOS-III). 
2. Delete all “changes from 1985 Handbook Specification” sentences. 
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80C86A 
16-BIT CHMOS MICROPROCESSOR 


m@ Pin-for-Pin and Functionally Compatible m Architecture Designed for Powerful 


_ to Industry Standard HMOS 8086 Assembly Language and Efficient High 
= Fully Static Design with Frequency Level Languages 
Range from D.C. to: m 24 Operand Addressing Modes 
— 8 Miz for S0CS6A-2 m= Byte, Word and Block Operations 
m@ Low Power Operation Rit Ci 
— Operating I¢c = 10 mA/MHz ‘i ee Signed and Unsigned 
— Standby Iccs = 500 »A max — Binary or Decimal 
@ Bus-Hold Circuitry Eliminates Pull-Up — Multiply and Divide 
Resistors 


m@ Available in 40-Lead Plastic DIP 
m@ Direct Addressing Capability of 


1 MByte of Memory 


The Intel 80C86A is a high performance, CHMOS version of the industry standard HMOS 8086 16-bit CPU. 
The 80C86A available in 8 MHz clock rates, offers two modes of operation: MINimum for small systems and 


MAXimum for larger applications such as multiprocessing. It is available in 40-pin DIP package. 


EXECUTION UNIT BUS INTERFACE UNIT 


REGISTER FILE REGISTER FILE ; BAAD MIN t 


ape (J 10 31 RQGTO (HOLD) 
aps (11 30D RQ/GTi = (HLDA) 
aps (j 12 29 [1 LOCK (WA) 
ap3 (13 26 1 S2 (MAO) 
ap2 (114 270s) (OTR) 
api (415 26 1) So (DEN) 
ADO Cy 16 25 (1 Qso (ALE) 
wei C] 17 24D asi (INTA) 


cuK19 22 [TD READY 
GNoO [J 20 21 [0 RESET 


240029-2 
Figure 2. 80C86A 
40-Lead DIP Configuration 


CLK RESET READY MN/MX GND 
Voc 


240029-1 
Figure 1. 80C86A 
CPU Block Diagram 
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Table 1. Pin Description 


The following pin function descriptions are for 8OC86AA systems in either minimum or maximum mode. The 
“Local Bus” in these descriptions is the direct multiplexed bus interface connection to the 8OC86A (without 
regard to additional bus buffers). 


Name and Function 


ADDRESS DATA BUS: These lines constitute the time multiplexed 
memory/IO address (T;) and data (To, T3, Tw, T4) bus. Ag is 
analogous to BHE for the lower byte of the data bus, pins D7—Dp. It 
is LOW during T; when a byte is to be transferred on the lower | 
portion of the bus in memory or |/O operations. Eight-bit oriented 
devices tied to the lower half would normally use Ao to condition 
chip select functions. (See BHE.) These lines are active HIGH and 
float to 3-state OFF(1) during interrupt acknowledge and local bus 
“hold acknowledge.” 


ADDRESS/STATUS: During T; these are the four most significant 
address lines for memory operations. During |/O operations 

these lines are LOW. During memory and I/O operations, 

status information is available on these lines during To, T3, Tw, 
and T4. The status of the interrupt enable FLAG bit (Ss) is updated 
at the beginning of each CLK cycle. A;7/S4 and Ai¢6/S3 are 
encoded as shown. 


This information indicates which relocation register is presently 
being used for data accessing. 


These lines float to 3-state OFF(1) during local bus “‘hold 
acknowledge.” 


0 (LOW) — Alternate Data 


0 Stack 
1 (HIGH) Code or None 
1 Data 


Sg is 0 
(LOW) 


BUS HIGH ENABLE/STATUS: During T; the bus high enable signal 
(BHE) should be used to enable data onto the most significant half 
of the data bus, pins D;5—Dg. Eight-bit oriented devices tied to the 
upper half of the bus would normally use BHE to condition chip 
select functions. BHE is LOW during T, for read, write, and interrupt 
acknowledge cycles when a byte is to be transferred on the high 
portion of the bus. The S7 status information is available during To, 
T3, and Ty. The signal is active LOW, and floats to 3-state OFF(1) in 
“hold.” It is LOW during T, for the first interrupt acknowledge cycle. 


| BHE | Ao | —_Characteristics 


Whole word 
Upper byte from/ 
to odd address 
Lower byte from/ 
to even address 
None 
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Table 1. Pin Description (Continued) 


Name and Function 


READ: Read strobe indicates that the processor is performing a 
memory of I/O read cycle, depending on the state of the So pin. 
This signal is used to read devices which reside on the 80C86A 
local bus. RD is active LOW during To, T3 and Tw of any read cycle, 
and is guaranteed to remain HIGH in To» until the 80C86A local bus 
has floated. 


This floats to 3-state OFF in “hold acknowledge.” 


READY: is the acknowledgement from the addressed memory or 
I/O device that it will complete the data transfer. The READY signal 
from memory/IO is synchronized by the 82C84A Clock Generator 
to form READY. This signal is active HIGH. The 80C86A READY 
input is not synchronized. Correct operation is not guaranteed if the 
setup and hold times are not met. 


INTERRUPT REQUEST: is a level triggered input which is sampled 
during the last clock cycle of each instruction to determine if the 
processor should enter into an interrupt acknowledge operation. A 
subroutine is vectored to via an interrupt vector lookup table 
located in system memory. It can be internally masked by software 
resetting the interrupt enable bit. INTR is internally synchronized. 
This signal is active HIGH. 


TEST: input is examined by the “Wait” instruction. If the TEST input 
is LOW execution continues, otherwise the processor waits inan _ 
“Idle” state. This input is synchronized internally during each clock 

cycle on the leading edge of CLK. 


NON-MASKABLE INTERRUPT: an edge triggered input which 
Causes a type 2 interrupt. A subroutine is vectored to via an 
interrupt vector lookup table located in system memory. NMI is not 
maskable internally by software. A transition from a LOW to HIGH 
initiates the interrupt at the end of the current instruction. This input 
is internally synchronized. 


RESET: causes the processor to immediately terminate its present 
activity. The signal must be active HIGH for at least four clock 
cycles. It restarts execution, as described in the Instruction Set 
description, when RESET returns LOW. RESET is internally 
synchronized. 


CLOCK: provides the basic timing for the processor and bus 
controller. It is asymmetric with a 33% duty cycle to provide 
optimized internal timing. 


Voc: +5V power supply pin. 
GROUND: Both must be connected. 


MINIMUM/MAXIMUM: indicates what mode the processor is to 
operate in. The two modes are discussed in the following sections. 
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Table 1. Pin Description (Continued) 


The following pin function descriptions are for the 80C86A/82C88 system in maximum mode (i.e, 
MN/MX= Vs). Only the pin functions which are unique to maximum mode are described, all other pin func- 
tions are as described above. 


STATUS: active during T4, T;, and To and is returned to the passive 
state (1,1,1) during T3 or during Tw when READY is HIGH. This 
status is used by the 82C88 Bus Controller to generate all memory 
and I/O access control signals. Any change by So, $4, So during T, 
is used to indicate the beginning of a bus cycle, and the return to the 
passive state in T3 or Tw is used to indicate the end of a bus cycle. 


These signals float to 3-state OFF(1) in “hold acknowledge.” These 
status lines are encoded as shown. 


ee 2s 


Interrupt 
Acknowledge 

Read I/O Port 
Write |/O Port 
Halt 

Code Access 

Read Memory 
Write Memory 
Passive 


REQUEST/GRANT: pins are used by other local bus masters to 
force the processor to release the local bus at the end of the 
processor's current bus cycle. Each pin is bidirectional with RQ/GTo 
having higher priority than RQ/GT,. RQ/GT has an internal pull-up 
resistor so may be left unconnected. The request/grant sequence is 
as follows (see timing diagram): 


1. A pulse of 1 CLK wide from another local bus master indicates a 
local bus request (“hold’’) to the 80C86A (pulse 1). 

2. During a T4 or T; clock cycle, a pulse 1 CLK wide from the 
80C86A to the requesting master (pulse 2), indicates that the 
80C86A has allowed the local bus to float and that it will enter the 
“hold acknowledge” state at the next CLK. The CPU’s bus interface 
unit is disconnected logically from the local bus during “‘hold 
acknowledge.” 

3. A pulse 1 CLK wide from the requesting master indicates to the 
80C86A (pulse 3) that the “hold” request is about to end and that 
80C86A can reclaim the local bus at the next CLK. 


Each master-master exchange of the local bus is a sequence of 3 
pulses. There must be one dead CLK cycle after each bus exchange. 
Pulses are active LOW. 


If the request is made while the CPU is performing a memory cycle, it 
will release the local bus during T4 of the cycle when all the following 
conditions are met: 


1. Request occurs on or before To. 
2. Current cycle is not the low byte of a word (on an odd address). 
3. Current cycle is not the first acknowledge of an interrupt 
acknowledge sequence. 

| 4. A locked instruction is not currently executing. 
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Table 1. Pin Description (Continued) 


| Symbol | PinNo. | Type | Name and Function 


Bee If the local bus is idle when the request is made the two possible 


events will follow: 


1. Local bus will be released during the next clock. 
2. Amemory cycle will start within 3 clocks. Now the four rules for a 

currently active memory cycle apply with condition number 1 already 
satisfied. 


LOCK: output indicates that other system bus masters are not to gain 
control of the system bus while LOCK is active LOW. The LOCK 
signal is activated by the ‘“‘LOCK”’ prefix instruction and remains 
active until the completion of the next instruction. This signal is active 
LOW, and floats to 3-state OFF(1) in “hold acknowledge.” 


QUEUE STATUS: The queue status is valid during the CLK cycle 
after which the queue operation is performed. 

QS, and QSp provide status to allow external tracking of the internal 
80C86A instruction queue. 


a8; || So | Characteristics 


0 (LOW) No Operation 

0 First Byte of Op Code from Queue 
1 (HIGH) Empty the Queue 

1 Subsequent Byte from Queue 


The following pin function descriptions are for the 8OC86A in minimum mode (i.e., MN/MX= Vcc). Only the 
pin functions which are unique to minimum mode are described; all other pin functions are described above. 


STATUS LINE: logically equivalent to So in the maximum mode. It 
is used to distinguish a memory access from an I/O access. M/IO 
becomes valid in the T4 preceding a bus cycle and remains valid 
until the final T, of the cycle (M= HIGH, IO = LOW). M/IO floats to 
3-state OFF(1) in local bus “hold acknowledge.” 


WRITE: indicates that the processor is performing a write memory 
or write |/O cycle, depending on the state of the M/IO signal. WR is 
active for To, T3 and Tw of any write cycle. It is active LOW, and 
floats to 3-state OFF(1) in local bus “hold acknowledge.” 


INTA is used as a read strobe for interrupt acknowledge cycles. It is 


active LOW during To, T3 and Tw of each finch: acknowledge 
cycle. 


ADDRESS LATCH ENABLE: provided by the processor to latch 
the address into‘an address latch. It is a HIGH pulse active during 
T of any bus cycle. Note that ALE is never floated. 


DATA TRANSMIT/RECEIVE: needed in minimum system that 
desires to use a data bus transceiver. It is used to control the 
direction of data flow through the transceiver. Logically DT/R is 
equivalent to S; in the maximum mode, and its timing is the same 
as for M/IO. (T=HIGH, R= LOW.) This signal floats to 3-state 
OFF(1) in local bus “hold acknowledge.” 
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Table 1. Pin Description (Continued) 


| Symbol__| Pino. | Type _Name and Function 


DATA ENABLE: provided as an output enable for the transceiver in 
a minimum system which uses the transceiver. DEN is active LOW 
during each memory and I/O access and for INTA cycles. Fora 
read or INTA cycle it is active from the middle of T> until the middle 
of T4, while for a write cycle it is active from the beginning of To 
until the middle of T4. DEN floats to 3-state OFF(1) in local bus 
“hold acknowledge.” 


setup time. 


NOTE: 
1. See the section on Bus Hold Circuitry. 


FUNCTIONAL DESCRIPTION 


STATIC OPERATION 


All 80C86A circuitry is of static design. Internal regis- 
ters, counters and latches are static and require no 
refresh as with dynamic circuit design. This elimi- 
nates the minimum operating frequency restriction 
placed on other microprocessors. The CMOS 
80C86A can operate from DC to the appropriate up- 
per frequency limit. The processor clock may be 
stopped in either state (high/low) and held there in- 
definitely. This type of operation is especially useful 
for system debug or power critical applications. 


The 80C86A can be single stepped using only the 
CPU clock. This state can be maintained as long as 
is necessary. Single step clock operation allows sim- 
ple interface circuitry to provide critical information 
for bringing up your system. 


Static design also allows very low frequency opera- 
tion. In a power critical situation, this can provide 
extremely low power operation since 80C86A power 
dissipation is directly related to operating frequency. 
As the system frequency is reduced, so is the oper- 
ating power until, ultimately, at a DC input frequency, 
the 80C86A power requirement is the standby cur- 
rent. 
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HOLD: indicates that another master is requesting a local bus 
“hold.” To be acknowledged, HOLD must be active HIGH. The 
processor receiving the “hold’’ request will issue HLDA (HIGH) as 
an acknowledgement in the middle of a T4 or Tj; clock cycle. 
Simultaneous with the issuance of HLDA the processor will float the 
local bus and control lines. After HOLD is detected as being LOW, 
the processor will LOWer the HLDA, and when the processor 
needs to run another cycle, it will again drive the local bus and 
control lines. 

The same rules as for RQ/GT apply regarding when the local bus 
will be released. . 

HOLD is not an asynchronous input. External synchronization 
should be provided if the system cannot otherwise guarantee the 


INTERNAL ARCHITECTURE 


The internal functions of the 80C86A processor are 
partitioned logically into two processing units. The 
first is the Bus Interface Unit (BIU) and the second is 
the Execution Unit (EU) as shown in the block dia- 
gram of Figure 1. 


These units can interact directly but for the most 
part perform as separate asynchronous operational 
processors. The bus interface unit provides the func- 
tions related to instruction fetching and queuing, op- 
erand fetch and store, and address relocation. This 
unit also provides the basic bus control. The overlap 
of instruction pre-fetching provided by this unit 
serves to increase processor performance through 
improved bus bandwidth utilization. Up to 6 bytes of 
the instruction stream can be queued while waiting 
for decoding and execution. 


The instruction stream queuing mechanism allows 
the BIU to keep the memory utilized very efficiently. 
Whenever there is space for at least 2 bytes in the 
queue, the BIU will attempt a word fetch memory 
cycle. This greatly reduces “dead time’ on the 
memory bus. The queue acts as a First-In-First Out 
(FIFO) buffer, from which the EU extracts instruction 
bytes as required. If the queue is empty (following a 
branch instruction, for example), the first byte into 
the queue immediately becomes available to the EU. 


The execution units receives pre-fetched instruc- 
tions from the BIU queue and provides un-relocated 
operand addresses to the BIU. Memory operands 
are passed through the BIU for processing by the 
EU, which passes results to the BIU for storage. See 
the Instruction Set description for further register set 
and architectural descriptions. 


MEMORY ORGANIZATION 


The processor provides a 20-bit address to memory 
which locates the byte being referenced. The memo- 
ry is organized as a linear array of up to 1 million 
bytes, addressed as 00000(H) to FFFFF(H). The 
memory is logically divided into code, data, extra 
data, and stack segments of up to 64k bytes each, 
with each segment falling on 16-byte boundaries. 
(See Figure 3a.) 


CODE SEGMENT 


XXXXOH 


| STACK SEGMENT 


SEGMEN 
REGISTER FILE DATA SEGMENT 


| EXTRA DATA SEGMENT 


La OOOOOH 
240029-3 


Figure 3a. Memory Organization 


CODE (CS) Automatic with all instruction prefetch. 


Segment Register Segment 
Used | Selection Rule 
Stack STACK (SS) All stack pushes and pops. Memory references relative to BP 
base register except data references. 


DATA (DS) Data references when: relative to stack, destination of string 
operation, or explicitly overridden. 
External (Global) Data EXTRA (ES) Destination of string operations: Explicitly selected using a 
segment override. 


80C86A 


All memory references are made relative to base ad- 
dresses contained in high speed segment registers. 
The segment types were chosen based on the ad- 
dressing needs of programs. The segment register 
to be selected is automatically chosen according to 
the rules of the following table. All information in one 
segment type share the same logical attributes (e.g. 
code or data). By structuring memory into relocat- 
able areas of similar characteristics and by automati- 
cally selecting segment registers, programs are 
shorter, faster, and more structured. 


Word (16-bit) operands can be located on even or 
odd address boundaries and are thus not con- 
strained to even boundaries as is the case in many 
16-bit computers. For address and data operands, 
the least significant byte of the word is stored in the 
lower valued address location and the most signifi- 
cant byte in the next higher address location. The 
BIU automatically performs the proper number of 
memory accesses, one if the word operand is on an 
even byte boundary and two if it is on an odd byte 
boundary. Except for the performance penalty, this 
double access is transparent to the software. This. 
performance penalty does not occur for instruction 
fetches, only word operands. 


Physically, the memory is organized as a high bank 
(D;5-Dg) and a low bank (D7-Do) of 512k 8-bit 
bytes addressed in parallel by the processor’s ad- 
dress lines. 


Ai9—-A;. Byte data with even addresses is trans- 
ferred on the D7-Do bus lines while odd addressed 
byte data (Ag HIGH) is transferred on the Di5—-Dg 
bus lines. The processor provides two enable sig- 
nals, BHE and Apo, to selectively allow reading from 
or writing into either an odd byte location, even byte 
location, or both. The instruction stream is fetched 
from memory as words and is addressed internally 
by the processor to the byte level as necessary. 


In referencing word data the BIU requires one or two 
memory cycles depending on whether or not the 
starting byte of the word is on an even or odd ad- 
dress, respectively. Consequently, in referencing 
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word operands performance can be optimized by lo- 
cating data on even address boundaries. This is an 
especially useful technique for using the stack, since 
odd address references to the stack may adversely 
affect the context switching time for interrupt pro- 
cessing or task multiplexing. 


Certain locations in memory are reserved for specific 
CPU operations (see Figure 3b.) Locations from ad- 
dress FFFFOH through FFFFFH are reserved for op- 
erations including a jump to the initial program load- 
ing routine. Following RESET, the CPU will always 
begin execution at location FFFFOH where the jump 
must be. Locations OOO00H through OO3FFH are re- 
served for interrupt operations. Each of the 256 pos- 
sible interrupt types has its service routine pointed to 
by a 4-byte pointer element consisting of a 16-bit 
segment address and a 16-bit offset address. The 
pointer elements are assumed to have been stored 
at the respective places in reserved memory prior to 
occurrence of interrupts. 


FFFFFH 
RESET BOOTSTRAP 
PROGRAM JUMP 
FFFFOH 


INTERRUPT POINTER 
FOR TYPE 255 
e 


INTERRUPT POINTER 
FOR TYPE 1 
INTERRUPT POINTER 
FOR TYPE 0 


Figure 3b. Reserved Memory Locations 
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MINIMUM AND MAXIMUM MODES 


The requirements for supporting minimum and maxi- 
mum 80C86A systems are sufficiently different that 
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they cannot be done efficiently with 40 uniquely de- 
fined pins. Consequently, the 80C86A is equipped 
with a strap pin (MN/MX) which defines the system 
configuration. The definition of a certain subset of 
the pins changes dependent on the condition of the 
strap pin. When MN/MxX pin is strapped to GND, the 
80C86A treats pins 24 through 31 in maximum 
mode. An 82C88 bus controller interprets status in- 
formation coded into So, S1, So to generate bus tim- 
ing and control signals compatible with the MULTI- 
BUS architecture. When the MN/MxX pin is strapped 
to Voc, the 80C86A generates bus control signals 
itself on pins 24 through 31, as shown in parenthe- 
ses in Figure 2. Examples of minimum mode and 
maximum mode systems are shown in Figure 4. 


BUS OPERATION 


The 80C86A has a combined address and data bus 
commonly referred to as a time multiplexed bus. 
This technique provides the most efficient use of 
pins on the processor. This ‘local bus’ can be buff- 
ered directly and used throughout the system with 
address latching provided on memory and I/O mod- 
ules. In addition, the bus can also be demultiplexed 
at the processor with a single set of address latches 
if a standard non-multiplexed bus is desired for the 
system. 


Each processor bus cycle consists of at least four 
CLK cycles. These are referred to as T;, To, T3 and 
T4 (see Figure 5). The address is emitted from the 
processor during T; and data transfer occurs on the 
bus during T3 and T4. To is used primarily for chang- 
ing the direction of the bus during read operations. In 
the event that a “NOT READY” indication is given 
by the addressed device, ‘‘Wait” states (Tw) are in- 
serted between T3 and Ty. Each inserted ‘Wait’ 
state is of the same duration as a CLK cycle. Periods 
can occur between 80C86A bus cycles. These are 
referred to as “Idle” states (Tj) or inactive CLK cy- 
cles. The processor uses these cycles for internal 
housekeeping. 


During T; of any bus cycle the ALE (Address Latch 
Enable) signal is emitted (by either the processor or 
the 82C88 bus controller, depending on the MN/MX 
strap). At the trailing edge of this pulse, a valid ad- 
dress and certain status information for the cycle 
may be latched. 


intel. | 80C86A 


OPTIONAL 
FOR INCREASED 
DATA BUS DRIVE 
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Figure 4a. Minimum Mode iAPX 80C86A Typical Configuration 
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Figure 4b. Maximum Mode 80C86A Typical Configuration 
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(4 + Nwait) = Toy 
| T3 | Twait | 


a 


ADOR/ 
STATUS 


ADDR/DATA 


4 


MXM WAIT 


<+———- MEMORY ACCESS TIME ———> 


(4 + Nwait) = Toy 


GOES INACTIVE IN THE STATE 
JUST PRIOR TO T, 


eae 


a 


DATA OUT (D15-Do) 


M_ 


ee ee ee eee 
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Figure 5. Basic System Timing 


Status bits So, S;, and So are used, in maximum 
mode, by the bus controller to identify the type of 
bus transaction according to the following table: 


nth OL Oe ae 


0 (LOW) Interrupt Acknowledge 
Read 1/O 

Write |/O 

Halt 

Instruction Fetch 
Read Data from Memory 
Write Data to Memory 
Passive (no bus cycle) 


Status bits S3 through S7 are multiplexed with high- 
order address bits and the BHE signal, and are 
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therefore valid during T2 through T4. S3 and Sz, indi- 
cate which segment register (see Instruction Set de- 
scription) was used for this bus cycle in forming the 
address, according to the following table: 


| Ss | $3 | Characteristics 


0 (LOW) Alternate Data (extra segment) 
0 Stack 

1 (HIGH) Code or None 

1 Data 


Ss is a reflection of the PSW interrupt enable bit. 
Sg=0 and S7 is a spare status pin. 


intl. 


I/O ADDRESSING 


In the 80C86A, I/O operations can address up to a 
maximum of 64k I/O byte registers or 32k I/O word 
registers. The |/O address appears in the same for- 
mat as the memory address on bus lines Ay5—Apo. 
The address lines Ag—Aj¢ are zero in I/O opera- 
tions. The variable |/O instructions which use regis- 
ter DX as a pointer have full address capability while 
the direct |/O instructions directly address one or 
two of the 256 I/O byte locations in page 0 of the 
1/O address space. 


I/O ports are addressed in the same manner as 
memory locations. Even addressed bytes are trans- 
ferred on the D7—Dpo bus lines and odd addressed 
bytes on D;5—Dg. Care must be taken to assure that 
each register within an 8-bit peripheral located on 
the lower portion of the bus be addressed as even. 


EXTERNAL INTERFACE 


PROCESSOR RESET AND INITIALIZATION 


Processor initialization or start up is accomplished 
with activation (HIGH) of the RESET pin. The 
80C86A RESET is required to be HIGH for four or 
more CLK cycles. The 80C86A will terminate opera- 
tions on the high-going edge of RESET and will re- 
main dormant as long as RESET is HIGH. The low- 
going transition of RESET triggers an internal reset 
sequence for approximately 7 CLK cycles. After this 
interval the 80C86A operates normally beginning 
with the instruction in absolute location FFFFOH 
(see Figure 3b). The details of this operation are 
specified in the Instruction Set description of the 
MCS®-86 Family User’s Manual. The RESET input is 
internally synchronized to the processor clock. At 


“PULL-UP/PULL-DOWN” 
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Input Buffer exists only on I/O pins 


Figure 6a. Bus hold circuitry pin 2-16, 34-39. 


80C86A 


initialization the HIGH-to-LOW transition of RESET 
must occur no sooner than 50 ps after power-up, to 
allow complete initialization of the 80C86A. 


NMI asserted prior to the 2nd clock after the end of 
RESET will not be honored. If NMI is asserted after 
that point and during the internal reset sequence, 
the processor may execute one instruction before 
responding to the interrupt. A hold request active 
immediately after RESET will be honored before the 
first instruction fetch. 


All 3-state outputs float to 3-state OFF() during RE- 
SET. Status is active in the idle state for the first 
clock after RESET becomes active and then floats 
to 3-state OFF(1). ALE and HLDA are driven low. 


NOTE: 
1. See the section on Bus Hold Circuitry. 


BUS HOLD CIRCUITRY 


To avoid high current conditions caused by floating 
inputs to CMOS devices and eliminate the need for 
pull-up/down resistors, “bus-hold” circuitry has 
been used on the 80C86A pins 2-16, 26-32, and 
34-39 (Figures 6a, 6b). These circuits will maintain 


the last valid logic state if no driving source is pres- 


ent (i.e. an unconnected pin or a driving source 
which goes to a high impedance state). To overdrive 
the “bus hold” circuits, an external driver must be 
capable of supplying 350 pA minimum sink or 
source current at valid input voltage levels. Since 
this “bus hold” circuitry is active and not a “resis- 
tive” type element, the associated power supply cur- 
rent is negligible and power dissipation is significant- 
ly reduced when compared to the use of passive 
pull-up resistors. 


“PULL-UP” 


INPUT 
PROTECTION 
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Input Buffer exists only on I/O pins 


Figure 6b. Bus hold circuitry pin 26-32. 
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INTERRUPT OPERATIONS 


Interrupt operations fall into two classes; software or 
hardware initiated. The software initiated interrupts 
and software aspects of hardware interrupts are 
specified in the Instruction Set description. Hard- 
ware interrupts can be classified as non-maskable or 
maskable. 


Interrupts result in a transfer of control to a new pro- 
gram location. A 256-element table containing ad- 
dress pointers to the interrupt service program loca- 
tions resides in absolute locations 0 through 3FFH 
(see Figure 3b), which are reserved for this purpose. 
Each element in the table is 4 bytes in size and cor- 
responds to an interrupt ‘‘type’”’. An interrupting de- 
vice supplies an 8-bit type number, during the inter- 
rupt acknowledge sequence, which is used to “vec- 
tor’ through the appropriate element to the new in- 
terrupt service program location. 


NON-MASKABLE INTERRUPT (NMI) 


The processor provides a single non-maskable inter- 
rupt pin (NMI) which has higher priority than the 
maskable interrupt request pin (INTR). A typical use 
would be to activate a power failure routine. The 
NMI is edge-triggered on a LOW-to-HIGH transition. 
The activation of this pin causes a type 2 interrupt. 
(See Instruction Set description.) NMI is required to 
have a duration in the HIGH state of greater than 
two CLK cycles, but is not required to be synchroniz- 
ed to the clock. Any high-going transition of NMI is 
latched on-chip and will be serviced at the end of the 
Current instruction or between whole moves of a 
block-type instruction. Worst case response to NMI 
would be for multiply, divide and variable shift in- 
structions. There is no specification on the occur- 
rence of the low-going edge; it may occur before, 
during, or after the servicing of NMI. Another high- 
going edge triggers another response if it occurs af- 
ter the start of the NMI procedure. The signal must 
be free of logical spikes in general and be free of 
bounces on the low-going edge to avoid triggering 
extraneous responses. 


MASKABLE INTERRUPT (INTR) 


The 80C86A provides a single interrupt request input 
(INTR) which can be masked internally by software 
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with the resetting of the interrupt enable FLAG 
status bit. The interrupt request signal is level trig- 
gered. It is internally synchronized during each clock 
cycle on the high-going edge of CLK. To be re- 
sponded to, INTR must be present (HIGH) during 
the clock period preceding the end of the current 
instruction or the end of a whole move for a block- 
type instruction. During the interrupt response se- 
quence further interrupts are disabled. The enable 
bit is reset as part of the response to any interrupt 
(INTR, NMI, software interrupt or single-step), al- 
though the FLAGS register which is automatically 
pushed onto the stack reflects the state of the proc- 
essor prior to the interrupt. Until the old FLAGS reg- 
ister is restored the enable bit will be zero unless 
specifically set by an instruction. 


During the response sequence (Figure 7) the proc- 
essor executes two successive (back-to-back) inter- 
rupt acknowledge cycles. The 80C86A emits the 
LOCK signal from T> of the first bus cycle until To of 
the second. A local bus “hold” request will not be 
honored until the end of the second bus cycle. In the 
second bus cycle a byte is fetched from the external 
interrupt system (e.g., 82C59 PIC) which identifies 
the source (type) of the interrupt. This byte is multi- 
plied by four and used as a pointer into the interrupt 
vector lookup table. An INTR signal left HIGH will be 
continually responded to within the limitations of the 
enable bit and sample period. The INTERRUPT RE- 
TURN instruction includes a FLAGS pop which re- 
turns the status of the original interrupt enable bit 
when it restores the FLAGS. 


HALT 


When a software “HALT” instruction is executed the 
processor indicates that it is entering the “HALT” 
state in one of two ways depending upon which 
mode is strapped. In minimum mode, the processor 
issues one ALE with no qualifying bus control sig- 
nals. In Maximum Mode, the processor issues ap- 
propriate HALT status on So, S; and So and the 
82C88 bus controller issues one ALE. The 80C86A 
will not leave the “HALT” state when a local bus 
“hold” is entered while in “HALT’’. In this case, the 
processor reissues the HALT indicator. An interrupt 
request or RESET will force the 80C86A out of the 
“HALT” state. 


80C86A 


AD, - ee FLOAT 


TYPE {tre vecron }— 


mapegigs navn! el 10 


Figure 7. Interrupt Acknowledge Sequence 


READ/MODIFY/WRITE (SEMAPHORE) 
OPERATIONS VIA LOCK 


The LOCK status information is provided by the 
processor when directly consecutive bus cycles are 
required during the execution of an instruction. This 
provides the processor with the capability of per- 
forming read/modify/write operations on memory 
(via the Exchange Register With Memory instruction, 
for example) without the possibility of another sys- 
tem bus master receiving intervening memory cy- 
cles. This is useful in mutliprocessor system configu- 
rations to accomplish ‘‘test and set lock” operations. 
The LOCK signal is activated (forced LOW) in the 
clock cycle following the one in which the software 
“LOCK” prefix instruction is decoded by the EU. It is 
deactivated at the end of the last bus cycle of the 
instruction following the “LOCK” prefix instruction. 
While LOCK is active a request on a RQ/GT pin will 
be recorded and then honored at the end of the 
LOCK. 


EXTERNAL SYNCHRONIZATION VIA TEST 


As an alternative to the interrupts and general I/O 
capabilities, the 80C86A provides a single software- 
testable input known as the TEST signal. At any time 
the program may execute a WAIT instruction. If at 
that time the TEST signal is inactive (HIGH), pro- 


gram execution becomes suspended while the proc- 
essor waits for TEST to become active. It must re- 
main active for at least 5 CLK cycles. The WAIT in- 
struction is re-executed repeatedly until that time. 
This activity does not consume bus cycles. The 
processor remains in an idle state while waiting. All 
80C86A drivers go to 3-state OFF if bus “Hold” is 
entered. If interrupts are enabled, they may occur 
while the processor is waiting. When this occurs the 


“ processor fetches the WAIT instruction one extra 


time, processes the interrupt, and then re-fetches 
and re-executes the WAIT instruction upon returning 
from the interrupt. 


BASIC SYSTEM TIMING 


Typical system configurations for the processor op- 
erating in minimum mode and in maximum mode are 
shown in Figures 4a and 4b, respectively. In mini- 
mum mode, the MN/MxX pin is strapped to Vcc and 
the processor emits bus control signals in a manner 
similar to the 8085. In maximum mode, the MN/MX 
pin is strapped to Vss and the processor emits cod- 
ed status information which the 82C88 bus control- 
ler uses to generate MULTIBUS compatible bus 
control signals. Figure 5 illustrates the signal timing 
relationships. 
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ACCUMULATOR 
BASE 

COUNT 

DATA 


STACK POINTER 
BASE POINTER 
SOURCE INDEX 
DESTINATION INDEX 


INSTRUCTION POINTER 
STATUS FLAGS 
CODE SEGMENT 
DATA SEGMENT 
STACK SEGMENT 
EXTRA SEGMENT 
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Figure 8. 80C86A Register Model 


SYSTEM TIMING—MINIMUM SYSTEM 


The read cycle begins in T; with the assertion of the 
Address Latch Enable (ALE) signal. The trailing (low- 
going) edge of this signal is used to latch the ad- 
dress information, which is valid on the local bus at 
this time, into a latch. The BHE and Ag signals ad- 
dress the low, high, or both bytes. From T, to Ty the 
M/IO signal indicates a memory or I/O operation. At 
Ta the address is removed from the local bus and 


the bus goes to a high impedance state. The read . 


control signal is also asserted at T>. The read (RD) 
signal causes the addressed device to enable its 
data bus drivers to the local bus. Some time later 
valid data will be available on the bus and the ad- 
dressed device will drive the READY line HIGH. 
When the processor returns the read signal to a 
HIGH level, the addressed device will again 3-state 
its bus drivers. If a transceiver is required to buffer 
the 80C86A local bus, signals DT/R and DEN are 
provided by the 80C86A. 


A write cycle also begins with the assertion of ALE 
and the emission of the address. The M/IO signal is 
again asserted to indicate a memory or I/O write 
operation. In the Ts immediately following the ad- 
dress emission the processor emits the data to be 
written into the addressed location. This data re- 
mains valid until the middle of T4. During To, T3, and 
Tw the processor asserts the write control signal. 
The write (WR) signal becomes active at the begin- 
ning of To as opposed to the read which is delayed 
somewhat into To to provide time for the bus to float. 


The BHE and Ag signals are used to select the prop- 


er byte(s) of the memory/IO word to be read or writ- 
ten according to the following table: 
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| BHE | Ao | Characteristics 


0 Whole word 
Upper byte from/ 
to odd address 
Lower byte from/ 
to even address 
None 


I/O ports are addressed in the same manner as 
memory location. Even addressed bytes are trans- 
ferred on the D7-Dp bus lines and odd addressed 
bytes on Dy5-Dg. 


The basic difference between the interrupt acknowl- 
edge cycle and a read cycle is that the interrupt ac- 
knowledge signal (INTA) is asserted in place of the 
read (RD) signal and the address bus is floated. 
(See Figure 7.) In the second of two successive 
INTA cycles, a byte of information is read from bus 
lines D7—Do as supplied by the interrupt system log- 
ic (i.e., 82C59A Priority Interrupt Controller). This 
byte identifies the source (type) of the interrupt. It is 
multiplied by four and used as a pointer into an inter- 
rupt vector lookup table, as described earlier. 


BUS TIMING—MEDIUM SIZE SYSTEMS 


For medium size systems the MN/MX pin is con- 
nected to Vss and the 82C88 Bus Controller is add- 
ed to the system as well as a latch for latching the 
system address, and a transceiver to allow for bus 
loading greater than the 80C86A is capable of han- 
dling. Signals ALE, DEN, and DT/R are generated 
by the 82C88 instead of the processor in this config- 
uration although their timing remains relatively the 
same. The 80C86A status outputs (So, S;, and So) 
provide type-of-cycle’ information and become 
82C88 inputs. This bus cycle information specifies 
read (code, data, or I/O), write (data or I/O), inter- 
rupt acknowledge, or software halt. The 82C88 thus 
issues control signals specifying memory read or 
write, |1/O read or write, or interrupt acknowledge. 
The 82C88 provides two types of write strobes, nor- 
mal and advanced, to be applied as required. The 
normal write strobes have data valid at the leading 


edge of write. The advanced write strobes have the 


same timing as read strobes, and hence data isn’t 
valid at the leading edge of write. The transceiver 
receives the usual T and OE inputs from the 82C88 
DT/R and DEN. 


The pointer into the interrupt vector table, which is 
passed during the second INTA cycle, can derive 
from an 82C59A located on either the local bus or 
the system bus. If the master 82C59A Priority Inter- 
rupt Controller is positioned on the local bus, a TTL 
gate is required to disable the transceiver when 
reading from the master 82C59A during the interrupt 
acknowledge sequence and software ‘poll’. 
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ABSOLUTE MAXIMUM RATINGS* 


NOTICE: This is a production data sheet. The specifi- 
cations are subject to change without notice. 


Supply Voltage a - 
(With respect to ground) ........... —0.5 to 7.0V WARNING: Stressing the device beyond the “‘Absolute 
Maximum Ratings” may cause permanent damage. 
Input Voltage Applied These are stress ratings only. Operation beyond the 
PPTL CIOUNG) 0b cdaed at vue —0.5 to Voc + 0.5V “Operating Conditions” is not recommended and ex- 
Output Voltage Applied tended exposure beyond the “Operating Conditions” 
(W.r-t-Qround) ...6..0s..e00. —0.5toVoo + 0.5V = ay affect device reliability. | 
POWEr DIGKIDGTON. os cas etsulsesene bees veenes 1.0W 
Storage Temperature............. — 65°C to 150°C 
Ambient Temperature Under Bias ...... 0°C to 70°C 
D.C. CHARACTERISTICS 


(Ta = 0°C to 70°C, Voc = 5V +5%) 


pe er 


Input Low Voltage 


Input High Voltage 
| (All inputs except clock) 


om [tance 
Ee a ee ae 
ie Te eee ee 


V 
V log = —2.5mA 
lon = —100 pA 
10 mA/MHz Vit = GND, Vin = Voc 
pA Vin = Voc or GND 
Outputs Unloaded 
CLK = GNDor Vcc 
OV < Vin < Voc | 
IBHL Input Leakage Current Vin = 0.8V 
(Bus Hold Low) (Note 4) 
Input Leakage Current = 3. 
(Bus Hold High) 


Vin = 3.0V 
(Note 5) 
BusHoldLow Overdrive ' | | 600 


Clock Input High Voltage Voc 
Output Low Voltage os ere 


Output High Voltage 3.0 
Voc —9.4 


| Ico _| __ Power Supply Current 


Standby Supply Current 


VIL 
ViH 
VCH 
VoL 
VOH 
few: 
Input Leakage Current 


(Note 2) 
| IBHHO Bus Hold High Overdrive (Note 3) 
Output Leakage Current 


A 
Vout = GND or Voc 
Capacitance of Input Buffer pF 
(All inputs except _ 
ADop-AD 5, RQ/GT) 
pF 


Cin (Note 1) 
Cio Capacitance of I/O Buffer 
(ADo-AD15, RQ/GT) 


Output Capacitance 
NOTES: 

1. Characterization conditions are a) Frequency = 1 MHz; b) Unmeasured pins at GND; c) Vix at + 5.0V or GND. 
2. An external driver must source at least Ipyi0 to switch this node from LOW to HIGH. 

3. An external driver must sink at least IgHHo to switch this node from HIGH to LOW. 

4. Test Condition is to lower Vix, to GND and then raise Vix to 0.8V on pins 2-16 & 34-39. 

5. Test Condition is to raise Vij, to Voc and then lower Vix to 3.0V on pins 2-16, 26-32 & 34-39. 


3-45 


80C86A | | | | intel : 


A.C. CHARACTERISTICS 
(Ta = 0°C to 70°C, Voc = 5V +5%) 


MINIMUM COMPLEXITY SYSTEM TIMING REQUIREMENTS 


Test 
a 
Aaa a eh 


| ToLcH | ClKLowTime | 8 | 

| TOHCL | clKHighTime | 4 | Tn 

| ToHIcH2 | CLKRiseTime | | 10 |i | Fromt.0Vtoa.5V 
| To.2cli | clkFaliTime | | 10 |i | Froma.svtot.ov | 


TDVCL DatainSetupTime | 20 | | ons 
TOLDX DatainHoldTime | 10 | | ons 
TR1IVCL RDY Setup Time 

into 82C84A 

(Notes 1, 2) 
TCLR1X RDY Hold Time 

into 82C84A 

(Notes 1, 2) 
TRYHCH READY Setup 

Time into 80C86A 
TCHRYX READY Hold Time 

into 80C86A 

Gere ee eA Sh | 


TRYLCL ' READY Inactive to 
CLK (Note 3) 

THVCH HOLD Setup Time 

TINVCH INTR, NMI, TEST 
Setup Time 
(Note 2) 

TILIH Input Rise Time 
(Except CLK) 

TIHIL Input Fall Time 
(Except CLK) 


15 


From 0.8V to 2.0V 
From 2.0V to 0.8V 
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A.C. CHARACTERISTICS (Continued) 
(Ta = 0°C to 70°C, Voc = 5V +5%) 


Timing Responses 


| Param | —_suoeis 


TCLAV Address ValidDelay | 10 | 60 | 
Address Hold Time | 10 


TCLAZ Address Float TCLAX 
Delay 


TLHLL ALE Width TCLCH — 10 
TCLLH ALE Active Delay 


Bis bet, S 
| TCHLL | AlElInactiveDelay | 
to ALE Inactive | 


TWHDX Data Hold Time TCLCH—30 
After WR 
TCVCTV Control Active 
Delay 1 
TCHCTV Control Active 
Delay 2 


We a? 
TCVCTX Control Inactive 10 70 
Delay 


TAZRL Address Float to 

READ Active 
TCLRL RD Active Delay 
TCLRH RDinactiveDelay | 10 | 80 | 
TRHAV RD Inactive to Next TCLCL-—40 

Address Active 
TCLHAV | HLDA Valid Delay 


TRLRH RD Width 2TCLCL-—50 
TWLWH WR Width 2TCLCL—40 


TAVAL Address Valid to TCLCH — 40 
ALE Low 


From 0.8V to 2.0V 
TOHOL Output Fall Time From 2.0V to 0.8V 
NOTES: 


1. Signal at 82C84A shown for reference only. See 82C84A data sheet for the most recent specifications. 
2. Setup requirement for asynchronous signal only to guarantee recognition at next CLK. 
3. Applies only to T2 state. (8 ns into T3). 
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A.C. TESTING INPUT, OUTPUT WAVEFORM A.C. TESTING LOAD CIRCUIT 


INPUT / OUTPUT 


2.4 DEVICE 


UNDER 
TEST 


240029-12 
A.C. Testing inputs are driven at 2.4V for a logic “1” and 0.45V 
for a logic “0”. Timing measurements are made at 1.5V. 
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C, Includes Jig Capacitance 


WAVEFORMS 


MINIMUM MODE 


T%) T3 Tw 
TCLCL TCH1ICH2-> - TCL2CL1 


BHEIS7, Ai9/Se-Aie/S3 


RDY (82C84A input) 
SEE NOTE 4 


faerie 
| 


l FLOAT 
TRHAV 


READ CYCLE 
(NOTE 1) 
(WA, INTA = Von) 


<— TCHCTV 


TCVCTV— ' 


.240029-13 
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WAVEFORMS (Continued) 


MINIMUM MODE (Continued) 


TCLCL TCHICH2 


TCHDX -> 


BHE/S7, Arp/Se-Are/Ss 


TCHDX 


AD ;5-ADpo DATA OUT = 


+ TWHDX 
WRITE CYCLE 
(NOTE 1) 


RD 
Aaa 


= FLOAT POINTS ies FLOAT 
TCHCTV TCHCTV 
INTA CYCLE 44] 
(NOTES 1 & 3) % 
AD, WR = Von 
SHE = Vo.) 


SOFTWARE HALT— 
RD, WR, INTA = Voy 
DT/R = INDETERMINATE 


INVALID ADDRESS SOFTWARE HALT 
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NOTES: 

1. All output timing measurements are made at 1.5V unless otherwise noted. 

2. RDY is sampled near the end of To, T3, Tw to determine if Tw machines states are to be inserted. 

3. Two INTA cycles run back-to-back. The 80C86A local ADDR/DATA BUS is floating during both INTA cycles. Control 
signals shown for second INTA cycle. 

4. Signals at 82C84A are shown for reference only. 
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A.C. CHARACTERISTICS 


MAX MODE SYSTEM (USING 82C88 BUS CONTROLLER) 
TIMING REQUIREMENTS 


TCLCL CLK Cycle Period 
TCLCH CLK Low Time 
TCHCL CLK High Time 


TCH1CH2 CLK Rise Time 
TCL2CL1 CLK Fall Time 


From 1.0V to 3.5V 
From 3.5V to 1.0V 


From 0.8V to 2.0V 
From 2.0V to 0.8V 


TDVCL Data in Setup Time 
TCLDX Data in Hold Time 


TRIVCL RDY Setup Time into 82C84A 
(Notes 1, 2) 
TCLR1X RDY Hold Time into 82C84A 
(Notes 1, 2) 
TRYHCH | READY Setup Time into 80C86A | 68 _ 
TCHRYX | READY HoldTimeinto80C86A | 20 — 


TRYLCL READY Inactive to 
CLK (Note 4) 

TINVCH Setup Time for Recognition 
(INTR, NMI, TEST) 
(Note 2) 


TGVCH RQ/GT Setup Time 
TCHGX RQ Hold Time into 80C86A 


TILIH Input Rise Time 
(Except CLK) (Note 5) 

TIHIL Input Fall Time 
(Except CLK) (Note 5) 
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A.C. CHARACTERISTICS (Continued) 


TIMING RESPONSES 


80C86A-2 Test 
| tamer | ee ere 


TCLML Command Active 
Delay (Note 1) 
TCLMH Command Inactive 
Delay (Note 1) | 
TRYHSH READY Active to 
Status Passive (Note 3) 
TCHSV Status Active Delay et ee oe 
TCLSH Status Inactive Delay 
TCLAV | Address Valid Delay 
TCLAX | Address Hold Time ee Bae 
TCLAZ Address Float Delay TCLAX 
TSVLH | Status ValidtoALEHigh(Note1) | 
TSVMCH Status Valid to 
MCE High (Note 1) 


TOLL 
TOLMCR 
TOLDV 
TOHDX 
TOVNV 
TOWN 
TOLRL : 
TCLR 


TRHAV RD Inactive to TCLCL— 40 
Next Address Active 

TCHDTL Direction Control 
Active Delay (Note 1) | 

TCHDTH Direction Control 
Inactive Delay (Note 1) 


TCLG 

TALRH ZTCLOL 60 

TOLOH | Output Rise Time aoe. 4 
ee 


TOHOL Output Fall Time 


From 0.8V to 2.0V 
From 2.0V to 0.8V 
NOTES: 


1. Signal at 82C84A or 82C88 shown for reference only. See 82C84A and 82C88 for the most recent specifications. 
2. Setup requirement for asynchronous signal only to guarantee recognition at next CLK. ; 

3. Applies only to T3 and wait states. 

4. Applies only to T2 state (8 ns into T3). 

5. These parameters are characterized and not 100% tested. 
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A.C. TESTING INPUT, OUTPUT WAVEFORM A.C. TESTING LOAD CIRCUIT 


INPUT / OUTPUT 
2.4 


DEVICE 
UNDER 
TEST 


240029-16 240029-17 


A.C. Testing inputs are driven at 2.4V for a logic “1” and 0.45V for C,_ Includes Jig Capacitance 
a logic “0”. Timing measurements are made at 1.5V 


WAVEFORMS 


MAXIMUM MODE 


T2 T3 


| 
TCHICH2 TCL2CL1 Tw 


it Tt be 
aE ber eal Eat es Sta 
52.51.50 (EXCEPT HAI.T) Vo Sept Nip 
beat whe SS Siam BAe aS 


TSVLH 
TCLLH cai 


SEE NOTE 5 —rrivet | 


RADY (82C84 INPUT) 


READY (80C86 INPUT) : Riel <— TCHRYX 


q 


AD15-ADo DATA IN = 


FLOAT 


ear a TCLMH- im 
S2Css OUTPUTS } Cane on Ont 
SEE NOTES 5,6 ” 


TCVNV—= 
DEN 


TCVNX —> 


240029-18 
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WAVEFORMS (Continued) 
MAXIMUM MODE (Continued) 


T 


2 
LK VCH 
pe SG ne 


$,5,85 (EXCEPT HALT 7, ROT 


WRITE CYCLE 
AD,,-AD, 


DEN 


82C88 OUTPUTS 
NOTES 5,6 AMWC OR AIOWC 


TCLMH 


MWTC OR iOWC 


RESERVED FOR 
INTA CYCLE ans ADDR 
AD;5-ADo FLOAT 


pe pee er 
AD,,-AD { POINTER ) 


6. , FLOAT Pr. FLOAT 
TSVMCH aie 
. 


MCE/ , 
PDEN TCLMCH TCHDTH 
DT/R 


82C88 OUTPUTS 
NOTES 5,6 } INTA 


cl ad HALT — 


IOWC, AIOWC, INTA, 
Owc INTA ey AD,,-AD, INVALID ADDRESS 


TCLAV 


240029-19 


NOTES: 

1. All timing measurements are made at 1.5V unless otherwise noted. 

2. RDY is sampled near the end of To, T3, Tw to determine if Tw machines states are to be inserted. 

3. Cascade address is valid between first and second INTA cycle. 

4. Two INTA cycles run back-to-back. The 80C86A local ADDR/DATA BUS is floating during both INTA cycles. Control for 
gen address is shown for second INTA cycle. 


lags the active high 82C88 CEN. 
7. Status inactive in state just prior to T,. 
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WAVEFORMS (Continued) 


ASYNCHRONOUS SIGNAL RECOGNITION 


NMI TINVCH (see note) 
INTR > SIGNAL | : 


TEST 
8 . 240029-20 


NOTE: Setup requirements for asynchronous signals only to guarantee recognition at next CLK. 


BUS LOCK SIGNAL TIMING RESET TIMING 
(MAXIMUM MODE ONLY) 


ANY CLK i ANY CLK — 


24 CLK CYCLES 
240029-22 


REQUEST/GRANT SEQUENCE TIMING (MAXIMUM MODE ONLY) 


ANY CLK 20 CLK 


PULSE 1 


PREVIOUS COPROCESSOR COPROCESSOR 
GRANT RO RELEASE 


AD,,-ADy 


een ees COPROCESSOR 
32) 91: 90 

RD, LOCK (SEE NOTE) 
BHE/S, 


240029-23 


NOTE: The coprocessor may not drive the buses outside the region shown without risking contention. 
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| 

: ntl ‘ 80C86A 
WAVEFORMS (Continued) 

HOLD/HOLD ACKNOWLEDGE TIMING (MINIMUM MODE ONLY) 


7 1 CLK CYCLE 1 OR 2 CYCLES 


240029-24 


DATA TRANSFER 
MOV = Move: 


Register/Memory to/from Register** 


76543210 76543210 
mod reg r/m 
data 


mod 0 reg r/m 


76543210 76543210 


Immediate to Register/ Memory 


Immediate to Register ye data 
Memory to Accumulator 
Accumulator to Memory 


Register/Memory to Segment Register** 


Segment Register to Register/Memory 10001100 


PUSH = Push: 
Register/Memory 
Register 
Segment Register 


POP = Pop: 
Register/ Memory 
Register 


Segment Register 


XCHG = Exchange: 
Register/Memory with Register 


Register with Accumulator 


IN = Input from: 
Fixed Port 
Variable Port 


OUT = Output to: 

Fixed Port 

Variable Port 

XLAT = Translate Byte to AL 
LEA = Load EA to Register 
LDS = Load Pointer to DS 
LES = Load Pointer to ES 
LAHF = Load AH with Flags 
SAHF = Store AH into Flags 
PUSHF = Push Flags 

POPF = Pop Flags 


01010 reg 
000reg110 


000reg111 


1000011Ww 


1110010w 
1110110w 


1T1i0111W 


© 
(eo 


10001101 
11000101 
11000100 


mod reg r/m 
mod reg r/m 


mod reg r/m 


10011100 
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Table 2. Instruction Set Summary (Continued) 


Mnemonic and Instruction Code 
Description 


ARITHMETIC 76543210 76543210 76543210 76543210 
ADD = Add: 


Reg./Memory with Register to Either 000000dw mod reg r/m 


Immediate to Register/Memory 100000sw mod 000 r/m data ifs w = 01 


Immediate to Accumulator 0000010w da data if w = 1 


ADC = Add with Carry: 


Reg./Memory with Register to Either 000100dw mod reg r/m 


mod010r/m | data —s'|§_—dataifsw = 01 


Immediate to Accumulator 0001010w data if w = 1 


Immediate to Register/Memory 100000sw 


a 
= 
FX) 


INC = Increment: 


Register/Memory LITTTAT IW mod000r/m 


Register 01000reg 
AAA = ASCIl Adjust for Add 00110111 
DAA = Decimal Adjust for Add 00100111 
SUB = Subtract: 


Reg./Memory and Register to Either 001010dw mod reg r/m 


Immediate from Register/Memory 100000sw mod 101 1r/m data ifsw = 01 


Immediate from Accumulator 0010110w data ifw = 1 
SBB = Subtract with Borrow 
Reg./Memory and Register to Either 000110dw mod reg r/m 


Immediate from Register/Memory 100000sw mod 0111r/m data data if sw = 01 


. 


Immediate from Accumulator 0001110w data ifw = 1 


DEC = Decrement: 


Register/Memory 14711716 mod 001 r/m 


Register 01001 reg 


NEG = Change Sign 117701 tw mod011 r/m 
CMP = Compare: 


Register/Memory and Register 001110dw mod reg r/m 


data ifsw = 01 


S 
s 


Immediate with Register/Memory 100000sw mod 1111r/m 
Immediate with Accumulator 0011110w 
AAS = ASCII Adjust for Subtract 00114111 
DAS = Decimal Adjust for Subtract 007101141 


MUL = Multiply (Unsigned) THI10T 1 Ww 


mod 100r/m 


IMUL = Integer Multiply (Signed) 1111011w mod 101r/m 
AAM = ASCII Adjust for Multiply 11010100 00001010 
DIV = Divide (Unsigned) 1111011w mod 110r/m 


IDIV = Integer Divide (Signed) 1111011w mod 1111r/m 
AAD = ASCIl Adjust for Divide 11010101 
CBW = Convert Byte to Word 10011000 
CWD = Convert Word to Double Word 10011001 : 


00001010 
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Table 2. instruction Set Summary (Continued) 


Mnemonic and 
Description Instruction Code 


LOGIC 76543210 76543210 76543210 
NOT = Invert 1111011w mod010r/m 
SHL/SAL = Shift Logical/Arithmetic Left 110100vw mod 100r/m 


76543210 


SHR = Shift Logical Right 110100vw mod 101 5r/m 
SAR = Shift Arithmetic Right 110100vw mod 11156/m 


ROL = Rotate Left 110100vw mod000r/m 
ROR = Rotate Right 110100vw mod 001 r/m 
RCL = Rotate Through Carry Flag Left 110100vw mod 0 10r/m 


RCR = Rotate Through Carry Right 110100vw mod 01 11r/m 


AND = And: 


Reg./Memory and Register to Either 001000dw - mod reg r/m 
Immediate to Register/Memory 1000000w mod 100r/m 
Immediate to Accumulator 0010010w data 
TEST = And Function to Flags, No Result: 
Register/Memory and Register 1000010w mod reg r/m 
Immediate Data and Register/Memory 1111011w mod000r/m 


Immediate Data and Accumulator 1010100w data 


OR = Or: 
Reg./Memory and Register to Either 000010dw mod reg r/m 


mod0011r/m 


Immediate to Register/Memory 1000000w 
Immediate to Accumulator 0000110w data 


XOR = Exclusive OR: 


Reg./Memory and Register to Either 001100dw mod reg r/m 
Immediate to Register/Memory ~ 1000000w mod 110r/m data ifw = 1 


Immediate to Accumulator 0011010w data 


STRING MANIPULATION 
REP = Repeat 1111001z 
MOVS = Move Byte/Word 1010010w 
CMPS = Compare Byte/Word 1010011w 
SCAS = Scan Byte/Word 
LODS = Load Byte/Wd to AL/AX 1010110w 
STOS = Stor Byte/Wd from AL/A 


CONTROL TRANSFER 


CALL = Call: 
Direct Within Segment 11101000 
Indirect Within Segment 11111111 mod 0 10r/m 


offset-low 


Direct Intersegment 10011010 offset-high 


seg-low seg-high 


mod0111r/m ; 


Indirect Intersegment See he oe 
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Table 2. instruction Set Summary (Continued) 


CONTROL TRANSFER (Continued) 
JMP = Unconditional Jump: 76543210 76543210 76543210 


Direct Within Segment disp-high 
Direct Within Segment-Short 11101011 


Indirect Within Segment mod 100r/m 


offset-low offset-high 
seg-low seg-high 
Indirect Intersegment 11111111 mod 101 r/m 


Direct Intersegment 


RET = Return from CALL: 
Within Segment 11000011 


Within Seg. Adding Immed to SP 11000010 


data-low data-high 
Intersegment 11001011 
Intersegment Adding Immediate to SP 11001010 data-low data-high 


JE/JZ = Jump on Equal/Zero 01110100 

JL/JNGE = Jump on Less/Not Greater 
or Equal 

JLE/JNG = Jump on Less or Equal/ 01111110 
Not Greater 
or Equal 

JBE/JNA = Jump on Below or Equal/ 0111011 
Not Above : 

JP/JPE = Jump on Parity/Parity Even 01111010 


JO = Jump on Overflow 01110000 


JS = Jump on Sign 01111000 
JNE/JNZ = Jump on Not Equal/Not Zero 


JNL/JGE = Jump on Not Less/Greater 01111101 
or Equal 

JNLE/JG = Jump on Not Less or Equal/ 01111111 
Greater 

JNB/JAE = Jump on Not Below/Above 
or Equal 

JNBE/JA = Jump on Not Below or 
Equal/Above 01110111 

JNP/JPO = Jump on Not Par/Par Odd 01111011 


JNO = Jump on Not Overflow 01110001 
JNS = Jump on Not Sign 01111001 
LOOP = Loop CX Times 11100010 
LOOPZ/LOOPE = Loop While Zero/Equal 11100001 


Zero/Equal 
JCXZ = Jump on CX Zero 171100011 


INT = Interrupt 

Type Specified 11001101 
Type 3 11001100 
INTO = Interrupt on Overflow 11001110 


IRET = Interrupt Return ‘ 17001111 
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Table 2. Instruction Set Summary (Continued) 


Mnemonic and 
Description 


PROCESSOR CONTROL 76543210 


instruction Code 


76543210 


CLC = Clear Carry 
CMC = Complement Carry 11110101 
STC = Set Carry 11111001 


CLD = Clear Direction 
STD = Set Direction 
CLI = Clear Interrupt 


STI = Set Interrupt TT1I430T1 
HLT = Hait 
WAIT = Wait 


ESC = Escape (to External Device) | tt0ttxxx | modxxxr/m__| 
LOCK = Bus Lock Prefix 
NOTES: if s w = 01 then 16 bits of immediate data form the oper- 
AL = 8-bit accumulator and 
AX = 16-bit accumulator if s w = 11 then an immediate data byte is sign extended 
CX = Count register to form the 16-bit operand 
DS = Data segment if v = 0 then “count” = 1; if v = 1 then “count” in (CL) 
ES = Extra segment register 
Above/below refers to unsigned value. x = don’t care 
Greater = more positive: z is used for string primitives for comparison with ZF FLAG 
Less = less positive (more negative) signed values SEGMENT OVERRIDE PREFIX 
if d = 1 then “to” reg; if d = 0 then “from” reg 
if w = 1 then word instruction; if w = 0 then byte instruc- 001reg110 
tion REG is assigned according to the following table: 
if mod = 11 then r/m is treated as a REG field 
if mod = 00 then DISP = 0*, disp-low and disp-high are | 16-Bit (w = 1) 8-Bit (w = 0) 
absent 
000 AX 000 AL 


if mod = 01 then DISP = disp-low sign-extended to 
16 bits, disp-high is absent 

if mod = 10 then DISP = disp-high: disp-low 

if r/m = 000 then EA = (BX) + (SI) + DISP 

if r/m = 001 then EA = (BX) + (DI) + DISP 

if r/m = 010 then EA = (BP) + (SI) + DISP 


if r/m = 011 then EA = (BP) + (Dl) + DISP 

if r/m = 100 then EA = (SI) + DISP 

if r/m = 101 then EA = (Dl) + DISP 

if r/m = 110 then EA = (BP) + DISP* 

if r/m = 111 then EA = (BX) + DISP Instructions which reference the flag register file as a 16-bit 
DISP follows 2nd byte of instruction (before data if re- object use the symbol FLAGS to represent the file: 
quired) FLAGS = 

*except if mod = 00 and r/m = 110 then EA = disp-high: X:X:X:X:(OF):(DF):(IF):(TF):(SF):(ZF):X:(AF):X:(PF):X:(CF) 
disp-low. | 

**MOV CS, REG/MEMORY not allowed. Mnemonics © Intel, 1978 


DATA SHEET REVISION REVIEW 


The following list represents key differences between this and the -001 data sheet. Please review this summa- 
ry carefully. 


1. In the Pin Description Table (Table 1), the description of the HLDA signal being issued has been corrected. 
HLDA will be issued in the middle of either the T4 or Tj state. 
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8-BIT HMOS MICROPROCESSOR 


Byte, Word, and Block Operations 


8-Bit and 16-Bit Signed and Unsigned 
Arithmetic in Binary or Decimal, 
Including Multiply and Divide 


Two Clock Rates: 
— 5 MHz for 8088 
— 8 MHz for 8088-2 


8088 
8088/8088-2 

m 8-Bit Data Bus Interface a 
m@ 16-Bit Internal Architecture ff 
= Direct Addressing Capability to 1 Mbyte 

of Memory : 
m Direct Software Compatibility with 8086 ™ 

CPU 
m 14-Word by 16-Bit Register Set with ™ 


Symmetrical Operations 


m 24 Operand Addressing Modes 


Available in EXPRESS 
— Standard Temperature Range 
— Extended Temperature Range 


The Intel 8088 is a high performance microprocessor implemented in N-channel, depletion load, silicon gate 
technology (HMOS-II), and packaged in a 40-pin CERDIP package. The processor has attributes of both 8- 
and 16-bit microprocessors. It is directly compatible with 8086 software and 8080/8085 hardware and periph- 


erals. 
MAX 
SEES fod 
STREAM BYTE 
cad SR 
BUS 
INTERFACE 
UNIT ei 
EXECUTION UNIT (RQ/GTO) 
CONTROL 
SYSTEM (RO/GT1) 
(COCK) 
(S2) 
(S1) 
(SO) 
| AW) aes (aso) 
mht ws ARITHMETIC! 
race el _ 
EXECUTION | OH =| OL | 
unt [se | 
a Pe , 
Racin PeMiee 291456-2 
Figure 2. 8088 Pin Configuration 
231456-1 
Figure 1. 8088 CPU Functional Block Diagram 
August 1990 
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Order Number: 231456-006 


intel. soo 


Table 1. Pin Description 


The following pin function descriptions are for 8088 systems in either minimum or maximum mode. The “local 
bus” in these descriptions is the direct multiplexed bus interface connection to the 8088 (without regard to 
additional bus buffers). 


_—-Sembl.__| Pin Wo. | Type. Name and Function 


AD7-ADO |/O | ADDRESS DATA BUS: These lines constitute the time multiplexed 
memory/IO address (T1) and data (T2, T3, Tw, T4) bus. These lines are 
active HIGH and float to 3-state OFF during interrupt acknowledge and 
local bus ‘“‘hold acknowledge”. 


ADDRESS BUS: These lines provide address bits 8 through 15 for the 
entire bus cycle (T1-T4). These lines do not have to be latched by ALE 
to remain valid. A15—A8 are active HIGH and float to 3-state OFF 
during interrupt acknowledge and local bus “‘hold acknowledge”’. 


A19/S6, A18/S5, ADDRESS/STATUS: During T1, these are the four most significant 

A17/S4, A16/S3 address lines for memory operations. During |/O operations, these lines 
are LOW. During memory and |/O operations, status information is 
available on these lines during T2, T3, Tw, and T4. S6 is always low. 
The status of the interrupt enable flag bit (S5) is updated at the 
beginning of each clock cycle. S4 and S3 are encoded as shown. 


This information indicates which segment register is presently being 
used for data accessing. 


These lines float to 3-state OFF during local bus ‘hold Soe S ad? 


0 (LOW) Alternate Data 
0 Stack 
1 (HIGH) Code or None 
1 | | Data 


S6 is 0 (LOW) 


READ: Read strobe indicates that the processor is performing a 

memory or I/O read cycle, depending on the state of the |O/M pin or 
S2. This signal is used to read devices which reside on the 8088 local 
bus. RD is active LOW during T2, T3 and Tw of any read cycle, and is 
guaranteed to remain HIGH in T2 until the 8088 local bus has floated. 


This signal floats to 3-state OFF in ‘hold acknowledge”’. 


READY: is the acknowledgement from the addressed memory or I/O 
device that it will complete the data transfer. The RDY signal from 
memory or I/O is synchronized by the 8284 clock generator to form 
READY. This signal is active HIGH. The 8088 READY input is not 
synchronized. Correct operation is not guaranteed if the set up and hold 
times are not met. 


INTERRUPT REQUEST: is a level triggered input which is sampled 
during the last clock cycle of each instruction to determine if the 
processor should enter into an interrupt acknowledge operation. A 
subroutine is vectored to via an interrupt vector lookup table located in 
system memory. It can be internally masked by software resetting the 
interrupt enable bit. INTR is internally synchronized. This signal is active 
HIGH. 


TEST: input is examined by the “wait for test” instruction. If the TEST 
input is LOW, execution continues, otherwise the processor waits in an 
“idle” state. This input is synchronized internally during each clock 
cycle on the leading edge of CLK. 
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Lid 
e088 intel. 
Table 1. Pin Description (Continued) 
| Pin No. | Type | Name and Function 
17 NON-MASKABLE INTERRUPT: is an edge triggered input which causes a 
type 2 interrupt. A subroutine is vectored to via an interrupt vector lookup 
vt ie 
CLK CLOCK: provides the basic timing for the processor and bus controller. It is 
asymmetric with a 33% duty cycle to provide optimized internal timing. 
‘Vec_ | 40 | | Veg:isthe +5V +10% power supply pin. 
|GND_ | 1,20 | | GND:are the ground pins. 


of the current instruction. This input is internally synchronized. 


RESET: causes the processor to immediately terminate its present activity. 
The signal must be active HIGH for at least four clock cycles. It restarts 
execution, as described in the instruction set description, when RESET 
returns LOW. RESET is internally synchronized. 


table located in system memory. NMI is not maskable internally by 
software. A transition from a LOW to HIGH initiates the interrupt at the end 
MINIMUM/MAXIMUM: indicates what mode the processor is to operate in. 
The two modes are discussed in the following sections. 


The following pin function descriptions are for the 8088 minimum mode (i.e., MN/MX = Vcc). Only the pin 
functions which are unique to minimum mode are described; all other pin functions are as described above. 


Name and Function 


STATUS LINE: is an inverted maximum mode S2. It is used to distinguish a 
memory access from an I/O access. |O/M becomes valid in the T4 preceding a 
bus cycle and remains valid until the final T4 of the cycle (I/O = HIGH, M = 
LOW). |O/M floats to 3-state OFF in local bus “hold acknowledge”’. 

WRITE: strobe indicates that the processor is performing a write memory or write 
1/O cycle, depending on the state of the |O/M signal. WR is active for T2, T3, and 
Tw of any write cycle. It is active LOW, and floats to 3-state OFF in local bus 
“hold acknowledge’”’. 


INTA: is used as a read strobe for interrupt acknowledge cycles. It is active LOW 
during T2, T3, and Tw of each interrupt acknowledge cycle. 


ADDRESS LATCH ENABLE: is provided by the processor to latch the address 


into an address latch. It is a HIGH pulse active during clock low of T1 of any bus 
cycle. Note that ALE is never floated. 


DATA TRANSMIT/RECEIVE: is needed in a minimum system that desires to use 
a data bus transceiver. It is used to control the direction of data flow through the 
transceiver. Logically, DT/R is equivalent to S1 in the maximum mode, and its 
timing is the same as for |O/M (T = HIGH, R = LOW). This signal floats to 
3-state OFF in local “hold acknowledge”’. 


DATA ENABLE: is provided as an output enable for the data bus transceiver in a 
minimum system which uses the transceiver. DEN is active LOW during each 
memory and I/O access, and for INTA cycles. For a read or INTA cycle, it is 
active from the middle of T2 until the middle of T4, while for a write cycle, it is 
active from the beginning of T2 until the middle of T4. DEN floats to 3-state OFF 
during local bus “hold acknowledge”’. 
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Table 1. Pin Description (Continued) 


[Symbol|PinNo.|Type| ss NameandFunction 


HOLD, |. 31,30 HOLD: indicates that another master is requesting a local bus “‘hold’”’. To be 
HLDA acknowledged, HOLD must be active HIGH. The processor receiving the ‘“‘hold” 
|] 


request will issue HLDA (HIGH) as an acknowledgement, in the middle of a T4 or 

Ti clock cycle. Simultaneous with the issuance of HLDA the processor will float 
the local bus and control lines. After HOLD is detected as being LOW, the 

The following pin function descriptions are for the 8088/8288 system in maximum mode (i.e., MN/MX = 

GND). Only the pin functions which are unique to maximum mode are described; all other pin functions are as 

described above. 


processor lowers HLDA, and when the processor needs to run another cycle, it 
| Symbol _| Pin No. | Type | Name and Function 


will again drive the local bus and control lines. HOLD and HLDA have internal 
STATUS: is active during clock high of T4, T1, and T2, and is returned to the 
passive state (1,1,1) during T3 or during Tw when READY is HIGH. This status is 
used by the 8288 bus controller to generate all memory and I/O access control 
signals. Any change by S2, $1, or SO during T4 is used to indicate the beginning 
of a bus cycle, and the return to the passive state in T3 and Tw is used to 
indicate the end of a bus cycle. 
These signals float to 3-state OFF during “hold acknowledge’”’. During the first 
clock cycle after RESET becomes active, these signals are active HIGH. After 
this first clock, they float to 3-state OFF. 
| 82 | Si_| S50 | Characteristics 
0(LOW) Interrupt Acknowledge 
0 Read I/O Port 
0 Write I/O Port 
0 Halt 
1(HIGH) Code Access 
Read Memory 
Write Memory 
Passive 


pull-up resistors. 
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Hold is not an asynchronous input. External synchronization should be provided if 
the system cannot otherwise guarantee the set up time. 


STATUS LINE: is logically equivalent to SO in the maximum mode. The 
combination of SSO, |0/M and DT/R allows the system to completely decode the 
current bus cycle status. 


| 1o/M_ | DT/R | SSO | Characteristics 


1(HIGH) 0 0 Interrupt Acknowledge 
0 1 Read !|/O Port 
1 0 Write I/O Port 
1 1 Halt 
0 0 Code Access 
0 1 Read Memory 
1 0 Write Memory 
1 1 Passive 


— == OO =| =| O O 
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Table 1. Pin os ae oes =~" RUE eee (Continued) 


| Symbol | Pin No. | Type | Name and aero So Marnmene ane tone. 9) mis et 


REQUEST/GRANT: pins are used by other local bus masters to force the 
processor to release the local bus at the end of the processor’s current bus 
cycle. Each pin is bidirectional with RQ/GTO having higher priority than RQ/ 
GT1. RQ/GT has an internal pull- -up resistor, So may be left unconnected. 
The request/grant sequence is as follows (See Figure 8): 


1. A pulse of one CLK wide from another local bus master indicates a local 
bus request (“‘hold’’) to the 8088 (pulse 1). 


2. During a T4 or TI clock cycle, a pulse one clock wide from the 8088 to the 
requesting master (pulse 2), indicates that the 8088 has allowed the local 
bus to float and that it will enter the “hold acknowledge” state at the next 
CLK. The CPU’s bus interface unit is disconnected logically from the local 
bus during “hold acknowledge”’. The same rules as for HOLD/HOLDA apply 
as for when the bus is released. 

3. A pulse one CLK wide from the requesting master indicates to the 8088 
(pulse 3) that the “hold” request is about to end and that the 8088 can 
reclaim the local bus at the next CLK. The CPU then enters T4. 


system bus while LOCK is active (LOW). The LOCK signal is activated by 
the “LOCK” prefix instruction and remains active until the completion of the 


30, 31 I/O 
we ae 
pulses. There must be one idle CLK cycle after each bus exchange. Pulses 
If the request is made while the CPU is performing a memory cycle, it will 
are met: 
2. Current cycle is not the low bit of a word. 
sequence. 
If the local bus is idle when the request is made the two possible events will 
1. Local bus will be released during the next clock. 
next instruction. This signal is active LOW, and floats to 3-state off in “hold 


Each master-master exchange of the local bus is a sequence of three 

are active LOW. 

release the local bus during T4 of the cycle when all the following conditions 

1. Request occurs on or before T2. 

3. Current cycle is not the first acknowledge of an interrupt acknowledge 

4. A locked instruction is not currently executing. 

follow: 

2. Amemory cycle will start within 3 clocks. Now the four rules for a currently 
LOCK 
eck ee acknowledge”’. 


active memory cycle apply with condition number 1 already satisfied. 
QS1,QS0 | 24,25 QUEUE STATUS: provide status to allow external tracking of the internal 

8088 instruction queue. 

The queue status is valid during the CLK cycle after which the queue 

operation is performed. 

| = @si_—s | Qso | Characteristics 

0(LOW) No Operation 

0 First Byte of Opcode from Queue 

1(HIGH) Empty the Queue 

1 Subsequent Byte from Queue 


LOCK: indicates that other system bus masters are not to gain control of the 
/-— | 34 =| © | Pin 34is always high in the maximum mode. 


-O-O 
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Figure 3. Memory Organization 


FUNCTIONAL DESCRIPTION 


Memory Organization 


The processor provides a 20-bit address to memory 
which locates the byte being referenced. The memo- 
ry is organized as a linear array of up to 1 million 
bytes, addressed as 00000(H) to FFFFF(H). The 
memory is logically divided into code, data, extra 
data, and stack segments of up to 64K bytes each, 
with each segment falling on 16-byte boundaries 
(See Figure 3). 


All memory references are made relative to base ad- 
dresses contained in high speed segment registers. 
The segment types were chosen based on the ad- 


Local Data 


DATA (DS) 
External (Global) Data EXTRA (ES) ) 


[instructions | _CODE(CS) | _Automatiowith allinstucion prefetch. 
a i 
relative to BP base register except data references. 
Data references when: relative to stack, destination 


of string operation, or explicity overridden. 


Destination of string operations: Explicitly selected 
using a segment override. 


dressing needs of programs. The segment register 
to be selected is automatically chosen according to 
the rules of the following table. All information in one 
segment type share the same logical attributes (e.g. 
code or data). By structuring memory into relocat- 
able areas of similar characteristics and by automati- 
cally selecting segment registers, programs are 
shorter, faster, and more structured. 


Word (16-bit) operands can be located on even or 
odd address boundaries. For address and data oper- 
ands, the least significant byte of the word is stored 
in the lower valued address location and the most 


‘ gignificant byte in the next higher address location. 


The BIU will automatically execute two fetch or write 
cycles for 16-bit operands. 
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Certain locations in memory are reserved for specific 
CPU operations (See Figure 4). Locations from ad- 
dresses FFFFOH through FFFFFH are reserved for 
operations including a jump to the initial system ini- 
tialization routine. Following RESET, the CPU will al- 
ways begin execution at location FFFFOH where the 
jump must be located. Locations OOOOOH through 
OO3FFH are reserved for interrupt operations. Four- 
byte pointers consisting of a 16-bit segment address 
and a 16-bit offset address direct program flow to 
one of the 256 possible interrupt service routines. 
The pointer elements are assumed to have been 
stored at their respective places in reserved memory 
prior to the occurrence of interrupts. 


Minimum and Maximum Modes 


The requirements for supporting minimum and maxi- 
mum 8088 systems are sufficiently different that 
they cannot be done efficiently with 40 uniquely de- 
fined pins. Consequently, the 8088 is equipped with 
a strap pin (MN/MX) which defines the system con- 


FFFFFH 
RESET BOOTSTRAP 


PROGRAM JUMP FFFFOH 


INTERRUPT POINTER 
FOR TYPE 255 


e 
e 
. 7H 
INTERRUPT POINTER 
FOR TYPE 1 4H 
INTERRUPT POINTER 3H 
FOR TYPE 0 a 
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Figure 4. Reserved Memory Locations 
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figuration. The definition of a certain subset of the 
pins changes, dependent on the condition of the 
strap pin. When the MN/MxX pin is strapped to GND, 
the 8088 defines pins 24 through 31 and 34 in maxi- 
mum mode. When the MN/MxX pin is strapped to 


Vcc, the 8088 generates bus control signals itself on 
pins 24 through 31 and 34. 


The minimum mode 8088 can be used with either a 
multiplexed or demultiplexed bus. The multiplexed 
bus configuration is compatible with the MCS-85 
multiplexed bus peripherals. This configuration (See 
Figure 5) provides the user with a minimum chip 
count system. This architecture provides the 8088 
processing power in a highly integrated form. 


The demultiplexed mode requires one latch (for 64K 
addressability) or two latches (for a full megabyte of 
addressing). A third latch can be used for buffering if 
the address bus loading requires it. A transceiver 
can also be used if data bus buffering is required 
(See Figure 6). The 8088 provides DEN and DT/R to 
control the transceiver, and ALE to latch the ad- 
dresses. This configuration of the minimum mode 


. provides the standard demultiplexed bus structure 


with heavy bus buffering and relaxed bus timing re- 
quirements. | 


The maximum mode employs the 8288 bus control- 
ler (See Figure 7). The 8288 decodes status lines 
SO, $1, and S2, and provides the system with all bus 
control signals. Moving the bus control.to the 8288 
provides better source and sink current capability to 
the control lines, and frees the 8088 pins for extend- 
ed large system features. Hardware lock, queue 
status, and two request/grant interfaces are provid- 
ed by the 8088 in maximum mode. These features 
allow co-processors in local bus and remote bus 
configurations. 
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Figure 5. Multiplexed Bus Configuration 
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Figure 6. Demultiplexed Bus Configuration 
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Figure 7. Fully Buffered System Using Bus Controller 
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Bus Operation 


The 8088 address/data bus is broken into three 
parts—the lower eight address/data bits (ADO- 
AD7), the middle eight address bits (A8-A15), and 
the upper four address bits (A16-A19). The ad- 
dress/data bits and the highest four address bits are 
time multiplexed. This technique provides the most 
efficient use of pins on the processor, permitting the 
use of a standard 40 lead package. The middle eight 
address bits are not multiplexed, i.e. they remain val- 


(4+ Nwair) = Tey 


T3 | Twair | Ta 


ADDRISTATUS 


ADDRIDATA 


KN 


MEMORY ACCESS TIME 


8088 


id throughout each bus cycle. In addition, the bus 
can be demultiplexed at the processor with a single 
address latch if a standard, non-multiplexed bus is 
desired for the system. 


Each processor bus cycle consists of at least four 
CLK cycles. These are referred to as T1, T2, T3, and 
T4 (See Figure 8). The address is emitted from the 
processor during T1 and data transfer occurs on the 
bus during T3 and T4. T2 is used primarily for chang- 


(4+ Nwait) = Toy 
Ty | T2 | T3 TW 


GOES INACTIVE IN THE STATE 
JUST PRIOR TO T,4 


AS 


WAIT 
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Figure 8. Basic System Timing 
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ing the direction of the bus during read operations. In 
the event that a “NOT READY” indication is given 
by the addressed device, ‘“‘wait” states (Tw) are in- 
serted between T3 and T4. Each inserted “wait” 
state is of the same duration as a CLK cycle. Periods 
can occur between 8088 driven bus cycles. These 
are referred to as “idle” states (Ti), or inactive CLK 
cycles. The processor uses these cycles for internal 
housekeeping. 


During T1 of any bus cycle, the ALE (address latch 
enable) signal is emitted (by either the processor or 
the 8288 bus controller, depending on the MN/MX 
strap). At the trailing edge of this pulse, a valid ad- 
dress and certain status information for the cycle 
may be latched. 


Status bits SO, S1, and S2 are used by the bus con- 
troller, in maximum mode, to identify the type of bus 
transaction according to the following table: 


| $2 | 81 | S0| Characteristics 


0(LOW) Interrupt Acknowledge 
Read I/O 

Write |/O 

Halt 

Instruction Fetch 

Read Data from Memory 
Write Data to Memory 
Passive (No Bus Cycle) 


0 
0 
, 
1 
0 
0 
1 
1 


-oOoO--'O0O-90O-+- 90 


Status bits S3 through S6 are multiplexed with high 
order address bits and are therefore valid during T2 
through T4. S3 and S4 indicate which segment reg- 
ister was used for this bus cycle in forming the ad- 
dress according to the following table: 


| Ss | Ss | __ Characteristics 


0(LOW) Alternate Data (Extra Segment) 
0 Stack 

1(HIGH) Code or None 

1 Data 


S5 is a reflection of the PSW interrupt enable bit. S6 
is always equal to 0. 


I/O Addressing 


In the 8088, I/O operations can address up to a 
maximum of 64K I/O registers. The I/O address ap- 
pears in the same format as the memory address on 
bus lines A15—A0. The address lines A19-A16 are 
zero in |/O operations. The variable I/O instructions, 
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which use register DX as a pointer, have full address 
capability, while the direct I/O instructions directly 
address one or two of the 256 I/O byte locations in 
page 0 of the I/O address space. I/O ports are ad- 
dressed in the same manner as memory locations. 


Designers familiar with the 8085 or upgrading an 
8085 design should note that the 8085 addresses 
I/O with an 8-bit address on both halves of the 16- 
bit address bus. The 8088 uses a full 16-bit address 
on its lower 16 address lines. 


EXTERNAL INTERFACE 


Processor Reset and Initialization 


Processor initialization or start up is accomplished 
with activation (HIGH) of the RESET pin. The 8088 
RESET is required to be HIGH for greater than four 
clock cycles. The 8088 will terminate operations on 
the high-going edge of RESET and will remain dor- 
mant as long as RESET is HIGH. The low-going 
transition of RESET triggers an internal reset se- 
quence for approximately 7 clock cycles. After this 
interval the 8088 operates normally, beginning with 
the instruction in absolute locations FFFFOH (See 
Figure 4). The RESET input is internally synchroniz- 
ed to the processor clock. At initialization, the HIGH 
to LOW transition of RESET must occur no sooner 
than 50 us after power up, to allow complete initiali- 
zation of the 8088. 


NMI asserted prior to the 2nd clock after the end of 
RESET will not be honored. If NMI is asserted after 
that point and during the internal reset sequence, 
the processor may execute one instruction before 
responding to the interrupt. A hold request active 
immediately after RESET will be honored before the 
first instruction fetch. 


All 3-state outputs float to 3-state OFF during 
RESET. Status is active in the idle state for the first 
clock after RESET becomes active and then floats 
to 3-state OFF. ALE and HLDA are driven low. 


interrupt Operations 


Interrupt operations fall into two classes: software or 
hardware initiated. The software initiated interrupts 
and software aspects of hardware interrupts are 
specified: in the instruction set description in the 
iAPX 88 book or the iAPX 86,88 User’s Manual. 
Hardware interrupts can be classified as nonmaska- 
ble or maskable. 
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Interrupts result in a transfer of control to a new pro- 
gram location. A 256 element table containing ad- 
dress pointers to the interrupt service program loca- 
tions resides in absolute locations 0 through 3FFH 
(See Figure 4), which are reserved for this purpose. 
Each element in the table is 4 bytes in size and cor- 
responds to an interrupt “type.” An interrupting de- 
vice supplies an 8-bit type number, during the inter- 
rupt acknowledge sequence, which is used to vector 
through the appropriate element to the new interrupt 
service program location. 


Non-Maskable Interrupt (NMI) 


The processor provides a single non-maskable inter- 
rupt (NMI) pin which has higher priority than the 
maskable interrupt request (INTR) pin. A typical use 
would be to activate a power failure routine. The 
NMI is edge-triggered on a LOW to HIGH transition. 
The activation of this pin causes a type 2 interrupt. 


NMI is required to have a duration in the HIGH state 
of greater than two clock cycles, but is not required 
to be synchronized to the clock. Any higher going 
transition of NMI is latched on-chip and will be serv- 
iced at the end of the current instruction or between 
whole moves (2 bytes in the case of word moves) of 
a block type instruction. Worst case response to 
NMI would be for multiply, divide, and variable shift 
instructions. There is no specification on the occur- 
rence of the low-going edge; it may occur before, 
during, or after the servicing of NMI. Another high- 
going edge triggers another response if it occurs af- 
ter the start of the NMI procedure. The signal must 
be free of logical spikes in general and be free of 
bounces on the low-going edge to avoid triggering 
extraneous responses. 


Maskable Interrupt (INTR) 


The 8088 provides a single interrupt request input 
(INTR) which can be masked internally by software 
with the resetting of the interrupt enable (IF) flag bit. 
The interrupt request signal is level triggered. It is 
internally synchronized during each clock cycle on 
the high-going edge of CLK. To be responded to, 
INTR must be present (HIGH) during the clock peri- 
od preceding the end of the current instruction or the 
end of a whole move for a block type instruction. 
During interrupt response sequence, further inter- 
rupts are disabled. The enable bit is reset as part of 
the response to any interrupt (INTR, NMI, software 
interrupt, or single step), although the FLAGS regis- 
ter which is automatically pushed onto the stack re- 
flects the state of the processor prior to the inter- 
rupt. Until the old FLAGS register is restored, the 
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enable bit will be zero unless specifically set by an 
instruction. 


During the response sequence (See Figure 9), the 
processor executes two successive (back to back) 
interrupt acknowledge cycles. The 8088 emits the 
LOCK signal (maximum mode only) from T2 of the 
first bus cycle until T2 of the second. A local bus 
“hold” request will not be honored until the end of 
the second bus cycle. In the second bus cycle, a 
byte is fetched from the external interrupt system 
(e.g., 8259A PIC) which identifies the source (type) 
of the interrupt. This byte is multiplied by four and 
used as a pointer into the interrupt vector lookup 
table. An INTR signal left HIGH will be continually 
responded to within the limitations of the enable bit 
and sample period. The interrupt return instruction 
includes a flags pop which returns the status of the 
original interrupt enable bit when it restores the 
flags. 


HALT 


When a software HALT instruction is executed, the 
processor indicates that it is entering the HALT state 
in one of two ways, depending upon which mode is 
strapped. In minimum mode, the processor issues 
ALE, delayed by one clock cycle, to allow the sys- 
tem to latch the halt status. Halt status is available 
on 1O/M, DT/R, and SSO. In maximum mode, the 
ee issues appropriate HALT status on S2, 
1, and SO, and the 8288 bus controller issues one 
ALE. The 8088 will not leave the HALT state when a 
local bus hold is entered while in HALT. In this case, 
the processor reissues the HALT indicator at the 
end of the local bus hold. An interrupt request or 
RESET will force the 8088 out of the HALT state. 


Read/Modify/Write (Semaphore) 
Operations via LOCK 


The LOCK status information is provided by the 
processor when consecutive bus cycles are required 
during the execution of an instruction. This allows 
the processor to perform read/modify/write opera- 
tions on memory (via the “exchange register with 
memory” instruction), without another system bus 
master receiving intervening memory cycles. This is 
useful in multiprocessor system configurations to ac- 
complish “test and set lock” operations. The LOCK 
signal is activated (LOW) in the clock cycle following 
decoding of the LOCK prefix instruction. It is deacti- 
vated at the end of the last bus cycle of the instruc- 
tion following the LOCK prefix. While LOCK is active, 
a request on a RQ/GT pin will be recorded, and then 
honored at the end of the LOCK. 
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Figure 9. Interrupt Acknowledge Sequence 


External Synchronization via TEST 


As an alternative to interrupts, the 8088 provides a 
single software-testable input pin (TEST). This input 
is utilized by executing a WAIT instruction. The sin- 
gle WAIT instruction is repeatedly executed until the 
TEST input goes active (LOW). The execution of 
WAIT does not consume bus cycles once the queue 
is full. 


If a local bus request occurs during WAIT execution, 
the 8088 3-states all output drivers. If interrupts are 
enabled, the 8088 will recognize interrupts and pro- 
cess them. The WAIT instruction is then refetched, 
and reexecuted. 


Basic System Timing 


In minimum mode, the MN/MX pin is strapped to 
Vcc and the processor emits bus control signals 
compatible with the 8085 bus structure. In maximum 
mode, the MN/MxX pin is strapped to GND and the 
processor emits coded status information which the 
8288 bus controller uses to generate MULTIBUS 
compatible bus control signals. 


System Timing—Minimum System 
(See Figure 8) 


The read cycle begins in T1 with the assertion of the 
address latch enable (ALE) signal. The trailing (low 
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going) edge of this signal is used to latch the ad- 
dress information, which is valid on the address/ 
data bus (ADO-AD7) at this time, into the 
8282/8283 latch. Address lines A8 through A15 do 
not need to be latched because they remain valid 
throughout the bus cycle. From T1 to T4 the |O/M 
signal indicates a memory or I/O operation. At T2 
the address is removed from the address/data bus 
and the bus goes to a high impedance state. The 
read control signal is also asserted at T2. The read 
(RD) signal causes the addressed device to enable 
its data bus drivers to the local bus. Some time later, 
valid data will be available on the bus and the ad- 
dressed device will drive the READY line HIGH. 
When the processor returns the read signal to a 
HIGH level, the addressed device will again 3-state 
its bus drivers. If a transceiver is required to buffer 
the 8088 local bus, signals DT/R and DEN are pro- 
vided by the 8088. 


A write cycle also begins with the assertion of ALE 
and the emission of the address. The |O/M signal is 
again asserted to indicate a memory or I/O write 
operation. In T2, immediately following the address 
emission, the processor emits the data to be written 
into the addressed location. This data remains valid 
until at least the middle of T4. During T2, T3, and 
Tw, the processor asserts the write control signal. 
The write (WR) signal becomes active at the begin- 
ning of T2, as opposed to the read, which is delayed 
somewhat into T2 to provide time for the bus to 
float. 
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The basic difference between the interrupt acknowl- 
edge cycle and a read cycle is that the interrupt ac- 
knowledge (INTA) signal is asserted in place of the 
read (RD) signal and the address bus is floated. 
(See Figure 9) In the second of two successive INTA 
cycles, a byte of information is read from the data 
bus, as supplied by the interrupt system logic (i.e. 
8259A priority interrupt controller). This byte identi- 
fies the source (type) of the interrupt. It is multiplied 
by four and used as a pointer into the interrupt vec- 
tor lookup table, as described earlier. 


Bus Timing—Medium comprextty 
Systems 


(See Figure 10) 


For medium complexity systems, the MN/MX pin is 
connected to GND and the 8288 bus controller is 
added to the system, as well as a latch for latching 
the system address, and a transceiver to allow for 
bus loading greater than the 8088 is capable of han- 
dling. Signals ALE, DEN, and DT/R are generated 
by the 8288 instead of the processor in this configu- 
ration, although their timing remains relatively the 
same. The 8088 status outputs (S2, S1, and SO) pro- 
vide type of cycle information and become 8288 in- 
puts. This bus cycle information specifies read 
(code, data, or I/O), write (data or I/O), interrupt ac- 
knowledge, or software halt. The 8288 thus issues 
control signals specifying memory read or write, |/O 
read or write, or interrupt acknowledge. The 8288 
provides two types of write strobes, normal and ad- 
vanced, to be applied as required. The normal write 
strobes have data valid at the leading edge of write. 
The advanced write strobes have the same timing 
as read strobes, and hence, data is not valid at the 
leading edge of write. The transceiver receives the 
usual T and OE inputs from the 8288’s DT/R and 
DEN outputs. 


The pointer into the interrupt vector table, which is . 


passed during the second INTA cycle, can derive 
from an 8259A located on either the local bus or the 
system bus. If the master 8289A priority interrupt 
controller is positioned on the local bus, a TTL gate 
is required to disable the transceiver when reading 
from the master 8259A during the interrupt acknowl- 
edge sequence and software “poll”. 


The 8088 Compared to the 8086 


The 8088 CPU is an 8-bit processor designed 
around the 8086 internal structure. Most internal 
functions of the 8088 are identical to the equivalent 
8086 functions. The 8088 handles the external bus 
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the same way the 8086 does with the distinction of 
handling only 8 bits at a time. Sixteen-bit operands 
are fetched or written in two consecutive bus cycles. 
Both processors will appear identical to the software 
engineer, with the exception of execution time. The 
internal register structure is identical and all instruc- 
tions have the same end result. The differences be- 
tween the 8088 and 8086 are outlined below. The 
engineer who is unfamiliar with the 8086 is referred 
to the iAPX 86, 88 User’s Manual, Chapters 2 and 4, 
for function description and instruction set informa- 
tion. Internally, there are three differences between 
the 8088 and the 8086. All changes are related to 
the 8-bit bus interface. 


e The queue length is 4 bytes in the 8088, whereas 
the 8086 queue contains 6 bytes, or three words. 
The queue was shortened to prevent overuse of 
the bus by the BIU when prefetching instructions. 
This was required because of the additional time 
necessary to fetch instructions 8 bits at a time. 


e To further optimize the queue, the prefetching al- 
gorithm was changed. The 8088 BIU will fetch a 
new instruction to load into the queue each time 
there is a 1 byte hole (space available) in the 
queue. The 8086 waits until a 2-byte space is 
available. 


e The internal execution time of the instruction set 
is affected by the 8-bit interface. All 16-bit fetches 
and writes from/to memory take an additional 
four clock cycles. The CPU is also limited by the 
speed of instruction fetches. This latter problem 
only occurs when a series of simple operations 
occur. When the more sophisticated instructions 
of the 8088 are being used, the queue has time to 
fill and the execution proceeds as fast as the exe- 
cution unit will allow. 


The 8088 and 8086 are completely software com- 
patible by virtue of their identical execution units. 
Software that is system dependent may not be com- 
pletely transferable, but software that is not system 
dependent will operate equally as well on an 8088 
and an 8086. 


The hardware interface of the 8088 contains the ma- 
jor differences between the two CPUs. The pin as- 
signments are nearly identical, however, with the fol- 
lowing functional changes: 


e A8—A15—These pins are only address outputs 
on the 8088. These address lines are latched in- 
ternally and remain valid throughout a bus cycle 
in a manner similar to the 8085 upper address 
lines. 


e BHE has no meaning on the 8088 and has been 
eliminated. , 
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e SSO provides the SO status information in the e |O/M has been inverted to be compatible with the 
minimum mode. This output occurs on pin 34 in MCS-85 bus structure. 


minimum mode only. DT/R, 1O/M, and SSO pro- e ALE is delayed by one clock cycle in the mini- 
vide the complete bus status in minimum mode. mum mode when entering HALT, to allow the 


status to be latched with ALE. 
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Figure 10. Medium Complexity System Timing 
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ABSOLUTE MAXIMUM RATINGS* 
Ambient Temperature Under Bias ....0°C to +70°C 


*WARNING: Stressing the device beyond the “Absolute 


Case Temperature (PIGBUC) .i5cnewns 0°C to + 95°C Maximum Ratings” may cause permanent damage. 
Case Temperature (CERDIP) ........ 0°C to +75°C These are stress ratings only. Operation beyond the 
eS 4 “Operating Conditions” is not recommended and ex- 
Storage Temperature .......... 65°C to + 150°C tended exposure beyond the “Operating Conditions” 
Voltage on Any Pin with may affect device reliability. 
Respect to Ground............... —1.0 to 7V 
POWGL LASSIDSNON Gc Sia ck s whcadewe cava pee 2.5 Watt 


D.C. CHARACTERISTICS 

(Ta = 0°C to 70°C, Tcoase (Plastic) = 0°C to 95°C, Tcase (CERDIP) = 0°C to 75°C, 
Ta = 0°C to 55°C and Tcase = 0°C to 75°C for P8088-2 only 

Ta is guaranteed as long as Tcasg is not exceeded) 


(Vcc = 5V +10% for 8088, Vcc = 5V +5% for 8088-2 and Extended Temperature EXPRESS) 


| Parameter | Min Units | TestConditions 
rinputLow Voltage «dt 08 
FinputHighVotage «| =20 | Voc +05 | V | (Notes) 

aman 
Power Supply Current: 8088-2 


| Symbol 
loc 
P8088 
Input Leakage Current 


8088 


rie 
Output and I/O Leakage Current 


Capacitance If Input Buffer 


(All Input Except 
ADp-AD7, RQ/GT) 


Capacitance of I/O Buffer 
ADyp-AD7, RQ/GT) 


NOTES: 
1. Vi, tested with MN/MX Pin = OV 
Vin tested with MN/MX Pin = 5V 
MN/MxX Pin is a strap Pin 
2. Not applicable to RQ/GT0O and RQ/GT1 Pins (Pins 30 and 31) 
3. HOLD and HLDA |; Min = 30 pA, Max = 500 pA 
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A.C. CHARACTERISTICS 
(Ta = 0°C to 70°C, Tcase (Plastic) = 0°C to 95°C, Tcase (CERDIP) = 0°C to 75°C, 


Ta = 0°C to 55°C and Tcase = 0°C to 80°C for P8088-2 only 
Ta is guaranteed as long as Tcase is not exceeded) 


(Vcc = 5V +10% for 8088, Voc = 5V +5% for 8088-2 and Extended Temperature EXPRESS) 


Test 
Conditions 


From 1.0V to 3.5V 
From 3.5V to 1.0V 


From 0.8V to 2.0V 
From 2.0V to 0.8V 


MINIMUM COMPLEXITY SYSTEM TIMING REQUIREMENTS 


- symiot | Parmar 


TCLCL CLK Cycle Period 


Trowot | cuKighTime —~=ds— 
rowicr2 | ouKFice time 
Prowow | cuKFalTime i 
rover | Datainseup Tine | 30 


Max | 

| 500 

eee 

ee 

| 

re, 

, a 

ee ieee 
(Notes 1, 2) 

ee fee tt 
(Notes 1, 2) 

a 

| 20 | 


TRYHCH READY Setup Time 118 
into 8088 

TRYLCL READY Inactive to CLK 
(Note 3) 


TTveH | HOLD seupTime +a 
ee 
wl 


TCHRYX READY Hold Time 
into 8088 


TINVCH INTR, NMI, TEST Setup Time 
(Note 2) 


TILIH Input Rise Time (Except CLK) 
TIHIL Input Fall Time (Except CLK) 


eck -(? eek 
o;oO 
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A.C. CHARACTERISTICS (Continued) 


TIMING RESPONSES 


TCLAV | Address Valid Delay 


8088-2 


Test 
Conditions 


TCLAX 

TCLAZ 
TLHLL TCLCH— 20 
TCLLH | ALE ActiveDelay | 
TCHLL | ALE|nactiveDelay | 


TLLAX Address Hold Time to TCHCL— 10 
ALE Inactive 


TCLDV_ | Data Valid Delay ae ae 10 


TCHDX | Data Hold Time fe ca eS 
TWHDX | Data Hold Time after WR | TCLCH-30] =| TCLCH—30 


oak, 
=) 


TCVCTV | Control Active Delay 1 
TCHCTV | Control Active Delay 2 110 
TCVCTX | Control Inactive Delay 


TAZRL_ | Address Float to READ 
Active 


TCLRL | RD Active Delay / 10} 165 
TCLRH | RD Inactive Delay 150 10 


—s 
— 
oO 
oO 


=) 


Address Active 
TCLHAV 160| 10 
ww [WAwiath ____—‘aTouc.—eo] | rcuc.—a0 
TOLOH |OuputRiseTime | «| (20 
I ee 


From 0.8V to 2.0V 
TOHOL | Output Fall Time From 2.0V to 0.8V 
NOTES: 


1. Signal at 8284A shown for reference only. See 8284A data sheet for the most recent specifications. 
2. Set up requirement for asynchronous signal only to guarantee recognition at next CLK. 
3. Applies only to T2 state (8 ns into T3 state). 


—_k, 
oO 
— = ~“ “NI 


PF EAR) AR BAAR 
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A.C. TESTING INPUT, OUTPUT WAVEFORM A.C. TESTING LOAD CIRCUIT 


0.45 C, = 100 pF 


231456-11 a 


A.C. Testing; Inputs are driven at 2.4V for a logic “1” and 0.45V 

for a logic ‘0’. Timing measurements are made at 1.5V for both a 

logic “1” and logic “0”. : ; 231456-12 
C, Includes Jig Capacitance 


WAVEFORMS 
BUS TIMING—MINIMUM MODE SYSTEM 


Ty 
TCLCL TCHICH2 


CLK (8284 Output) i 
’ 


Arg/Se-Ai@/S3 


RDY (8284 Input) 
SEE NOTES 


| 


READY (8088 Input) | 


a. FLOAT 


TRHAV 


READ CYCLE 


(NOTE 1) TCHCTV 
(WR, INTA = Von) 


TCVCTV—> i eae 


231456-13 
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WAVEFORMS (Continued) 


BUS TIMING—MINIMUM MODE SYSTEM (Continued) 


T2 T3 Tw 
TCHICH2 TCL2CL1 / 


< 
a 
b 


CLK (8284 Output) 


re] 
- 


od 


WRITE CYCLE 
NOTE 1 


TCVCTX 
=—TDVCL <—TCLDX 


PO! 
FLOAT —, = FLOAT 
TCHCTV TCHCTV 


INTA CYCLE © 
NOTES 1,3 


D, WR = Von) 


Lv 


SOFTWARE HALT - 
DEN.AD.WRLINTA Vox INVALID ADDRESS SOFTWARE HALT 
DT/R INDETERMINATE 


231456-14 


NOTES: 

1. All signals switch between Vox and Vo, unless otherwise specified. 

2. RDY is sampled near the end of To, T3, Tw to determine if Ty machines states are to be inserted. 

3. Two INTA cycles run back-to-back. The 8088 local ADDR/DATA bus is floating during both INTA cycles. Control 
signals are shown for the second INTA cycle. 

4. Signals at 8284 are shown for reference only. 

5. All timing measurements are made at 1.5V unless otherwise noted. 
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A.C. CHARACTERISTICS 
MAX MODE SYSTEM (USING 8288 BUS CONTROLLER) 


TIMING REQUIREMENTS 


TOHCL | CLK High Time __——*i; a 
rou. | GLKFalTime si 
30 


Test 
Conditions 


From 1.0V to 3.5V 
From 3.5V to 1.0V 


From 0.8V to 2.0V 
From, 2.0V to 0.8V 


TCLCL 


TDVCL Data in Setup Time . 
TCLDX | Data in Hold Time 10 | 


TRIVCL RDY Setup Time into 8284 
(Notes 1, 2) 
TCLR1X RDY Hold Time into 8284 
(Notes 1, 2) 
TRYHCH | READY Setup Time into 8088 
TCHRYX | READY Hold Time into 8088 


TRYLCL READY Inactive to CLK 
(Note 4) 
TINVCH Setup Time for Recognition 
(INTR, NMI, TEST) (Note 2) 
TGVCH | RQ/GT Setup Time 20 
TCHGX | RQHoldTimeintososs | 40 | 


TILIN ° Input Rise Time (Except CLK) 


Input Fall Time (Except CLK) 


TIHIL 
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A.C. CHARACTERISTICS (Continued) 


TIMING RESPONSES 


Parameter 


2 


© 
° 
© 
T 


Test 
Conditions 


Command Active Delay 


(Note 1) 


TCLMH_ | Command Inactive Delay 
(Note 1) 

TRYHSH | READY Active to 
Status Passive (Note 3) 


ar 
O 
a 
— 


V 
H 
CLAV 
CLAX |AddressHoldTime | 10 | 
CLAZ |AddressFloatDelay | TCLAX__| 80 | __ TCLAX 


TSVLH | Status Valid to ALE High 
(Note 1) 
TSVMCH | Status Valid to MCE High 
(Note 1) 
CLK Low to ALE Valid 
(Note 1) 


H|CLK LowtoMCE(Note1) | 

L__|ALE Inactive Delay (Note 1) |__| 15 

L|MCE Inactive Delay (Note 1)| 

TCLDV [DataValidDelay | 10 1110 
x 10 


TCVNX_ | Control Inactive Delay 45 
(Note 1 


10 
L__|RD Active Delay 
H |RD Inactive Delay ae eee 


TRHAV |RD Inactive to Next TCLCL—45 
Address Active 


TCHDTL | Direction Control 
Active Delay (Note 1) 
Inactive Delay (Note 1) 


L_ | GT Active Delay Ti aie 


4/4 
2|9 
O1M 


5 


— 


a] oo 
OQ '@) 
E| Ee 
=| 5 


Ci = 20-100 pF for 
All 8088 Outputs 

in Addition to 
Internal Loads 


sisal os a/alalala 
ale) Rl 8! gigielelg 
Dia DV az.|Q -_ ie 
a < C) 

s0 

z. 

oS 

o = 

22/32 

> 

2 

2. 

@O 

O 

of 

® 

< 

aS 

oO 


ies 
O 
+ 
a 
~) 
= 
© 
Q 
. 
2) 
— 
@) 
2) 
= 
= 
o 


H | GT Inactive Delay 

H |RD Width 2TCLCL—75 
H | Output Rise Time eee 
TOHOL | Output Fall Time A eel 
NOTES: 


1. Signal at 8284 or 8288 shown for reference only. 

2. Setup requirement for asynchronous signal only to guarantee recognition at next CLK. 
3. Applies only to T3 and wait states. 

4. Applies only to T2 state (8 ns into T3 state). 
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2TCLCL—50 


From 0.8V to 2.0V 
From 2.0V to 0.8V 


al = Lp aS aah, =k mere “J 
Nh S a; an a; al oa ro) 


afalalal a 
O/;D}O;}0O O 
mie it if. 
O};DID|@ 


g * a] rhe OF Nee .* ye... _ i. _ 
‘ pe aay oy = = : . Vs 
L ba ; s : 
- ; a 
; ae 
: a ' i 
' 


A.C. TESTING INPUT, OUTPUT WAVEFORM A.C. TESTING LOAD CIRCUIT 


2.4 
1.5 TEST ¢ DEVICE 
<< TEST POINTS ———> 1.5 UNDER 
TEST 

0.45 


231456-11 


A.C. Testing; Inputs are driven at 2.4V for a logic “1” and 0.45V 

for a logic “0”. Timing measurements are made at 1.5V for both a 

logic “1” and logic “0”. 231456-12 
C,. Includes Jig Capacitance 


WAVEFORMS (Continued) 


BUS TIMING—MAXIMUM MODE SYSTEM 


§2,51,50 (EXCEPT HALT) 


Ais—Ag 


i 


She 
fal 
oT 


Arg/S¢-Aig/S3 
| ALE (8288 OUTPUT) 


SEE NOTE 5 
| RDY (8284 INPUT) 


READY (8088 INPUT) | 


| 


: - 
ae 


He 


RYHC 
< OVCL CLOX—* 


(onl) 
FLOAT 


READ CYCLE 


ee.” 


TRHAV 
la 


ee 5 — a ' ses 


T —_ 
CL TCLMH 
8288 OUTPUTS | 


MROC OR JORG 
SEE NOTES 5.6 
TCVNV—= 
DEN 


TCVNX—> — 


231456-15 
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WAVEFORMS (Continued) 


BUS TIMING—MAXIMUM MODE SYSTEM (USING 8288) 


| Ai 


5, 5). 5 (EXCEPT HALT) Roe al 


WRITE CYCLE 


AD; - ADo 


8288 OUTPUTS 
SEE NOTES 5,6 AMWC OR AIOWC 


f 
“4 
oO 
c 
= 
= 


C OR IOWC 


INTA CYCLE 


A1s— Ag 
(SEE NOTES 3,4) 


TCHOTH 


8288 OUTPUTS 
SEE NOTES 5,6 | 'NTA 


DEN 


SOFTWARE 
HALT - (DEN = Vo. ;RD, MRDC,IORC, MWTC,AMWC.IOWC, AIOWC.INTA. OT/A = Von. 


AD7 — ADo, Ais - Ag 
INVALID ADDRESS 


NOTES: 231456-16 
1. All signals switch between Voy and Vo, unless otherwise specified. 

2. RDY is sampled near the end of To, T3, Ty to determine if Ty machines states are to be inserted. 

3. Cascade address is valid between first and second INTA cycles. 

4. Two INTA cycles run back-to-back. The 8088 local ADDR/DATA bus is floating during both INTA cycles. Control for 
pointer address is shown for second INTA cycle. 

5. Signals at 8284 or 8288 are shown for reference only. 

6. The issuance of the 8288 command and control signals (MRDC, MWTC, AMWC, IORC, IOWC, AIOWC, INTA and 
DEN) lags the active high 8288 CEN. 

7. All timing measurements are made at 1.5V unless otherwise noted. 

8. Status inactive in state just prior to T4. 
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WAVEFORMS (Continued) 

BUS LOCK SIGNAL TIMING 
ASYNCHRONOUS SIGNAL RECOGNITION (MAXIMUM MODE ONLY) 


Any CLK aged 


NMI | TINVCH (see note 1) 


INTR signal 


TEST 


NOTE: 231456-17 
1. Setup requirements for asynchronous signals only to 
guarantee recognition at next CLK. 


REQUEST/GRANT SEQUENCE TIMING (MAXIMUM MODE ONLY) 


Any CLK Cycle——— > 0 CLK Cycle—— 


PULSE 3 
PULSE 2 OPROCESSOR 
8088 GT RELEASE 


COPROCESSOR 


(SEE NOTE 1) 


1. The coprocessor may not drive the busses outside the region shown without risking contention. 


HOLD/HOLD ACKNOWLEDGE TIMING (MINIMUM MODE ONLY) 


2 1CLK CYCLE— 1OR 2 CYCLES 


<—THVCH 


TCLHAV 


COPROCESSOR 
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Any CLK cycle —| 


231456-18 


231456-19 


231456-20 


DATA TRANSFER 
MOV = Move: 


Register/Memory to/from Register 
Immediate to Register/Memory 
Immediate to Register 

Memory to Accumulator 

Accumulator to Memory 
Register/Memory to Segment Register 


Segment Register to Register/Memory 


PUSH = Push: 
Register/Memory 
Register 


Segment Register 


POP = Pop: 
Register/Memory 
Register 


Segment Register 


XCHG = Exchange: 
Register/Memory with Register 


Register with Accumulator 


IN = Input from: 
Fixed Port 
Variable Port 


OUT = Output to: 

Fixed Port 

Variable Port 

XLAT = Translate Byte to AL 
LEA = Load EA to Register 
LDS = Load Pointer to DS 
LES = Load Pointer to ES 
LAHF = Load AH with Flags 
SAHF = Store AH into Flags 


PUSHF = Push Flags 
POPF = Pop Flags 


8086/8088 Instruction Set Summary 


Mnemonic and 
Description Instruction Code 


76543210 76543210 76543210 
100010dw 


mod 000r/m 


fos 


a. 
» 
| 


S 


1011wreg a data ifw = 1 


1010000w addr-high 
1010001 addr-high 
10001110 mod 0 reg r/m 
10001100 mod 0 reg r/m 
wee Pee ae mod 110r/m 


01010reg 
000reg110 


10001111 mod000r/m 
01011reg 
000reg111 


1000011w mod reg r/m 
10010reg 


1110010w p 
1110110w 


fe) 
a 


1110011Ww 
171011 1w 


11010111 
10001101 mod reg r/m 
11000101 mod reg r/m 
11000100 mod reg r/m 
10011111 
10011110 
10011100 


8088 


76543210 


3-85 


8088 


ARITHMETIC 
ADD = Add: 


Reg./Memory with Register to Either 


Immediate to Register/ Memory 


Immediate to Accumulator 


ADC = Add with Carry: 
Reg./Memory with Register to Either 
Immediate to Register/Memory 


Immediate to Accumulator 


INC = Increment: 
Register/Memory 

Register 

AAA = ASCIl Adjust for Add 

BAA = Decimal Adjust for Add 
SUB = Subtract: 

Reg./Memory and Register to Either 
Immediate from Register/Memory 


Immediate from Accumulator 


SSB = Subtract with Borrow 
Reg./Memory and Register to Either 
Immediate from Register/Memory 
Immediate from Accumulator 

DEC = Decrement: 
Register/memory 

Register 

NEG = Change sign 

CMP = Compare: 


Register/Memory and Register 
Immediate with Register/Memory 
Immediate with Accumulator 
AAS = ASCIli Adjust for Subtract 
DAS = Decimal Adjust for Subtract 
MUL = Multiply (Unsigned) 
IMUL = Integer Multiply (Signed) 
AAM = ASCIl Adjust for Multiply 
DIV = Divide (Unsigned) 

IDIV = Integer Divide (Signed) 
AAD = ASCIil Adjust for Divide 
CBW = Convert Byte to Word 
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CWD = Convert Word to Double Word 


8086/8088 Instruction Set Summary (Continued) 


Mnemonic and 
Description 


instruction Code 


76543210 76543210 76543210 76543210 


|_000000dw_ | ___modregr/m__| 
.100000sw mod000r/m data data if s:w = 01 
0000010w data data if w = 1 
000100dw 
100000sw mod010r/m data data if s:;w = 01 
0001010w data data ifw = 1 
| 1ttititw | mod000r/m 
01000reg 
00100111 
001010dw 
100000sw mod 1011r/m data data if s:;w = 01 
0010110w data data ifw = 1 
000110dw 
100000sw mod0111r/m data data if s:w = 01 
| 000111w data data ifw = 1 
1111111w mod0011r/m 


01001 reg 
mod011 r/m 


001110dw 
100000sw 


mod reg r/m 
mod 1111r/m 
da 


data if s:w = 01 
data ifw = 1 


xy 


Qa 
5%) 
| 


1111011w mod 100r/m 
mod 101r/m 
00001010 
mod 110r/m 
mod 1111r/m 


00001010 


11010100 


1111011w 
11010101 
10011000 
10011001 


Nal. 8088 


8086/8088 Instruction Set Summary (Continued) 


Instruction Code 


LOGIC 76543210 76543210 
NOT = Invert mod010r/m 
SHL/SAL = Shift Logical/Arithmetic Left mod 100r/m 


76543210 76543210 


SHR = Shift Logical Right mod 1011r/m 


SAR = Shift Arithmetic Right mod 1115f/m 
ROL = Rotate Left 

ROR = Rotate Right 110100vw 
RCL = Rotate Through Carry Flag Left 

RCR = Rotate Through Carry Right 110100vw 


AND = And: 


Reg./Memory and Register to Either 001000dw mod reg r/m 


Immediate to Register/Memory 1000000w mod 100r/m data data ifw = 1 


Immediate to Accumulator 0010010w data data ifw = 1 


TEST = And Function to Flags. No Result: 
Register/Memory and Register 1000010w 


Immediate Data and Register/Memory mod 000r/m data data ifw = 1 


Immediate Data and Accumulator 1010100w data data ifw = 1 


OR = Or: 


Reg./Memory and Register to Either 

Immediate to Accumulator data 
XOR = Exclusive or: 

Reg./Memory and Register to Either 


g 


Immediate to Register/Memory 1000000w mod 110r/m data ifw = 1 


S 
s 


Immediate to Accumulator 0011010w data ifw = 1 


STRING MANIPULATION 
REP = Repeat 

MOVS = Move Byte/Word 1010010w 
CMPS = Compare Byte/Word 1010011w 
SCAS = Scan Byte/Word 

LODS = Load Byte/Wd to AL/AX 


STOS = Stor Byte/Wd from AL/A 


CONTROL TRANSFER 
CALL = Call: 


Direct Within Segment 11101000 disp-low disp-high 


Indirect Within Segment 44949994 | mod010r/m 
Direct Intersegment 10011010 offset-high 


seg-low seg-high 


a ee a mod0115r/m 


Indirect Intersegment 
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8086/8088 Instruction Set Summary (Continued) 


JMP = Unconditional Jump: 
Direct Within Segment 

Direct Within Segment-Short 
Indirect Within Segment 


Direct Intersegment 


Indirect Intersegment 


RET = Return from CALL: 
Within Segment 


Within Seg Adding Immed to SP 


Intersegment 
Intersegment Adding Immediate to SP 


JE/JZ = Jump on Equal/Zero 

JL/JNGE = Jump on Less/Not Greater 
or Equal 

JLE/JNG = Jump on Less or Equal/ 
Not Greater 

JB/JNAE = Jump on Below/Not Above 
or Equal 

JBE/JNA = Jump on Below or Equal/ 
Not Above 

JP/JPE = Jump on Parity/Parity Even 


JO = Jump on Overflow 
JS = Jump on Sign 
JNE/JNZ = Jump on Not Equal/Not Zero 


JNL/JGE = Jump on Not Less/Greater 
or Equal 

JNLE/JG = Jump on Not Less or Equal/ 
Greater 

JNB/JAE = Jump on Not Below/Above 
or Equal 

JNBE/JA = Jump on Not Below or 
Equal/Above 

JNP/JPO = Jump on Not Par/Par Odd 


JNO = Jump on Not Overflow 


JNS = Jump on Not Sign 
LOOP = Loop CX Times 


. 


LOOPNZ/LOOPNE = Loop While Not 
Zero/Equal 
JCXZ = Jump on CX Zero 


INT = Interrupt 
Type Specified 


/ 


Type 3 / 


INTO = Interrupt on Overflow 
IRET = Interrupt Return 
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Mnemonic and 
Description 


LOOPZ/LOOPE = Loop While Zero/Equal 


Instruction Code 


76543210 76543210 76543210 


11101001 


11101044 


13.42) bee mod 100r/m 


offset-high 


seg-high 


ee es ek es offset-low 


seg-low 


oh hie © mod 1011r/m 


11000011 


11000010 data-low data-high 


11001011 


11001010 data-low 


data-high 
01110100 
01111100 


01111110 


01110010 


01111010 
01110000 
01111000 


01110101 


OFT T1104 


OTA TI V1 


OT1T1T0011 


O11TOT11 
PLT T0111 
01110001 


01111001 
11100010 


11100001 


11100000 
11100011 


11001101 type 
11001100 


11001110 


11007111 


8088 


8086/8088 Instruction Set Summary (Continued) 


Mnemonic and 
Description 
PROCESSOR CONTROL 
CLC = Clear Carry 


76543210 


CMC = Complement Carry 


1117107071 
STC = Set Carry 
CLD = Clear Direction 


STD = Set Direction 147721041 


CLI = Clear Interrupt 
STI = Set Interrupt 
HLT = Halt 

WAIT = Wait 


ESC = Escape (to External Device) 11011xxx 


LOCK = Bus Lock Prefix 11110000 


NOTES: 

AL = 8-bit accumulator 

AX = 16-bit accumulator 

CX = Count register 

DS = Data segment 

ES = Extra segment 

Above/below refers to unsigned value 

Greater = more positive: 

Less = less positive (more negative) signed values 

if d = 1 then “to” reg; if d = 0 then “from” reg 

if w = 1 then word instruction; if w = 0 then byte 

instruction 

if mod = 11 then r/m is treated as a REG field 

if mod = 00 then DISP = 0%, disp-low and disp-high are 
absent 

if mod = 01 then DISP = disp-low sign-extended to 
16 bits, disp-high is absent 

if mod = 10 then DISP = disp-high; disp-low 

if r/m = 000 then EA = (BX) + (SI) + DISP 

if r/m = 001 then EA = (BX) + (DI) + DISP 

if r/m = 010 then EA = (BP) + (SI) + DISP 


if r/m = 011 then EA = (BP) + (DI) + DISP 
if r/m = 100 then EA = (SI) + DISP 

if r/m = 101 then EA = (DI) + DISP 

if r/m = 110 then EA = (BP) + DISP* 

if r/m = 111 then EA = (BX) + DISP 


DISP follows 2nd byte of instruction (before data if re- 

quired) 

*except if mod = 00 and r/m = then EA = disp-high: 
disp-low. 

if sw = 01 then 16 bits of immediate data form the oper- 
and 

if s;w = 11 then an immediate data byte is sign extended 
to form the 16-bit operand 

if v = O then “count” = 1; if v = 1 then “count” in (CL) 
register 
= don’t care 

z is used for string primitives for comparison with ZF FLAG 

SEGMENT OVERRIDE PREFIX 


001reg110 


Instruction Code 


76543210 


mod x xx r/m 


REG is assigned according to the following table: 


| 16-Bit(w = 1) | 8-Bit (w 


= 0) 
AX AL 


Instructions which reference the flag register file as a 16-bit 
object use the symbol FLAGS to represent the file: 
FLAGS = 
X:X:X:X:(OF):(DF):(IF):(TF):(SF):(ZF):X:(AF):X:(PF):X:(CF) 


Mnemonics © Intel, 1978 


DATA SHEET REVISION REVIEW 


The following list represents key differences be- 
tween this and the -005 data sheet. Please review 
this summary carefully. 


1. The Intel 8088 implementation technology 
(HMOS) has been changed to (HMOS-II). 
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8087 
MATH COPROCESSOR 


m@ Adds Arithmetic, Trigonometric, 


Exponential, and Logarithmic 
Instructions to the Standard 8086/8088 
and 80186/80188 Instruction Set for All 


Available in 5 MHz (8087), 8 MHz (8087- 
2) and 10 MHz (8087-1): 8 MHz 80186/ 
80188 System Operation Supported 
with the 8087-1 


Data Types 


m@ Adds 8 x 80-Bit Individually 
m CPU/8087 Supports 7 Data Types: 16-, Addressable Register Stack to the 
32-, 64-Bit Integers, 32-, 64-, 80-Bit 8086/8088 and 80186/80188 
Floating Point, and 18-Digit BCD Architecture 
Operands @ 7 Built-In Exception Handling Functions 
= Compatible with IEEE Floating Point 


m MULTIBUS System Compatible 


Standard 754 Interface 
The Intel 8087 Math CoProcessor is an extension to the Intel 8086/8088 microprocessor architecture. When 
combined with the 8086/8088 microprocessor, the 8087 dramatically increases the processing speed of 
computer applications which utilize mathematical operations such as CAM, numeric controllers, CAD or graph- 
ics. 


The 8087 Math CoProcessor adds 68 mnemonics to the 8086 microprocessor instruction set. Specific 8087 
math operations include logarithmic, arithmetic, exponential, and trigonometric functions. The 8087 supports 
integer, floating point and BCD data formats, and fully conforms to the ANSI/IEEE floating point standard. 


The 8087 is fabricated with HMOS III technology and packaged in a 40-pin cerdip package. 


EXPONENT FRACTION 
BUS BUS 


GND Lj! 


(A14) AD14 Lj 2 39] | AD15 
MODULE (A13) AD13 LJ? 38) J A16/S3 
eta (ara) api C] 7B arse 


| 
| 
| EXPONENT 
| 


(A11) AD11 LJ5 


| 

_— 

| 
| 

| 

| 


| 
| 
| 
| 
| 16 | (A10) AD10 [| 6 35{-] A19/S6 
NEU INSTRUCTION MICROCODE | (as) Ape C7 BHE/S7 
jl UNIT - (As) Abe (| # RG/GT1 
DATA 16 | AD7 Lj? INT 
| orgueue i | ape [} 10 Ra/GTo 
nee 
| 16 REGISTERS | 
AD4 [Jj 12 NC 
| | | aos [1] 13 52 
| ae | pag e 
| | ae cena: |* | apt Cs si 
) | oop foe : 
sravus Gemma] A0eRR SENS | ee 
BUS TRACKING NC Lj 18 BUSY 
iM | ees | 
anoness ‘9 ~ iets i RADY 
ngage gee , eR pe — wns et oT ae mee) 
205835-1 | 205835-2 
Figure 1. 8087 Block Diagram Figure 2. 8087 Pin 
Configuration 
October 1989 
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Table 1. 8087 Pin Description 


| Symbol | Type Name and Function 


AD15-ADO0 ADDRESS DATA: These lines constitute the time multiplexed memory address (T;) 


and data (To, T3, Tw, T4) bus. AO is analogous to the BHE for the lower byte of the data 
bus, pins D7-DO0. It is LOW during T; when a byte is to be transferred on the lower 
portion of the bus in memory operations. Eight-bit oriented devices tied to the lower half 
of the bus would normally use AO to condition chip select functions. These lines are 
active HIGH. They are input/output lines for 8087-driven bus cycles and are inputs 
which the 8087 monitors when the CPU is in control of the bus. A15-A8 do not require 
an address latch in an 8088/8087 or 80188/8087. The 8087 will supply an address for 
the T;—T4 period. 


A19/S6, ADDRESS MEMORY: During T,; these are the four most significant address lines for 
A18/S5, memory operations. During memory operations, status information is available on these 
A17/S4, lines during To, T3, Tw, and T4. For 8087-controlled bus cycles, S6, S4, and S3 are 
A16/S3 reserved and currently one (HIGH), while S5 is always LOW. These lines are inputs 


which the 8087 monitors when the CPU is in control of the bus. 


BUS HIGH ENABLE: During T; the bus high enable signed (BHE) should be used to 
enable data onto the most significant half of the data bus, pins D15-D8. Eight-bit- 
oriented devices tied to the upper half of the bus would normally use BHE to condition 
chip select functions. BHE is LOW during T; for read and write cycles when a byte is to 
be transferred on the high portion of the bus. The S7 status information is available 
during To, T3, Tw, and T4. The signal is active LOW. S7 is an input which the 8087 
monitors during the CPU-controlled bus cycles. 


BHE/S7 I/O 


STATUS: For 8087-driven, these status lines are encoded as follows: 
S2 $1 SO 

O0(LOW) X X_ Unused 

1 (HIGH) O OO Unused 


1 0 1 Read Memory 
1 1 0 Write Memory 
1 1 1 Passive 


Status is driven active during T4, remains valid during T; and To, and is returned to the 
passive state (1, 1, 1) during T3 or during Tw when READY is HIGH. This status is used 
by the 8288 Bus Controller (or the 82188 Integrated Bus Controller with an 80186/ 
80188 CPU) to generate all memory access control signals. Any change in S2, $1, or 
SO during T, is used to indicate the beginning of a bus cycle, and the return to the 
passive state in T3 or Tw is used to indicate the end of a bus cycle. These signals are 
monitored by the 8087 when the CPU is in control of the bus. 


REQUEST/GRANT: This request/grant pin is used by the 8087 to gain control of the 
local bus from the CPU for operand transfers or on behalf of another bus master. It 
must be connected to one of the two processor request/grant pins. The request/grant 
sequence on this pin is as follows: 

1. A pulse one clock wide is passed to the CPU to indicate a local bus request by either 
the 8087 or the master connected to the 8087 RQ/GT1 pin. 

2. The 8087 waits for the grant pulse and when it is received will either initiate bus 
transfer activity in the clock cycle following the grant or pass the grant out on the 
RQ/GT1 pin in this clock if the initial request was for another bus master. 

3. The 8087 will generate a release pulse to the CPU one clock cycle after the 
completion of the last 8087 bus cycle or on receipt of the release pulse from the bus 
master on RQ/GT1. 

For 80186/80188 systems the same sequence applies except RQ/GT ierais are 

converted to appropriate HOLD, HLDA signals by the 82188 Integrated Bus Controller. 

This is to conform with 80186/80188’s HOLD, HLDA bus exchange protocol. Refer to 

the 82188 data sheet for further information. 
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Table 1. 8087 Pin Description (Continued) 


Name and Function 


REQUEST/GRANT: This request/grant pin is used by another local bus master to 
force the 8087 to request the local bus. If the 8087 is not in control of the bus when the 
request is made the request/grant sequence is passed through the 8087 on the RQ/ 
GTO pin one cycle later. Subsequent grant and release pulses are also passed through 
the 8087 with a two and one clock delay, respectively, for resynchronization. RQ/GT1 
has an internal pullup resistor, and so may be left unconnected. If the 8087 has control 
of the bus the request/grant sequence is as follows: 

1. A pulse 1 CLK wide from another local bus master indicates a local bus request to 
the 8087 (pulse 1). 

2. During the 8087’s next T4 or T; a pulse 1 CLK wide from the 8087 to the requesting 
master (pulse 2) indicates that the 8087 has allowed the local bus to float and that it 
will enter the “‘RQ/GT acknowledge” state at the next CLK. The 8087’s control unit 
is disconnected logically from the local bus during “RQ/GT acknowledge.” 

3. A pulse 1 CLK wide from the requesting master indicates to the 8087 (pulse 3) that 
the “RQ/GT” request is about to end and that the 8087 can reclaim the local bus at 
the next CLK. 

Each master-master exchange of the local bus is a sequence of 3 pulses. There must 

be one dead CLK cycle after each bus exchange. Pulses are active LOW. 

For 80186/80188 system, the RQ/GT1 line may be connected to the 82188 Integrated 

Bus Controller. In this case, a third processor with a HOLD, HLDA bus exchange 

system may acquire the bus from the 8087. For this configuration, RQ/GT1 will only be 

used if the 8087 is the bus master. Refer to 82188 data sheet for further information. 


QS1, QS0: QS1 and QS0 provide the 8087 with status to allow tracking of the CPU 
instruction queue. 


QS1 QSso 
0 (LOW) 0 No Operation 
0 1 First Byte of Op Code from Queue 
1(HIGH) 0 Empty the Queue 
1 1 Subsequent Byte from Queue 


INTERRUPT: This line is used to indicate that an unmasked exception has occurred 
during numeric instruction execution when 8087 interrupts are enabled. This signal is 
typically routed to an 8259A for 8086/8088 systems and to INTO for 80186/80188 

systems. INT is active HIGH. 


BUSY: This signal indicates that the 8087 NEU is executing a numeric instruction. It is 
connected to the CPU’s TEST pin to provide synchronization. In the case of an 
unmasked exception BUSY remains active until the exception is cleared. BUSY is 
active HIGH. 


READY: READY is the acknowledgement from the addressed memory device that it 
will complete the data transfer. The RDY signal from memory is synchronized by the 
8284A Clock Generator to form READY for 8086 systems. For 80186/80188 systems, 
RDY is synchronized by the 82188 Integrated Bus Controller to form READY. This 

signal is active HIGH. 


RESET: RESET causes the processor to immediately terminate its present activity. 
The signal must be active HIGH for at least four clock cycles. RESET is internally 
synchronized. 


CLOCK: The clock provides the basic timing for the processor and bus controller. It is 
asymmetric with a 33% duty cycle to provide optimized internal timing. 


|__| POWER: Vcc is the + 5V power supply pin. 


GROUND: GND are the ground pins. 
NOTE: 


For the pin descriptions of the 8086, 8088, 80186 and 80188 CPUs, reference the respective data sheets (8086, 8088, 
80186, 80188). 
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APPLICATION AREAS 


The 8087 provides functions meant specifically for 
high performance numeric processing requirements. 
Trigonometric, logarithmic, and exponential func- 
tions are built into the coprocessor hardware. These 
functions are essential in scientific, engineering, 
navigational, or military applications. 


The 8087 also has capabilities meant for business or 
commercial computing. An 8087 can process Binary 
Coded Decimal (BCD) numbers up to 18 digits with- 
out roundoff errors. It can also perform arithmetic on 
integers as large as 64 bits + 1018), 


PROGRAMMING LANGUAGE 
SUPPORT | 


Programs for the 8087 can be written in Intel’s high- 
level languages for 8086/8088 and 80186/80188 
Systems; ASM-86 (the 8086, 8088 assembly lan- 
guage), PL/M-86, FORTRAN-86, and PASCAL-86. 


RELATED INFORMATION 


For 8086, 8088, 80186 or 80188 details, refer to the 
respective data sheets. For 80186 or 80188 sys- 
tems, also refer to the 82188 Integrated Bus Con- 
troller data sheet. 


FUNCTIONAL DESCRIPTION 


The 8087 Math CoProcessor’s architecture is de- 
signed for high performance numeric computing in 
conjunction with general purpose processing. 


8087 


The 8087 is a numeric processor extension that pro- 
vides arithmetic and logical instruction support for a 
variety of numeric data types. It also executes nu- 
merous built-in transcendental functions (e.g., tan- 
gent and log functions). The 8087 executes instruc- 
tions as a coprocessor to a maximum mode CPU. It 
effectively extends the register and instruction set of 


-the system and adds several new data types as well. 


Figure 3 presents the registers of the CPU + 8087. 
Table 2 shows the range of data types supported by 
the 8087. The 8087 is treated as an extension to the 
CPU, providing register, data types, control, and in- 
struction capabilities at the hardware level. At the 
programmer’s level the CPU and the 8087 are 
viewed as a single unified processor. 


System Configuration 


As a coprocessor to an 8086 or 8088, the 8087 is 
wired in parallel with the CPU as shown in Figure 4. 
Figure 5 shows the 80186/80188 system configura- 
tion. The CPU’s status (SO-S2) and queue status 
lines (QSO-—QS1) enable the 8087 to monitor and 
decode instructions in synchronization with the CPU 
and without any CPU overhead. For 80186/80188 
systems, the queue status signals of the 80186/ 
80188 are synchronized to 8087 requirements by 
the 8288 Integrated Bus Controller. Once started, 
the 8087 can process in parallel with, and indepen- 
dent of, the host CPU. For resynchronization, the 
8087’s BUSY signal informs the CPU that the 8087 
is executing an instruction and the CPU WAIT in- 
struction tests this signal to insure that the 8087 is 
ready to execute subsequent instructions. The 8087 
can interrupt the CPU when it detects an error or 
exception. The 8087’s interrupt request line is typi- 
cally routed to the CPU through an 8259A Program- 
mable Interrupt Controller for 8086, 8088 systems 
and INTO for 80186/80188. 


8087 
DATA FIELD 


TAG FIELD 
0 1 0 


CONTROL REGISTER 
STATUS REGISTER 
TAG WORD 


INSTRUCTION POINTER 
DATAPOINTER 


205835-3 


Figure 3. CPU + 8087 Architecture 
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The 8087 uses one of the request/grant lines of the 
8086/8088 architecture (typically RQ/GTO) to ob- 
tain control of the local bus for data transfers. The 
other request/grant line is available for general sys- 
tem use (for instance by an I/O processor in LOCAL 
mode). A bus master can also be connected to the 
8087’s RQ/GT1 line. In this configuration the 8087 
will pass the request/grant handshake signals be- 
tween the CPU and the attached master when the 
8087 is not in control of the bus and will relinquish 
the bus to the master directly when the 8087 is in 
control. In this way two additional masters can be 
configured in an 8086/8088 system; one will share 
the 8086/8088 bus with the 8087 on a first-come 
first-served basis, and the second will be guaranteed 
to be higher in priority than the 8087. 


For 80186/80188 systems, RQ/GTO and RQ/GT1 
are connected to the corresponding inputs of the 
82188 Integrated Bus Controller. Because the 
80186/80188 has a HOLD, HLDA bus exchange 
protocol, an interface is needed which will translate 
RQ/GT signals to corresponding HOLD, HLDA sig- 
nals and vice versa. One of the functions of the 
82188 IBC is to provide this translation. RQ/GTO is 
translated to HOLD, HLDA signals which are then 
directly connected to the 80186/80188. The RQ/ 
GT1 line is also translated into HOLD, HLDA signals 
(referred to as SYSHOLD, SYSHLDA signals) by the 
82188 IBC. This allows a third processor (using a 
HOLD, HLDA bus exchange protocol) to gain control 
of the bus. 


5 

intel. 
Unlike an 8086/8087 system, RQ/GT is only used 
when the 8087 has bus control. If the third processor 
requests the bus when the current bus master is the 
80186/80188, the 82188 IBC will directly pass the 
request onto the 80186/80188 without going 
through the 8087. The third processor has the high- 
est bus priority in the system. If the 8087 requests 
the bus while the third processor has bus control, 
the grant pulse will not be issued until the third proc- 
essor releases the bus (using SYSHOLD). In this 
configuration, the third processor has the highest 
priority, the 8087 has the next highest, and the 
80186/80188 has the lowest bus priority. 


Bus Operation 


The 8087 bus structure, operation and timing are 
identical to all other processors in the 8086/8088 
series (maximum mode configuration). The address 
is time multiplexed with the data on the first 16/8 
lines of the address/data bus. A16 through A19 are 
time multiplexed with four status lines S3-S6. S3, 
S4 and S6 are always one (HIGH) for 8087-driven 
bus cycles while S5 is always zero (LOW). When the 
8087 is monitoring CPU bus cycles (passive mode) 
S6 is also monitored by the 8087 to differentiate 
8086/8088 activity from that of a local I/O proces- 
sor or any other local bus master. (The 8086/8088 
must be the only processor on the local bus to drive 
S6 LOW). S7 is multiplexed with and has the same 
value as BHE for all 8087 bus cycles. 


Table 2. 8087 Data Types 


Two’s Complement 


Two’s 


Ws) ie leg ee 


POI | TA Digan oe Wh i 


Integer: | 

Packed BCD: (—1)S(D47...Do) 

Real: (— 1)S(2E — Bias)(FoeF...) 

bias = 127 for Short Real 
1023 for Long Real 
16383 for Temp Real 
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The first three status lines, SO-S2, are used with an 


8288 bus controller or 82188 Integrated Bus Con- 
troller to determine the type of bus cycle being run: 


Unused 
Unused 


Memory Data Read 
Memory Data Write 
Passive (no bus cycle) 


Programming Interface 


The 8087 includes the standard 8086, 8088 instruc- 
tion set for general data manipulation and program 
control. It also includes 68 numeric instructions for 
extended precision integer, floating point, trigono- 
metric, logarithmic, and exponential functions. Sam- 
ple execution times for several 8087 functions are 
shown in Table 3. Overall performance is up to 100 
times that of an 8086 processor for numeric instruc- 
tions. 


Any instruction executed by the 8087 is the com- 
bined result of the CPU and 8087 activity. The CPU 
and the 8087 have specialized functions and regis- 
ters providing fast concurrent operation. The CPU 
controls overall program execution while the 8087 
uses the coprocessor interface to recognize and 
perform numeric operations. 


Table 2 lists the seven data types the 8087 supports 
and presents the format for each type. Internally, the 
8087 holds all numbers in the temporary real format. 
Load and store instructions automatically convert 
operands represented in memory as 16-, 32-, or 64- 
bit integers, 32- or 64-bit floating point numbers or 
18-digit packed BCD numbers into temporary real 
format and vice versa. The 8087 also provides the 
capability to control round off, underflow, and over- 
flow errors in each calculation. 


Computations in the 8087 use the processor’s regis- 
ter stack. These eight 80-bit registers provide the 
equivalent capacity of 20 32-bit registers. The 8087 
register set can be accessed as a stack, with in- 
structions operating on the top one or two stack ele- 
ments, or as a fixed register set, with instructions 
operating on explicitly designated registers. 


Table 5 lists the 8087’s instructions by class. All ap- 
pear as ESCAPE instructions to the host. Assembly 
language programs are written in ASM-86, the 8086, 
8088 assembly language. 


8087 


Table 3. Execution Times for Selected 
8086/8087 Numeric Instructions and 
Corresponding 8086 Emulation 


Approximate Execution 
Floating Point oe 


Instruction 8086/8087 
(8 MHz 8086 


Clock) Emulation 


Add/Subtract 

Multiply (Single 
Precision) 

Multiply (Extended 
Precision) 

Divide | 

Compare 

Load (Double Precision) 

Store (Double Precision) 

Square Root 

Tangent 

Exponentiation _ 


NUMERIC PROCESSOR 
EXTENSION ARCHITECTURE 


As shown in Figure 1, the 8087 is internally divided 
into two processing elements, the control unit (CU) 


-and the numeric execution unit (NEU). The NEU ex- 


ecutes all numeric instructions, while the CU re- 
ceives and decodes instructions, reads and writes 
memory operands and executes 8087 control in- 
structions. The two elements are able to operate in- 
dependently of one another, allowing the CU to 
maintain synchronization with the CPU while the 
NEU is busy processing a numeric instruction. 


Control Unit 


The CU keeps the 8087 operating in synchronization 
with its host CPU. 8087 instructions are intermixed 
with CPU instructions in a single instruction stream. 
The CPU fetches all instructions from memory; by 
monitoring the status (SO-S2, S6) emitted by the 
CPU, the control unit determines when an instruction 
is being fetched. The CPU monitors the data bus in 
parallel with the CPU to obtain instructions that per- 
tain to the 8087. 
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Figure 4. 8086/8087, 8088/8087 System Configuration 
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Figure 5. 80186/8087, 80188/8087 System Configuration 
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The CU maintains an instruction queue that is identi- 
cal to the queue in the host CPU. The CU automati- 
cally determines if the CPU is an 8086/80186 or an 
8088/80188 immediately after reset (by monitoring 
the BHE/S7 line) and matches its queue length ac- 
cordingly. By monitoring the CPU’s queue status 
lines (QSO, QS1), the CU obtains and decodes in- 
structions from the queue in synchronization with the 
CPU. 


A numeric instruction appears as an ESCAPE in- 
struction to the CPU. Both the CPU and 8087 de- 
code and execute the ESCAPE instruction together. 
The 8087 only recognizes the numeric instructions 
shown in Table 5. The start of a numeric operation is 
accomplished when the CPU executes the ESCAPE 
instruction. The instruction may or may not identify a 
memory operand. 


The CPU does, however, distinguish between ESC 
instructions that reference memory and those that 
do not. If the instruction refers to a memory operand, 
the CPU calculates the operand’s address using any 
one of its available addressing modes, and then per- 
forms a “dummy read” of the word at that location. 
(Any: location within the 1M byte address space is 
allowed.) This is a normal read cycle except that the 
CPU ignores the data it receives. If the ESC instruc- 
tion does not contain a memory reference (e.g. an 
8087 stack operation), the CPU simply proceeds to 
the next instruction. 


An 8087 instruction can have one of three memory 
reference options: (1) not reference memory; (2) 
load an operand word from memory into the 8087; or 
(3) store an operand word from the 8087 into memo- 
ry. If no memory reference is required, the 8087 sim- 
ply executes its instruction. If a memory reference is 
required, the CU uses a “dummy read” cycle initiat- 
ed by the CPU to capture and save the address that 
the CPU places on the bus. If the instruction is a 
load, the CU additionally captures the data word 
when it becomes available on the local data bus. If 
data required is longer than one word, the CU imme- 
diately obtains the bus from the CPU using the 
request/grant protocol and reads the rest of the in- 
formation in consecutive bus cycles. In a store oper- 
ation, the CU captures and saves the store address 
as in a load, and ignores the data word that follows 
in the ‘dummy read” cycle. When the 8087 is ready 
to perform the store, the CU obtains the bus from 
the CPU and writes the operand starting at the spec- 
ified address. 


8087 


Numeric Execution Unit 


The NEU executes all instructions that involve the 
register stack; these include arithmetic, logical, tran- 
scendental, constant and data transfer instructions. 
The data path in the NEU is 84 bits wide (68 frac- 
tions bits, 15 exponent bits and a sign bit) which 
allows internal operand transfers to be performed at 
very high speeds. 


When the NEU begins executing an instruction, it 
activates the 8087 BUSY signal. This signal can be 
used in conjunction with the CPU WAIT instruction to 
resynchronize both processors when the NEU has 
completed its current instruction. 


Register Set 


The CPU + 8087 register set is shown in Figure 3. 
Each of the eight data registers in the 8087’s regis- 
ter stack is 80 bits and is divided into “fields” corre- 
sponding to the 8087’s temporary real data type. 


At a given point in time the TOP field in the control 
word identifies the current top-of-stack register. A 
“push” operation decrements TOP by 1 and loads a 
value into the new top register. A “pop” operation 
stores the value from the current top register and 
then increments TOP by 1. Like CPU stacks in mem- 
ory, the 8087 register stack grows “down” toward 
lower-addressed registers. 


Instructions may address the data registers either 
implicitly or explicitly. Many instructions operate on 
the register at the top of the stack. These instruc- 
tions implicitly address the register pointed to by the 
TOP. Other instructions allow the programmer to ex- 
plicitly specify the register which is to be used. Ex- 
plicit register addressing is “top-relative.” 


Status Word 


The status word shown in Figure 6 reflects the over- 
all state of the 8087; it may be stored in memory and 
then inspected by CPU code. The status word is a 
16-bit register divided into fields as shown in Figure 
6. The busy bit (bit 15) indicates whether the NEU is 
either executing an instruction or has an interrupt 
request pending (B=1), or is idle (B=0). Several 
instructions which store and manipulate the status 
word are executed exclusively by the CU, and these 
do not set the busy bit themselves. 
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NOTES: 


EXCEPTION FLAGS (1 = EXCEPTION HAS OCCURRED) 


INVALID OPERATION 
DENORMALIZED OPERAND 
ZERO DIVIDE 
OVERFLOW 
UNDERFLOW 
PRECISION 

(RESERVED) 

INTERRUPT REQUEST") 

CONDITION CODE”) 

TOP OF STACK POINTER” 

NEU BUSY 

205835-6 


1. IR is set if any unmasked exception bit is set, cleared otherwise. 


2. See Table 3 for condition code interpretation. 
3. Top Values: 
000 = Register 0 is Top of Stack. 
001 = Register 1 is Top of Stack. 
= 


Register 7 is Top of Stack. 


Figure 6. 8087 Status Word 


The four numeric condition code bits (Cg—Cg3) are 
similar to flags in a CPU: various instructions update 
these bits to reflect the outcome of the 8087 opera- 
tions. The effect of these instructions on the condi- 
tion code bits is summarized in Table 4. 


Bits 14-12 of the status word point to the 8087 reg- 
ister that is the current top-of-stack (TOP) as de- 
scribed above. 


Bit 7 is the interrupt request bit. This bit is set if any 
unmasked exception bit is set and cleared other- 
wise. 


Bits 5-0 are set to indicate that the NEU has detect- 
ed an exception while executing an instruction. 


Tag Word 


The tag word marks the content of each register as 
shown in Figure 7. The principal function of the tag 
word is to optimize the 8087’s performance. The tag 
word can be used, however, to interpret the con- 
tents of 8087 registers. 


Instruction and Data Pointers 


The instruction and data pointers (see Figure 8) are 
provided for user-written error handlers. Whenever 
the 8087 executes a math instruction, the CU saves 
the instruction address, the operand address (if 
present) and the instruction opcode. 8087 instruc- 
tions can store this data into memory. 


15 0 


TAG VALUES: 
00 = VALID 
01 = ZERO 
10 = SPECIAL 
11 = EMPTY 


Figure 7. 8087 Tag Word 
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Table 4a. Condition Code Interpretation 
instruction 
Type 


Se interpretation 
Saami Soest 


ST < Source or 0 (FTST) 
ST = Source or 0 (FTST) 
ST is not comparable 


<x KK XK 
-OoO-9O 


Complete reduction with 
three low bits of quotient 
(See Table 4b) 


Incomplete Reduction 


Gs 
ps|-eos 
c  §g 
e350 


Invalid, positive, exponent = 0 


Empty 
Invalid, negative, exponent = 0 


Empty 


0 0 0 0 Valid, positive unnormalized 

0 0 0 1 Invalid, positive, exponent = 0 
0 0 1 0 Valid, negative, unnormalized 
0 0 1 1 Invalid, negative, exponent = 0 
0 1 0 0 Valid, positive, normalized 

0 1 0 1 Infinity, positive 

0 1 1 0 Valid, negative, normalized 

0 1 1 1 Infinity, negative 

1 0 0 0 Zero, positive 

1 0 0 1 Empty 

1 0 1 0 Zero, negative 

1 0 1 1 Empty 

1 1 0 0 

1 1 0 1 

1 1 1 0 

1 1 1 1 


NOTES: 

T = Top of stack 

value is not affected by instruction 
value is undefined following instruction 
n = Quotient bit n 


” 


1 
2. X 
3. U 
4.Q 


Table 4b. Condition Code Interpretation 
after FPREM Instruction As a MEMORY 
Function of Divided Value OFFSET 


15 
Dividend ange | G2 | G1 | Oy _ +0 
Dividend < 2 * Modulus 


Dividend < 4 * Modul STATUS WORD +9 
ividend < odulus 

| === TAGWORD——sdsCsé+ 4 
Dividend > 4 * Modulus TAG WORD 


INSTRUCTION POINTER (15-0) +6 
NOTE: INSTRUCTION INSTRUCTION ; 8 
1. Previous value of indicated bit, not affected by FPREM POINTER (19-16) OPCODE (10-0) - 


instruction execution. ; 
DATA POINTER (15-0) 


DATA POINTER 
(19-16) 


Figure 8. 8087 Instruction and Data Pointer 
image in Memory 
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Control Word 


The 8087 provides several processing options which 
are selected by loading a word from memory into the 
control word. Figure 9 shows the format and encod- 
ing of the fields in the control word. 


The low order byte of this control word configures 
8087 interrupts and exception masking. Bits 5—0 of 
the control word contain individual masks for each of 
the six exceptions that the 8087 recognizes and bit 7 
contains a general mask bit for all 8087 interrupts. 
The high order byte of the control word configures 
the 8087 operating mode including precision, round- 
ing, and infinity controls. The precision control bits 
(bits 9-8) can be used to set the 8087 internal oper- 
ating precision at less than the default of temporary 
real precision. This can be useful in providing com- 
patibility with earlier generation arithmetic proces- 
sors of smaller precision than the 8087. The round- 
ing control bits (bits 11-10) provide for directed 
rounding and true chop as well as the unbiased 
round to nearest moce specified in the proposed 
IEEE standard. Control over closure of the number 
space at infinity is also provided (either affine clo- 
sure, +°, or projective closure, ©, is treated as 
unsigned, may be specified). 


intel. 


The 8087 detects six different exception conditions 
that can occur during instruction execution. Any or 
all exceptions will cause an interrupt if unmasked 
and interrupts are enabled. 


Exception Handling 


If interrupts are disabled the 8087 will simply contin- 
ue execution regardless of whether the host clears 
the exception. If a specific exception class is 
masked and that exception occurs, however, the 
8087 will post the exception in the status register 
and perform an on-chip default exception handling 
procedure, thereby allowing processing to continue. 
The exceptions that the 8087 detects are the follow- 
ing: 

1. INVALID OPERATION: Stack overflow, stack un- 
derflow, indeterminate form (0/0, °° — ©, etc.) 
or the use of a Non-Number (NAN) as an oper- 
and. An exponent value is reserved and any bit 
pattern with this value in the exponent field is 
termed a Non-Number and causes this exception. 
If this exception is masked, the 8087’s default re- 
sponse is to generate a specific NAN called IN- 
DEFINITE, or to propagate already existing NANs 
as the calculation result. 


15 0 


NOTES: 

1. Precision Control 
00 = 24 bits 
01 = Reserved 
10 = 53 bits 10 
11 64 bits 11 


2. Rounding Control 


EXCEPTION MASKS (1 = EXCEPTION IS MASKED) 


INVALID OPERATION 
DENORMALIZED OPERAND 
ZERO DIVIDE 
OVERFLOW 
UNDERFLOW 
PRECISION 
(RESERVED) 
INTERRUPT MASK (1 = INTERRUPTS ARE MASKED) 
PRECISION CONTROL" 
ROUNDING CONTROL” 
INFINITY CONTROL (0 = PROJECTIVE, 1 = AFFINE) 
- (RESERVED) 


205835-7 


00 = Round to Nearest or Even 
01 = Round Down (toward — °°) 
Round Up (toward + oo) 
Chop (truncate toward zero) 


Figure 9. 8087 Control Word 
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@ 

intel : 

2. OVERFLOW: The result is too large in magnitude 
to fit the specified format. The 8087 will generate 
an encoding for infinity if this exception is 
masked. 

3. ZERO DIVISOR: The divisor is zero while the divi- 
dend is a non-infinite, non-zero number. Again, 


the 8087 will generate an encoding for infinity if 
this exception is masked. 


4. UNDERFLOW: The result is non-zero but too 
small in magnitude to fit in the specified format. If 
this exception is masked the 8087 will denormal- 


ABSOLUTE MAXIMUM RATINGS* 


Ambient Temperature Under Bias ...... 0°C to 70°C 
Storage Temperature .......... —65°C to + 150°C 
Voltage on Any Pin with 

Respect to Ground.............. —4 OV to +7V 
POWSr LISSIDGUON 6 is cd sideacesevavcansva' 3.0 Watt 


D.C. CHARACTERISTICS Ta = 0°C to 70°C, Voc = 


Tsymbot | ___ Parameter "| win_| Max | Unte | TestGondions | 
a ca Te 
vin | trout High Votage ——S—«d—ao 

"vou | Outpt Low votage notes) | 
"Vou | Ouputrignvonage | ea | VY tw = 000m 
Mec | Powersuppycurent | —+| 7s | m | t=arc 
Tis | trputLeekage Gurent |_| #10 | wa | <¥w<Voo | 
Tver | Glock inputtow vonage | -osf oe |v | 
vor | Glock nputtaghvenge | se. | Vette | wv 


Capacitance of Inputs 


Cio Capacitance of I/O Buffer 
(ADO-15, Ayg—Ai9, BHE, S2-S0, 


RQ/GT) and CLK 


Cout Capacitance of Outputs fe = 1 MHz 
BUSY INT 


8087 


ize (shift right) the fraction until the exponent is in 
range. This process is called gradual underflow. 

5. DENORMALIZED OPERAND: At least one of the 
operands or the result is denormalized; it has the 
smallest exponent but a non-zero significand. 
Normal processing continues if this exception is 
masked off. 


6. INEXACT RESULT: If the true result is not exactly 


representable in the specified format, the result is 


rounded according to the rounding mode, and this 
flag is set. If this exception is masked, processing 
will simply continue. 


NOTICE: This is a production data sheet. The specifi- 


cations are subject to change without notice. 


*WARNING: Stressing the device beyond the “Absolute 
Maximum Ratings” may cause permanent damage. 
These are stress ratings only. Operation beyond the 
“Operating Conditions” is not recommended and ex- 
tended exposure beyond the “Operating Conditions” 
may affect device reliability. 


5V +5% 


< 


poset vfs 
oss [| Vv [=eem 


0.45 


ee 


ee ee 
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8087 . | xitece intel ® 
A.C. CHARACTERISTICS Ty, = 0°C to 70°C, Voc = 5V +5% 


From 3 


SV to 1.0V 


TIMING REQUIREMENTS 


TCLCL CLK Cycle Period 
TCLCH CLK Low Time 
TCHCL = | CLK High Time 


8087-1 


8087 8087-2 (See Note 7) 


Symbol 


n 
= 
fe) 
3 
—, 
ro) 
< 
a 
re) 
7) 
on 
< 


TDVCL _ | Data In Setup Time ‘a Beets 
TCLDX _ | Data In Hold Time pi Oa 


TIMING RESPONSES 


3 8087-1 
Ti ia ta : 
/Min | Max | Min | Max | Min | 


Command Active Delay | 10/0| 35/70} 10/0} 35/70; 10/0 | 35/70 
(Notes 1, 2) 


TCLMH | Command Inactive Delay | 10/0} 35/55 | 10/0| 35/55; 10/0 | 35/70 
(Notes 1, 2) 


TRYHSH | Ready Active to Status 
Passive (Note 5) 


TCHSV | Status Active Delay 


TCLSH 190 | 10 | 70 | 10 | 55 | ns 
| 10 


a o/s /-|o a 


From 2.0V to 0.8V 


Test Conditions 


CL. = 20-100 pF 
for all 8087 Outputs 
(in addition to 8087 
self-load) 


a 
re) 
= 
fo) 
ro) 
< 
- 
S) 
) 
ro) 
< 


12 12 15 


= oe 
oOo}; oO 
GS |— —_— — | NO BAN 
oO; o on SS -| aS 
oud 
(oe) 
Oo on | = o;n 
oO fe) 
es 
o;}Ton 


4 A 
- 


2) 


oO 


—{ 

2) 

[— 
LEE 

— 


CLAV | Address Valid Delay 10 | 110 | 10 | 60 | 10 | 55 | ns |. 
TOLAX Paes eS ae 
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A.C. CHARACTERISTICS Ty, = 0°C to 70°C, Voc = 5V +5% (Continued) 
TIMING RESPONSES (Continued) 


8087-1 
soe Note7 
i [ax | win [wae 
20 [TOUAR| 60 


CLAZ_ |Address Float Delay TCLAX 
Status Valid to ALE High 
(Notes 1, 2) 

i 15/30 15/30 
(Notes 1, 2) 


Test Conditions 


Bu 
on 


— 
on 
™~™ 
ie) 
i=) 


C. = 20-100 pF 
for all 8087 Outputs 
(in addition to 8087 
self-load) 


15/30 


mil 
nn 
ss 
ide) 
io) 


== 
n 
< 
or 
= 


ee 
ti 
(2) 
pe 
A 
= 
fe) 

= 

- 
°o 

> 
= 
m 
< 
2 
a. 


cle 
= 
ia 
> 
= 
m 
=f 
ba) 
oO 
=. 
< 
© 
O 
Oo 
ped) 
< 


(Notes 1, 2) 
TCLDV_|Data Valid Delay 110 


CHDX |StatusHoldTime | 10 | | 10 
CLDOX|DataHoldTime | 10 | | 10 


Control Active Delay 45 
(Notes 1, 3) 
TCVNX |Control Inactive Delay 10, 45 10 
(Notes 1, 3) 
TCHBV_|BUSY and INT ValidDelay|_10 | 150] 10 | 85 | 10 | 65 | ns_ 
TCHDTL | Direction Control Active 
Delay (Notes 1, 3) 
TCHDTH| Direction Control Inactive 
Delay (Notes 1, 3) 
TSVDTV |STATUS to DT/R Delay 
(Notes 1, 4) 
TCLDTV |DT/R Active Delay 
(Notes 1, 4) 
TCHDNV!|DEN Active Delay 
(Notes 1, 4) 
CHDNX|] DEN Inactive Delay 
(Notes 1, 4) 


fais ; 
oO 
=, 
ie) 
=) 


s]ayo =a). ao 
2) S|. oO 
< 
2 
<= 
on 
=, 
(ee) 
oO 
sil 
—, — —_ QO 
elssis| | | EF 
x< 


a 
oi 


C. = 40 pF (in 
addition to 8087 
self-load) 


| 0 | 45 | ns | 
20 | | 15 | ns |From0.8V to 2.0V_ 
12] | 12 | ns |From2.0Vto0.8v_ 


+ 
TCLGL |RQ/GT Active Delay 
(Note 8) 
CLGH |RQ/GT Inactive Delay 


OLOH /|Output Rise Time 
OHOL | Output Fall Time 


NOTES: 

1. Signal at 8284A, 8288, or 82188 shown for reference only. 
2. 8288 timing/82188 timing. 

3. 8288 timing. 
4 
5 
6 


== 


. 82188 timing. 

. Applies only to Ts and wait states. 

. Applies only to To state (8 ns into T3). 
7. IMPORTANT SYSTEM CONSIDERATION: Some 8087-1 timing parameters are constrained relative to the corresponding 
8086-1 specifications. Therefore, 8086-1 systems incorporating the 8087-1 should be designed with the 8087-1 specifica- 
tions. 
8. Changes since last revision. 
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9087 intel. 
A.C. TESTING INPUT, OUTPUT WAVEFORM A.C. TESTING LOAD CIRCUIT 


DEVICE 
UNDER 


TEST 
1.5 <——— TEST POINTS ———_® 15 . 


0.45 


205835-8 
A.C. Testing: Inputs are driven at 2.4V for a Logic “1” and 0.45V 
for a Logic “0”. 


205835-9 


C, Includes Jig Capacitance 


WAVEFORMS 


MASTER MODE (with 8288 references) 


as CH ae a fF ko J 
5.8.8, cme Ly vor 


ren ae 


TE AA ccs om danas Se 
TSVLH—= (eee NOTE 3) 
TCLLH 
sense = ll i Ba 
a ee 
READ CYCLE aa 


WRITE CYCLE 


NOTES: 205835-10 

1. All signals switch between Vo, and Vox unless otherwise specified. 

2. READY is sampled near the end of To, T3 and Tw to determine if Tw machine states are to be inserted. 

3. The local bus floats only if the 8087 is returning control to the 8086/8088. 

4. ALE rises at later of (TSVLH, TCLLH). 

5. Status inactive in state just prior to T4. 

6. Signals at 8284A or 8288 are shown for reference only. 

7. The issuance of 8288 command and control signals (MRDC, (MWTC, AMWC, and DEN) lags the active high 8288 
CEN. 

8. All timing measurements are made at 1.5V unless otherwise noted. 
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WAVEFORMS (Continued) 


MASTER MODE (with 82188 references) 


| 
TCH1CH2 TCL2CL1 
TCLCL t. 


VCH 
r 1 


ah VCL as o- TCLSH bese 
«a 


| rou 
BHE/S,,A,,/S,-A,,/S, i 
TSVLH->} 
TCLLH 
ALE (82188 OUTPUT) 
(SEE NOTES 4,6) 


READY (8087 INPUT) 
(SEE NOTE 2) 


CLK 


READ CYCLE 


AD,,-AD, iS at Ay-Ay . DATAIN a 
FLOAT 
TSVDTV : 
_ TCLDTV 
: il ee ee ee A |e 


DT/ 
altes TT 
82188 OUTPUTS © RD s 


(SEE NOTES 6,7) 


TCHDNX 


WRITE CYCLE 


TCLDV bse 


AD,,-AD, Ays-Ay 


caracur | | roar 


a i NOTE 3) 


~<@— TCHDNX 


82188 OUTPUTS 
(SEE NOTES 6,7) 


NOTES: 205835-11 
1. All signals switch between Vo, and Vox unless otherwise specified. 
2. READY is sampled near the end of To, T3 and Tw to determine if Tw machine states are to be inserted. 
3. The local bus floats only if the 8087 is returning control to the 80186/80188. 
- 4. ALE rises at later of (TSVLH, TCLLH). 
5. Status inactive in state just prior to T4. 
6. Signals at 8284A or 82188 are shown for reference only. 
7. The issuance of 8288 command and control signals (MRDC, (MWTC, AMWC, and DEN) lags the active high 8288 
CEN. 
8. All timing measurements are made at 1.5V unless otherwise noted. 
9. DT/R becomes valid at the later of (TSVDTV, TCLDTV). 
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WAVEFORMS (Continued) 


PASSIVE MODE 


BHE/S,,A,,/S,-A,,/S, 


AD,,-AD, 


RESET TIMING 
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TOVCL |TCLOX; TDVCL 


$7-S3 


TCHRYX 


oe TCHRYX 
TRYHCH | ¢— 
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<——————- =20 CLK CYCLES 
=8 CLK CYCLES 


TCLDX 


8087 TRACKS 8087 READY TO 
>4 CLK CYCLES CPU ACTIVITY EXECUTE INSTRUCTIONS 
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WAVEFORMS (Continued) 


REQUEST/GRANT TIMING 


21CLK 
CYCLE —* 


RQ/GTO 


AD,,-AD, 
A,,/ $,-A,,/ Ss, 
S,, 10 


BHE/S7 


CPU 
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NOTE: 
The CPU provides active pullup of RQ/GT0, see TCLGH spec. 


REQUEST/GRANT, TIMING 


RQ/GT1 » 


AD,,-AD, 
A,,/S,-A,,/S, ALTERNATE MASTER 


S,,8,,5 
BHE/S7 (SEE NOTE) 
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NOTE: 
Alternate master may not drive the buses outside of the region shown without risking bus contention. 


BUSY AND INTERRUPT TIMING 


BUSY, INT 


205835-16 
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Table 5. 8087 Extensions to the 86/186 Instructions Sets 


Data Transfer 


FLD = LOAD 


Integer/Real Memory to ST(0) 
Long Integer Memory to ST(0) 


Temporary Real Memory to 
ST(0) 


BCD Memory to ST(0) 


ST(i) to ST(0) 

FST = STORE 

ST(0) to Integer/Real Memory 
ST(0) to ST(i) 

FSTP = STORE AND POP 


ST(0) to Integer/Real Memory 


ST(0) to Long Integer Memory 
ST(0) to Temporary Real 
Memory 


ST(0) to BCD Memory 


ST(0) to ST(i) 


FXCH = Exchange ST(i) and 
ST(0) 


Comparison 
FCOM = Compare 
Integer/Real Memory to ST(0) 


ST(i) to ST (0) 


FCOMP = Compare and Pop 


Integer/Real Memory to ST(0) 
ST(i) to ST(0) 

FCOMPP = Compare ST(1) to 
ST(0) and Pop Twice 

FTST = Test ST(0) 


FXAM = Examine ST(0) 
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ESCAPE 0 0O 1 


ESCAPE MF 0 


ESCAPE 0 0 0 


ESCAPE MF 0 


ESCAPE 0 0O 1 


ESCAPE 0 0O 1 


Displacement 


MOD 1 0 1 
MOD 1 0 0 R/M 


11 00 0 STi) 


11°00 1 ST(i) 


MOD 0 1 0 R/M 


MOD 0 1 1 R/M | 


Optional 
8,16 Bit 


Clock Count Range 
32 Bit 
Real 


16 Bit 
integer 


40-60 
+EA 


38-56 
+EA 


52-60 


+EA 


60-68 + EA 


53-65 +EA 


290-310 +EA 


17-22 


84-90 82-92 96-104 
+EA +EA +EA 


15-22 


80-90 
+EA 


98-106 
+EA 


86-92 84-94 
+EA +EA 


94-105 +EA 


52-58 +EA 


520-540 +EA 


17-24 


60-70 
+EA 


78-91 65-75 
+EA +EA 


40-50 


63-73 
+EA 
4 


80-93 
+EA 
52 


67-77 
+EA 


205835-17 


in 8087 
® . . 
Table 5. 8087 Extensions to the 86/186 Instructions Sets (Continued) 


Optional Clock Count Range 
8,16 Bit 32 Bit | 32 Bit 16 Bit 
Constants Displacement Real | Integer integer 


FLDZ = 


FLD1 


FLDL2T = LOAD log 10 into ESCAPE 0 0 1 
ST(0) 


FLDL2E = LOAD log? e into 
ST(0) 


FLDLG2 = LOAD !0q}9 2 into 
ST(0) 


FLDLN2 = LOAD loge2 into 
ST(0) 


Arithmetic 
FADD = Addition 
Integer/Real Memory with ST(0) ' 90-120 108-143 95-125 102-137 


+EA +EA +EA +EA 


ST(i) and ST(0) 70-100 (Note 1) 


FSUB = Subtraction 


Integer/Real Memory with ST(0) “pISP. | 90-120 108-143 95-125 102-137 
iA capitate aad men cigs: + + + + 


ST(i) and ST(0) 70-100 (Note 1) 


FMUL = Multiplication 


Integer/Real Memory with ST(0) P == = 110-125 130-144 112-168 124-138 
ume ome es +EA +EA +EA +EA 


ST(i) and ST(0) 90-145 (Note 1) 

FDIV = Division test tal 

integer/Real Memory with ST(0) ; 215-225 230-243 220-230 224-238 
tee: +EA +EA +EA +EA 

ST(i) and ST(0) 193-203 (Note 1) 


FSQRT = Square Root of ST(0) 


FSCALE = Scale ST(0) by ST(1) 


FPREM = Partial Remainder of 
ST(0) +ST(1) 


FRNDINT = Round ST(0) to 
Integer 
205835-18 


NOTE: 
1. lf P = 1 then add 5 clocks. 
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Table 5. 8087 Extensions to the 86/186 Instructions Sets (Continued) 


FXTRACT - Extract 
Components of St(0) 


FABS = Absolute Value of 
ST(0) 


FCHS = Change Sign of ST(0) 


Transcendental 

FPTAN = Partial Tangent of 
ST(0) 

FPATAN = Partial Arctangent 
of ST(0) +ST(1) 


Faxmi = 2°10) _, 


FYL2X = ST(1)* Logo 
{ST(0)| 


FYL2XP1 = ST(1)* Logo 
(ST(O) +1] 


Processor Control 
FINIT = Initialized 8087 


FENI = Enable Interrupts 
FDISI = Disable Interrupts 
FLDCW = Load Control Word 
FSTCW = Store Control Word 


FSTSW = Store Status Word 


ESCAPE 0 O 1 


ESCAPE 1 


0 


1 


— 


saa 
Oo 
Oo 
_ 


— 


Optional 
8,16 Bit 
Displacement 


Clock Count Range 


~ 30-540 


250-800 


310-630 


900-1100 


700-1000 


2-8 


2-8 


2-8 


7-14 +EA 


12-18 +EA 


12-18 +EA 


FCLEX = Clear Exceptions ESCAPE 0 1 1 2-8 


FSTENV = Store Environment ESCAPE 0 0 1 MOD 1 1 0 R/M 40-50 +EA 


FLDENV = Load Environment ESCAPE 0 0 1 MOD 1 0 0 R/M 35-45 +EA 


FSAVE = Save State ESCAPE 1 0 1 MOD 1 1 0O R/M 197 — 207+ EA 


FRSTOR = Restore State 


ESCAPE 1 0 1 MOD 1 0 0 R/M 


197 —207+EA 


FINCSTP = Increment Stack 
Pointer 6-12 


FDECSTP = Decrement Stack 


6-12 
Pointer 
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- | | | 
intel 6087 
® 
Table 5. 8087 Extensions to the 86/186 Instructions Sets (Continued) 


Clock Count Range 


FFREE = Free ST(i) ESCAPE 1 0 1 11: 0-0 0 St@ 9-16 
FNOP = No Operation ESCAPE 0 O 1 1) & °C 8.0 0 10-16 


205835-—20 


*n = number of times CPU examines TEST line before 8087 lowers BUSY. 


NOTES: 
1. if mod = 00 then DISP = 0%, disp-low and disp-high are absent 
if mod = 01 then DISP = disp-low sign-extended to 16-bits, disp-high is absent 
if mod = 10 then DISP = disp-high; disp-low 
if mod = 11 then r/m is treated as an ST(i) field 
2. if r/m = 000 then EA = (BX) + (SI) + DISP 
if r/m = 001 then EA = (BX) + (Dl) + DISP 
if r/m = 010 then EA = (BP) + (SI) + DISP 


if r/m = 011 then EA = (BP) + (DI) + DISP 
if r/m = 100 then EA = (SI) + DISP 
if r/m = 101 then EA = (Dl) + DISP 
if r/m = 110 then EA = (BP) + DISP 


if r/m = 111 then EA = (BX) + DISP 
*except if mod = 000 and r/m = 110 then EA = disp-high; disp-low. 
3. MF = Memory Format 
00-32-bit Real 
01-32-bit Integer 
10-64-bit Real 
11-16-bit Integer 
4. ST(0) = Current stack top 
ST(i) = ith register below stack top 
5. d = Destination 
0—Destination is ST(0) 
1—Destination is ST(i) 
6. P = Pop 
O—No pop 
1—Pop ST(0) 
7. R = Reverse: When d = 1 reverse the sense of R 
0—Destination (op) Source 
1—Source (op) Destination 
8.For FSQRT: -—0O< ST(0)< +o 
For FSCALE: -—215 < ST(1) < +215 and ST(1) integer 
For F2XM1: 0 < ST(0) < 2-1 
For FYL2X: 0 < ST(O) < © 
—oo < ST(1) < +0 
For FYL2XP1: 0 < IST(O)I < (2 — V2)/2 
; —oo < §T(1) < © 
For FPTAN: 0 < ST(0) < 7/4 
For FPATAN: 0 < ST(0) < ST(1) < +0 
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COMPREHENSIVE DEVELOPMENT SUPPORT FOR THE 
Intel386T™ AND Intel486™ FAMILIES OF MICROPROCESSORS 


The perfect complement to the Intel886T™ and i486™ microprocessor family is a 
comprehensive development solution. Intel provides a complete, synergistic hardware 
and software development toolset, that delivers full access to the power of the Intel386 
and 1486 microprocessor family architectures. 


Intel development tools are easy to use, yet powerful, with an up-date user interface and 
productivity boosting features such as symbolic debugging. Each tool is designed to help 
move your application from the lab to the market. 


If what interests you is getting the best product to market in as little time as possible, 
Intel is the choice. 
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¢ Comprehensive support for the full 32 bit 
Intel386 and Intel486 microprocessor 
architectures—includes protected mode, 4 
gigabyte physical memory addressing, and 
Intel486 microprocessor on-chip cache and 
numerics 

e In-circuit emulators provide a standard 
windowed interface that is common across 
Intel debug tools and architectures 

e Emulators also feature a source line display 
and symbolics to allow debugging in the 
context of the original program 

¢ Intel high-level languages provide 
architectural extensions for manipulating 
hardware directly without assembly 
language routines 


Compile with 


Create 
and Maintain 
Libraries with 


e Languages provide a common object code 
format (Intel OMF386) that supports 
symbolic debug and permits the intermixing 
of modules written in various languages 

¢ ROM-able code is output directly from the 
language tools, significantly reducing the 
effort necessary to integrate software into 
the final target system 

e Extensive support for the Intel family of 
math coprocessors 

¢ Operation in DOS IBM PC AT and PS/2 
Model 60 and 80, running DOS. 


Convert to 
Hex with 


PROM Loadable Code 


Debug with 


EMUL-387 DB386 Monitor 
, ce) © | o |3&© 
i : ‘ 


Math Coprocessor 
Libraries 


[_ 


Execute on 


386-based PC In-Circuit 


(8) pacer 


Figure 1: Intel Microprocessor Development Environment 
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ASM-386/486 MACRO 
ASSEMBLER 


Intel’s ASM 386 macro assembler for the 
Intel386 and Intel486 Families offers many 
features normally found only in high-level 
languages. The macro facility in ASM 386 
saves development time by allowing common 
program sequences to be coded only once. The 
assembly language is strongly typed, 
performing extensive checks on the usage of 
variables and labels. 


Other Intel ASM 386 features include: 

e “High-level” assembler mnemonics to 
simplify the language 

e Structures and records for data 
representation 

e Support for Intel’s standard object code 
format for source-level symbolic debug, and 
for linking object modules from other 
Intel386 and Intel486 microprocessor 
languages ! 

e Full support for processor and math 
coprocessor instruction sets 

e A “MOD486” switch for support of the i486 
microprocessor instructions 

e 16 bit or 32 bit address overrides 

e Supports development for Virtual 86, Real, 
286 Protected, and 386 Protected modes 


iC386/486 COMPILER 


Intel’s iC-386 compiler combines the power of C 
programming language with special features 
for architectural support and code efficiency. 
The compiler produces code for Intel386 and 
Intel486 processors from C source files, and 
conforms to the 1989 ANSI standard (ANS 
X3.159-1989) for the C programming language. 


Key Intel iC-386 features include: 

¢ Controls to tailor the compilation for each 
step of your application development process 

e In-line versions of many ANSI-standard 
library functions 

e Expanded memory support (LIM Version 3.0 
and higher) for large applications 

e Object code (including supplied run-time 
libraries) suitable for ROM 

e Three different levels of optimization 

e A choice of three segmentation memory 
models (small, compact, and flat) to create 
compact and efficient code 


e In-line processor-specific functions and time- 
saving macros that provide access to the 
special features of the Intel386 and Intel486 
processors 

e In-line floating-point instructions for the 
Intel387T numerics coprocessor and 
Intel486 processor floating-point unit 

e Time-saving macros and functions to help 
assembly language routines interface with 
Intel’s high-level programming languages 

e The standard C run-time library plus 
libraries for floating-point support and the 
iRMX® III C interface library 

e An easy interface to Intel’s non-C 
programming languages 

e Support for source-level debugging 

e Programming with subsystems, allowing 
mixed segmentation memory models 

e Extensions to the 1989 ANSI C standard for 
compatibility with previous versions Intel C 

e Fast and efficient functions for common 
programming tasks 


PL/M-386/486 COMPILER 


Intel’s PL/M-386 is a structured high-level 
system implementation language for the 
Intel386 and Intel486 Families. PL/M-386 
supports the implementation of protected 
operating system software by providing built- 
in procedures and variables to access the 
Intel386 and Intel486 architectures. For 
efficient code generation, PL/M-386 features 
four levels of optimization, a virtual symbol 
table, and four models of program size and 
memory usage. 
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Other Intel PL/M-386 features include: 

e The ability to define a procedure as an 
interrupt handler as well as facilities for 
generating interrupts 

e Direct support of input and output from 
microprocessor ports 

¢ Upward compatibility with Intel PL/M-86 
and PL/M-286 source code 

e A “MOD486” compiler switch for Intel486 
microprocessor instruction generation 


PL/M-386 combines the benefits of a high-level 
language with the ability to access the Intel386 
and Intel486 architectures. For the 
development of systems software, PL/M-386 is 
a costeffective alternative to assembly 
language programming. 


FORTRAN-386/486 COMPILER 


Intel’s FORTRAN-386 compiler is a cross- 
compiler that supports the entire Intel386 
family of components and Intel486 
microprocessors (when operating in the 386 
chip mode) microprocessors. 


FORTRAN-386 features high-level support for 
floating-point calculations, transcendentals, 
interrupt procedures, and run-time exception 
handling. FORTRAN-386 meets the ANSI 
FORTRAN-77 language subset specification 
and supports extensions endorsed by the 
Department of Defense (DOD), extensions that 
support programs written for the ANSI 
FORTRAN 66 standard, and extensions that 
support the Intel386 microprocessor and 
related numerics coprocessors. 


To aid in the development and debugging 
process, the compiler generates warning and 
error messages and an optional listing file. The 
listing file can include symbol cross-reference 
tables and a listing of the generated Intel386 
microprocessor assembly-language 
instructions. Library routines are reentrant 
and ROMable. 


Other Intel FORTRAN-386 compiler features 

include: 

¢ Object code can be configured to reside in 
either RAM or ROM 

e The program code can be optimized for 
execution speed or memory size 

e Source-level debugging is supported via the 
rich symbolics provided in the object module 
format (Intel OMF386) 

e Support for the proposed REALMATH IEEE 
floating point standard 


RLL-386/486 RELOCATION, 
LINKAGE, AND LIBRARY 
TOOLS 


The RLL 386 relocation, linkage, and library 
tools feature comprehensive support of the full 
Intel386 and Intel486 architectures. The tools 
link separate modules, build object libraries, 
link in Intel387 support, build tasks to execute 
under protected mode, or multitasking, 
memory protected software. RLL-386 supports 
loadable, linkable, and bootloadable Intel 
object module formats; and supports all 
segmentation models. RLL-386 consists of the 
following: 


— for linking multiple object 
modules into a single program 
and resolving references between 
modules. 


Binder 


Builder — for producing absolute object 
modules, assigning addresses, and 
creating protected mode data 


structures. 


Librarian — for creating and maintaining 
libraries of object modules. 


EMUL-387, NUM-387 NUMERICS 
SUPPORT LIBRARIES 


Intel’s EMUL-387 and NUM-387 Numerics 
Libraries fully support the Intel387™, Intel 
387 DX, Intel 387 SX math coprocessors and 
the Intel486 internal numerics unit—whether 
an actual math coprocessor is used in the final 
system or not. 


For Intel386 microprocessor based applications 
without a math coprocessor, EMUL-387, a 
numerics software emulator, will execute 
instructions as though the coprocessor were 
present. Its functionality is identical to that of 
the math coprocessor. It is ideal for 
prototyping and debugging floating-point 
application software independent of hardware. 
Further, this permits portability of application 
code regardless of the presence of math 
coprocessor hardware in target systems. 


For applications with a math coprocessor, 
NUM.-387 numerics support library provides 
Intel’s ASM 386, C-386, PL/M-386, and 
FORTRAN-386 language users with enhanced 
numeric data processing capability. With the 


_ library, it is easy for programs to do floating 


point arithmetic. Programmers can bind in 
library modules to do trigonometric, 
logarithmic and other numeric functions. 
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The user is guaranteed accurate, reliable 
results for all appropriate inputs. 


Intel’s NUM-387 support library is a collection 
of four functionally distinct libraries: 

¢ Common elementary function library 
routines perform algebraic, logarithmic, 
exponential, trigonometric, and hyperbolic 
operations on real and complex numbers, as 
well as real-to-integer conversions; the 
routines extend the ranges of the coprocessor 
instructions 

Initialization library routines set up the 
numerics processing environment for the 
Intel386 family of processors with an 
Intel387, DX, or SX or true software 
emulator 

Decimal conversion library routines convert 
floating-point numbers from one Intel387, 
DX, or SX binary storage format to another, 
or from ASCII decimal strings to Intel387, 
DX, or SX binary floating-point format and 
vice versa 

Exception handling library routines make 
writing numerics exception handlers easier 


All support library modules are in Intel586 
microprocessor object module format (Intel 
OMF-386) so they can be linked with the object 
output of any Intel language. All routines are 
reentrant and ROMable. 


By using Intel’s NUM-387, the user is 
guaranteed that the numeric software meets 
industry standard (ANSI/IEEE standard for 
binary floating point arithmetic, 754-1985) and 
is portable, thus maintaining software 
investment. 


DB-386 Software Debugger 


Intel’s DB-386 is a PC-based software 
development environment with source-level 
symbolic debug capabilities for object modules 
produced by Intel’s assembler and high-level 
language compilers. This software debug 
environment allows Intel386 microprocessor 
code to be executed and debugged directly on a 
Intel386 DX or Intel386 SX microprocessor 
based PC, without any additional target 
hardware required. With Intel’s standard 
windowed human interface, users can focus 
their efforts on finding bugs rather than 
spending time learning and manipulating the 
debug environment. 


Other Intel DB-386 features include: 

e A run-time interface allows protected-mode 
Intel386 microprocessor programs to be 
executed directly on a Intel386 DX or 
Intel386 SX microprocessor based PC 


e Drop-down menus make the tool easy to 
learn for new or casual users. A command 
line interface is also provided for more 
complex problems 

e Watch windows (which display user-specified 
variables), trace points, and breakpoints 
(including fixed, temporary, and conditional) 
can be set and modified as needed 

e The user can browse source and callstacks, 

observe processor registers, and access watch 

window variables by either pull down menus 
or by a single keystroke, using function keys 

The user need not know whether a variable 

is an unsigned integer, a real, or a 

structure—the debugger uses the wealth of 

typing information available in Intel 
languages to display program variables in 
their respective type formats 

DB-386 supports the Intel486 microprocessor 

when operated in the Intel386 

microprocessor mode 


Intel386 and Intel486 Family 
In-Circuit Tools 


Intel in-circuit emulators are used in many 
different debug environments including the 
design and test of: PC BIOS software and 
motherboard hardware, Intel386 and Intel486 
based single board computers, and application 
and operating system software for DOS-based, 
ROM-based, and UNIX-based systems. 


The Intel386 and Intel486 In-Circuit 
Emulators (ICE™) take advantage of exclusive 
Intel technology to provide accurate emulation 
for Intel’s 80386 SX, 80386 DX, 80376, and 
80486 microprocessors. Special access to 
internal processor states provides information 
not available to emulators which simply 
monitor the external buses. Emulators which 
do not have access to the internal processor 
conditions cannot guarantee accurate display 
of instructions executed by the microprocessor. 
With an Intel In-circuit Emulator you can be 
certain that the emulator is displaying 
accurate execution history, even when 
executing code from the on-chip cache memory 
of the Intel486. 


The DOS hosted Intel386 DX and Intel386 SX 
emulators feature a windowed, menu-driven, 
human interface which provides easy access to 
the powerful features of these emulators. This 
makes it easy for novice or infrequent users to 
get the most out of every debug session. This 
interface features multiple windows which 


4-5 


intel. 


| FEATURES | 


allow you to simultaneously view source code, 
assembly code, memory, trace, variables, and 
registers. This interface is fully symbolic when 
used with Intel languages. 


All of the emulators feature a combination of 
powerful and flexible breakpoints. The 
products use a combination of software 
breakpoints, hardware breakpoints, and on- 
chip debug registers to provide a rich set of 
recognition logic. Flexible breakpoints make it 
possible to set breakpoints on instruction 
execution and/or any possible bus event. 


Trace filtering provides the ability to select the 
information captured in the trace buffer. 
ICE-386 SX allows capture of solely bus cycle 
information or both bus cycle and execution 
information. In addition, the ICE-386 DX can 
filter wait-state information from the trace 
buffer. ICE-486 provides the most flexible trace 
collection by allowing capture of information 
by any combination of bus cycle type including 
filtering of wait states, by instructions only, or 
by both bus cycles and instructions. 


Other features of Intel emulators include: 

¢ Unparalleled support of the Intel386 and 
Intel486 architectures, notably the native 
protected mode 

e Emulation at clock speeds to 33 MHz, and 
full featured trigger and trace capabilities 

¢ The Intel386 family emulators are 
convertible using removable probes to 
support the 80386 DX and 80386 SX 
microprocessors. The Intel486 processor is 
also supported via a product upgrade. 


Relocatable Expanded Memory 


Designed to enhance your existing ICE-486 and 
the ICD-486 debugger (REM486 is included 
with ICE-486 and an option for ICD-486). This 
optional relocatable expansion memory board 
adds 2 Mbyte of memory which the ICE or ICD 
can use in place of memory on the user target 
board. 
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ONCE-386 and Transmuter 


_ Adapters 


If you have a surface mount Intel386 SX 
microprocessor design using 100-pin PQFP 
parts, Intel ICE emulators have on-circuit 
emulation (ONCE) capability. With surface 
mounted components, the ICE-386 SX 
emulator cabling clamps over the part, tri- 
stating the component, and allowing the 
emulator to operate. This allows you to debug 
manufactured boards without resoldering. For 
early target load development, a transmuter 
adapter can be used. The transmuter provides 
a better connection technique for debugging 
systems where the adapter cable will have to 
be attached and removed many times (like in 
prototype development). 


ICD-486 In-Circuit Debugger 


The ICD-486 In-circuit Debugger provides a 
low-cost alternative for full speed in-target 
Intel486 development. ICD-486 implements a 
subset of ICE functionality including: symbolic 
debugging, debug of high-speed cached 
applications, software and debug register 
breakpoints, and in-circuit operation. 


Worldwide Service, Support, and 
Training 
To augment its developing tools, Intel offers 


field application engineering expertise, hotline 
technical support, and on-site service. 


Intel also offers Software Support which 
includes technical software information, 
automatic distributions of software and 
documentation updates, iCOMMENTS 
publication, remote diagnostic software, and 
development tools troubleshooting guide. 


Intel’s 90-day Hardware Support package 
includes technical hardware information, 
telephone support, warranty on parts, labor, 
material, and on-site hardware support. 


Intel Development Tools also offers a 30-day, 
money-back guarantee to customers who are. 
not satisfied after purchasing any Intel 
development tool. 
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PRODUCT SUPPORT MATRIX 


ASM-386 Macro Assembler 


FORTRAN-386 Compiler 


RLL-386 Relocation, 
Linkage, Library, Support 
Tools 


NUM-387 Libraries 
EMUL-387 Libraries 


i486 | 386 DOS 
DX 3.x and 5.0 
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ORDERING INFORMATION 


386/i486T™ FAMILY DOS 
HOSTED DEVELOPMENT KIT 
ORDER CODES 


Software Order Codes 


All software supports 386 and 486 
microprocessor families except where 
indicated. 


DKIT386C Compiler Software 
Development Kit (See 


following content list). 


D&86ASM386NL ASM macro assembler for 
PC-DOS systems. ) 


DOS resident, ANSI standar 
(ANS X3.159-1989) C 
compiler. 


D86C386NL 


D86PLM386NL DOS resident PL/M compiler. 


D86FOR386NL DOS resident Fortan 
Compiler. 


D86RLL386NL DOS resident software 
development package. 
Contains Binder (for linking 
separately compiled modules), 
a Builder (for configuring 
protected multi-tasking 
systems), a cross reference 
Mapper, and a Librarian. Use 
this tool in conjunction with 
Intel’s 80386 compilers and 
macro assembler. 


DB386 DOS S/W debugger. 


The Intel Basic Software Development Kit for 
the DOS hosted environment includes: 


iC386 compiler 

ASM386 assembler 

RLL386 relocation linker and locator 
NUM887 numerics library 

EMUL387 math coprocessor emulator 
library 

DB386 software debugger 

OMF386LOAD loader development object 
module format documentation 
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IN-CIRCUIT TOOL ORDER 
CODES 


All In-circuit emulator codes include: control 
unit, power supply, processor module, Stand- 
Alone Self Test board, bus Isolation Board, and 
DOS host software and serial interface cable. 


ICE886SX25V ICE-386 SX In-circuit 
emulator for the Intel386 
SX component to 25 MHz. 


ICE-386 SX In-circuit 
emulator for the 80386 SX 
component to 20 MHz. 


ICE-386 DX In-circuit 
emulator for the 80386 DX 
component to 25 MHz. 


ICE-386 DX In-circuit 
emulator for the 80386 DX 
component to 33 MHz. 


In-circuit debugger for the 
80486 microprocessor to 
50 MHz. 


ICE-486 In-circuit emulator 
for the 80486 component to 
33 MHz. 


ICE CONVERSION KITS 


KBASECONC Converts ICE-486 to ICE- 
376, ICE-386 SX, or ICE-386 
DX. 


Converts ICE-386 SX or 
ICE-386 DX to ICE-486. 


pICE386SX20D 


pICE386DX25DZ 


ICE386DX33D 


ICD48650D 


pICE48633DZ 


KBASECONV 
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TOICE386SX20D Converts ICE-386 DX to 


ICE-386 SX 20 MHz. 
TOICE386DX25D Converts ICE-386 SX to 
ICE-386 DX 20 MHz. 
TOICE48633D Converts ICE-386 SX or 
ICE-386 DX to ICE-486 33 
MHz. 
ADDITIONAL TOOL ORDER 
CODES 
386SXONCE 100 pin PQFP to 132 pin 
Kit PGA adaptor kit. 
REM486A 2 Mbyte relocatable 
expansion memory option 
for ICD-486 (included with 
ICE-486). 


To order your Intel Development Tool product, 
for more information, or for the number of 
your nearest sales office or distributor, call 
800-874-6835 (North America). For literature 
on other Intel products call 800-548-4725 
(North America). Outside of North America, 
please contact your local Intel sales office or 
distributor for more information. 
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Intel supports application development for the 80C86/80C186 family of microprocessors* 
with a complete set of development languages and utilities. Intel software tools generate 
fast and efficient code and are designed to give maximum control over the processor. 
Most importantly they can decrease the design time of an embedded system and 
accelerate your product’s time-to-market. 


FEATURES 

¢ Macro assembler for high-performance e Windowed, interactive source level 
code debugger that works with all Intel 

e ANSI C compiler with numerous languages 
processor-specific extensions. e AEDIT Source Code and text editor 

e PL/M compiler for high-level language e Library manager for creating and 
programs with support for many low- maintaining object module libraries 
level hardware functions ¢ Complete 8087/80C187 numeric 

e Linker to link Intel-generated compiler libraries, including software emulator 
and assembler modules together support 

e Locator to generate files with absolute ¢ Object-to-hex conversion utility for 
addresses for execution from ROM-based EPROM support 
systems 


*80C86/8088, 80186/80188, 80C186/80C188, 80C186EB/80C188EB, 80C186XL/80C188XL, 80C186EA/80C188EA, 
80C186EC/80C188EC, Real Mode 80286, and real mode Intel386™ microprocessors. 
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ASM-86 is used to translate symbolic assembly ¢ Simplified instruction set makes program 


language source into relocatable object code development easier. 

where utmost speed, small code size and e Saves development time by performing 

hardware control are critical. extensive checks on consistent usage of 
variables and labels. Inconsistencies are 

HIGHLIGHTS AND BENEFITS detected when the program is assembled, 


e Macro facility saves development and before linking or debugging is started. 


maintenance time, since common code 
sequences need only be developed once. 


| iC-86 COMPILER | COMPILER 


Intel’s iC-86 brings the full power of the C e Supports small, compact, medium, and large 
programming language to embedded ‘memory segmentation models. Allows 
applications based on the 80C86/80C186 memory modules to be mixed using “near” 
family of microprocessors. iC-86 can also be and “far” pointers. 
used to develop real mode programs to be e Extensive debug information, including type 
executed on the 80C286 or the Intel386T information and symbols, increases 
microprocessors. programming productivity. 

e Built-in functions for automatic machine 
HIGHLIGHTS AND BENEFITS code generation improve compile-time and 
¢ Generates compact efficient code — easily run-time performance. Eliminates need for 

loaded into ROM-based systems. in-line assembly code or making calls to 

¢ Highly optimized with four levels of assembly functions. Allows registers, I/O 


optimization, including a jump optimizer and ports, interrupts and the numerics chips to 
improved register manipulation via register be controlled directly in C and not in 
history. assembly code. 

e Produces ROMable code — can be loaded e ANSI C-conforming. Fully linkable with 
directly into embedded target systems. other Intel 80C86/80C186 languages such as 


Libraries completely ROMable, retargetable, ASM and PL/M. Allows programmers to 
and reentrant. choose optimal language(s) for application. 


| PL/M-86 COMPILER | PL/M-86 COMPILER 


PL/M-86 is a high-level programming e Define interrupt handling procedures using 
language designed to support the software the INTERRUPT attribute. Compiler 
requirements of advanced 16-bit . generates code to save and restore all 
microprocessors. The PL/M language provides registers for interrupt procedures. 
both the productivity advantages of a high- e Compile-time options to increase flexibility 
level language and access to the low-level of PL/M compiler. Options include four 
hardware features found in the assembly optimization levels, conditional compilation, 
language. inclusion of common PL/M source files from 
disk, symbol cross-referencing, and optional 
HIGHLIGHTS AND BENEFITS assembly language code in list file. 


e Supports seven data types. Allows compiler 


e Modular and structured programming 46 perform signed “unsigned dail toate. 


support. Final applications easier to 
understand, maintain, and support. point arithmetic. 
e Includes extensive list of built-in functions, Object modules compatible with all other 


e.g., TYPE CONVERSION functions, object modules generated by Intel 80C86/ 
STRING manipulations, and functions for 80C186 languages. 
interrogating hardware flags. 
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e Final linked module can be either a bound 


Link-86 combines multiple object modules into 
a single program and resolve references 
between independently compiled modules. 
Both tools can increase productivity by 
enabling the user to use modular 
programming, making applications easier to 
design, test, and maintain. 


HIGHLIGHTS AND BENEFITS 


e Incremental linking allows new modules to 
be easily added to existing software. 


load-time- locatable module or a relocatable 
module. 


e .EXE option allows modules to be generated 


that can be executed directly in a DOS 
system. 


e Standard modules can be reused in different 


applications, decreasing software 
development time. 


| LOC-86 TOOLS | TOOLS 


The LOC-86 tool converts relocatable 80C86/ 
80C186 object modules into absolute object 
modules. Both will allow you to assign 
addresses. 


HIGHLIGHTS AND BENEFITS 


e Default address assignment algorithm 
automatically assigns absolute addresses to 
object modules prior to loading code into 
target system. Frees user from concern 
regarding the final arrangement of the object 
code in memory. 


¢ User has ability to override the control and 
specify absolute addresses for various 
Segments, Classes, and Groups in memory. 

e User can reserve various parts of memory. 

¢ Simplifies set up of bootstrap loader and 
initialization code for ROM-based systems. 
Very important and beneficial for embedded 
application development. 

e Optional print file containing diagnostic 
information helpful in debugging may be 
generated. 


| LIB-86 TOOLS | TOOLS 


Both Lib-86 creates and maintains libraries of 
software object modules. Standard modules 
can be placed in a library and linked 


to your application using the LINK-86 tool. 


OH-86 OBJECT-TO-HEXADECIMAL CONVERTER 


The OH-86 utiltity converts Intel 80C86/186 
object modules into standard hexadecimal 
format, allowing the code to be loaded directly 


into PROM using industry standard PROM 
programmers. 


NUMERICS SUPPORT LIBRARIES 


The 8027/80C187 numerics libraries fully 
support the 8087 and 80C187 math 
coprocessors, with or without the math 
coprocessor in the final system; numeric 
functions may be processed by the math 
coprocessor or by the corresponding software 
emulator. 


Numerics Software Emulator 


e For applications without a math coprocessor 

e Executes instructions as though coprocessor 
present; functionality identical to math 
coprocessor. 

e Ideal for prototyping and debugging floating 
point application code independent of 
hardware; supports portable code. 


Numerics Support Library 

e For applications with a math coprocessor 

¢ Provide Intel ASM, C, PL/M, and FORTRAN 
users with enhanced numeric data 
processing capability; easy to do floating 
point math. 


HIGHLIGHTS AND BENEFITS 


e 4 functionally distinct libraries support 
floating point operations. 
¢ Common elementary function library: 

algebraic, logarithmic, exponential, 
trignometric and hyperbolic operations on 
real and complex numbers. Real-to- 
integer conversions 

e Initialization library: Set up the numerics 
processing environment (math 
coprocessor or software emulator). 

e Decimal conversion library: Converts 
floating point numbers from one binary 
storage format to another, from ASCII 
decimal strings to binary floating point 
format, or vise- versa. 

¢ Error handling library: Simplifies coding 
numerics exception handlers. 

e All support library modules in OMF-86 
format; can be linked with object output of 
any Intel language. 

e All library routines reentrant and ROMable. 

¢ Meets industry standard (ANSI/IEEE 
standard for binary floating point 

arithmetic, 754-1985) 


DB-86 SOURCE LEVEL DEBUGGER 


DB-86 is a DOS-hosted, high-level source code 
debugger for programs written in C, PL/M, 
FORTRAN, and Pascal. Its powerful, source- 
oriented interface allows users to focus their 
efforts on finding bugs, not learning how to use 
the debug environment. 


HIGHLIGHTS AND FEATURES 


e Drop-down menus and on-line help decrease 
learning time for beginning users. 

e Watch windows, conditional breakpoints, 
trace points and fixed and temporary 


breakpoints can be set and modified as 
needed. 

¢ Browse Source and Call Stack, review 
processor registers, observe watch window 
variables — all accessed via a pull down 
menu or single keystroke. 

e Uses extensive debug information available 
in Intel languages to display program 
variables in their respective type formats. 

e Provides support for overlayed programs and 
the math coprocessors. 


intel. 


AEDIT SOURCE CODE AND TEXT EDITOR 


Aedit is a full-screen text editing system 
designed specifically for software engineers 
and technical writers. The output file is the 
pure ASCII text (or HEX code) you input — no 
special characters or proprietary formats. Its 
numerous features and advanced capabilities 
make it an excellent tool to support the 80C86/ 
80C186 development environment. 


HIGHLIGHTS AND BENEFITS 


¢ Complete range of editing support—from 
document processing to HEX code entry and 
modification 

e Supports system escape for quick execution 
of PC-DOS System level commands 

e Full macro support for complex or repetitive 
editing tasks 

e Supports multiple operating systems 
including DOS and iRMX 

e Dual file support with optional split-screen 
windowing 

¢ No limit to file size or line length 


e Quick response with an easy to use menu 
driven interface 

e Configurable and extensible for complete 
control of the editing process. 


WORLDWIDE SERVICE, 
SUPPORT, AND TRAINING 


To augment its development tools, Intel offers 
a full array of seminars, classes, and 
workshops, field application engineering 
expertise, hotline technical support and on-site 
service. 


Intel also offers a Software Support package 
which includes technical software information, 
telephone support, automatic distribution of 
software and documentation updates, access to 
the ““Tooltalk” electronic bulletin board. 
‘“iComments” publication, remote diagnostic 
software, and a development tools 
troubleshooting guide. 


Intel’s Hardware Support package includes 
technical hardware information, telephone 
support, warranty on parts, labor, material, 
and on-site hardware support. 


[ SUMMARY | 


Intel provides a complete software 
development toolset that delivers full access to 
the 80C86/80C186 microprocessors. The 
development tools are easy to use, yet 
powerful, with productivity boosting features 


such as source-level symbolic debugging and an 
up-to-date user interface. Each tool is designed 
to help you move quickly your application from 
the lab to the market. 


ORDERING INFORMATION 


80C86/80C186 
D86ASM86KIT ASM-86 

or higher 
D86C86NL iC-86 

higher 
D86PLM86NL PL/M-86 

higher 
D86EDNL AEDIT 


or higher 


Assember for PC XT or AT system (or compatible) running DOS 3.0 
Software Package for IBM PC XT/AT running PC DOS 3.0 or 
Software Package for IBM PC XT/AT running PC DOS 3.0 or 


AEDIT Source Code Editor for IBM PC XT/AT running PC DOS 3.0 
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Intel386T™ DX AND Intel386T™ SX IN-CIRCUIT 
EMULATORS 


280850-1 


ACCURATE AND SOPHISTICATED EMULATION FOR THE 
Intel386™ DX AND Intel386™ SX MICROPROCESSORS 


Intel386T™ In-circuit Emulators are the cornerstone of the optimum development 
solution for the Intel386 Family of microprocessors. The ICETM-386 family of 
development tools delivers complete access and control over the Intel386. 


Intel386 emulators feature realtime emulation to 33 MHz, source-level symbolic 
debugging, and a powerful windowed human interface. Intel product quality and world 
class technical support and service insure that your design requirements are met on time. 
And your investment in development tools is protected via interchangeable probes for the 
Intel386 DX and Intel386 SX microprocessors. Support for the Intel486™ is provided via 
an ICE conversion package. An emulator for the Intel386 SL processor is also available. 


Maximize your productivity with Intel development tools. Reduced time to market and 
increased market acceptance for your microprocessor-based product are the benefits 
when Intel is the choice. 


September 1992 
4-14 Order Number: 280850-006 
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INTEL ICET™ FAMILY IN-CIRCUIT EMULATOR FEATURES 


e ICE-386 DX and ICE-386 SX emulators e Versatile event recognition makes short 
feature a powerful source-level, windowed work of uncovering complex bugs 
human interface e Dynamic trace display of bus and execution 
¢ Unparalleled support of all of the Intel386 information during emulation 
operating modes opens the door to the full " e Support for PGA and P@FP component 


potential of the Intel386 architecture 


e Non-intrusive, 100% accurate emulation and 
execution history to processor speeds of 


packages 


e Integrated software development 
environment provides complete access to the 


33 MHz power of the Intel386 family 
¢ Relocatable Expansion Memory (REM) . 

Board options provide 2 MByte of mappable * Avallgnie os DUS 

memory 
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100% ACCURATE EMULATION 


Intel386 Family In-Circuit Emulators utilize 
technology that accesses internal processor 
states that are otherwise invisible. Intel386 
microprocessors fetch and execute instructions 
in parallel; fetched instructions are not 
necessarily executed in any order. Because of 
this, an emulator without access to the core of 
the component is prone to error in determining 
what actually occurs inside the 
microprocessor. With Intel’s technology, an 
Intel386 In-Circuit Emulator displays 
execution history with one hundred percent 
accuracy. 


OPENING THE DOOR TO 
PROTECTED MODE 


The Intel386 family of In-circuit Emulators 
opens the door to the full potential of the 
architecture with unparalleled support of 
protected mode. Not only does the emulator 
display and modify task state segments and 
global, local, and interrupt descriptor tables 
(with symbolic access to all descriptor 
components), but emulator functions are 
sensitive to the operating mode of the 
processor, greatly improving ease of use. For 
instance, while debugging protected mode 
code, it is easy to change any field in any 
descriptor, including privelege, level, segment 
limit, segment access rights, etc. 


The Intel386 family of In-circuit Emulators 
supports all aspects of protected mode 
addressing, including paged virtual memory. 
Processor tables are used to automatically 
translate virtual addresses to linear and 
physical addresses. Physical addresses can be 
translated to symbolic references to indicate 
the module, procedure, or data segment 
accessed. And when debugging a memory 
management system, components of the page 
table and directory can be displayed and 
modified. 


FLEXIBLE AND VERSATILE 
EVENT RECOGNITION 


Flexibility and versatility in event recognition 
makes short work of uncovering the most 
complex bugs. Bus event recognition circuitry 
may be used to trigger on specific or masked 
data input, output, read, write, or fetched 
values at a physical address or range of 
addresses. In addition, on-chip debug registers 
may be used to trigger on virtual, linear, or 
symbolic addresses being executed, accessed, or 
written. 
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Versatility shows in other triggering options 
such as the ability to break upon a task switch, 
an external signal from another emulator or a 
logic analyzer, multiple occurrences of an 
event, a full trace buffer, halt or shutdown 
cycles, or interrupt acknowledge. And up to 
four sequential event triggers can be combined 
with a high-level construct to make it easier 
locating those hard to find real-time bugs. 


The Intel386 family of In-circuit Emulators 
captures all bus activity and, as an option, 
execution information, into a trace buffer of 

4 K frames. Information is captured in logic 
analyzer style, including the address and data 
busses, as well as a variety of important 
control signals. With PRE, POST, and 
CENTER collection modes it is possible to focus 
the trace buffer contents around a specified 
trigger event. ICE-386 DX also allows the user 
to selectively remove wait-states from trace. 


ACCESSING THE POWER 


The DOS hosted Intel386 DX and Intel386 SX 
emulators feature a windowed, menu-driven, 
human interface which provides easy access to 
the power of these emulators. This interface 
features pull-down menus, pop-up windows 
and templates for common actions such as 
configuring the emulator and setting 
breakpoints 


A source code window allows display of 
program code as high-level source and/or 
assembly code, and most importantly, allows 
“point and shoot” breakpoints. This powerful 
feature, combined with the ability to view any 
section of program code in the source window, 
means that setting a breakpoint anywhere in 
the program is as simple as moving the cursor 
to a line of code and hitting a function key. 


Multiple windows may be opened for 
simultaneous viewing of not only source code, 
but also memory, trace buffer contents, 
variables, and registers. All of these features 
are accessible from pull-down menus or 
function keys, making it easy for novice or 
infrequent users to get the most of every debug 
session. 


Customized procedures with variables and 
literal definitions can be created to assist in 
debugging or for manufacturing test or field 
service applications. 
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SPEEDING DEVELOPMENT 
WITH SYMBOLICS 


Intel386 processor data structures, such as 
registers, descriptor tables, and page tables, 
can be examined and modified using symbolic 
names. And with the symbolic debugging 
information that is a feature of Intel 
languages, memory locations can be accessed 
using symbolic references to the source 
program (such as a procedure and variable 
names, line numbers, or program labels) 
rather than via cumbersome virtual, linear, or 
physical addresses. The type information of 
variables (such as byte, word, record, or array) 
can also be displayed. 


ADDITIONAL FEATURES 


The Intel386 In-circuit Emulator can be 
combined with a variety of devices. I/O lines 
synchronize emulation starts and triggers with 
external tools such as a logic analyzer or 
another emulator. An optional Time Tag 
Board synchronizes multiple Intel386 
emulators and records timestamp information 
in the trace buffer with 20 nanosecond 
resolution. An Optional Clips Pod allows 8 user 
defined data lines to be captured and displayed 
in the trace. The bus isolation board buffers 
the emulation processor from faults in an 
untested target. And with the Stand-Alone 
Self-Test board the emulator can be used to 
debug software before the target system is 
functional, as well as execute confidence tests. 


COMPONENT INTERCONNECT 


Component interconnect between the ICE and 
the processor on your system is accomplished 
using either direct probe connection to the 
target system, or by using an optional hinge 
cable adapter. Hinge cable adapters allow the 
ICE to access components in hard-to-reach 
cases and in the case of the Intel386 SX, to 
provide support for surface mounted devices 
via ONCE mode. ONCE mode is a mechanism 
of tri-stating the component pins, thus 
allowing a system with a surface mounted CPU 
to be emulated without removing the 
component. The dimensions and clearance 
requirements of the adapter are shown in the 
386SXONCECBL Adapter Dimension figure on 
the following pages. In addition, a new, more 
reliable means of connecting to 100 pin PQFP 
Intel3886 SX processors will be available in Q4, 
1992. See diagram of transmuter adapter for 
dimensions. 


THE INVESTMENT PICTURE 


As designs move from one Intel386 Family 
processor to another, the reinvestment cost is 
limited to probes that adapt the emulator base 
to the specific processor. Beside cost savings, 
migration from one processor to another is 
accomplished with minimum disruption in the 
engineering environment, as the same 
command language applies to the entire 
emulator family. 


A conversion kit is also available to support 
the Intel486T™ family of microprocessors and 
an emulator is also available to support the 
Intel386 SL microprocessor. 
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_SOFTWARE COMPLETES THE 
SYSTEM 


Intel wraps a comprehensive software 
development system around the emulator to 
deliver the most complete development 
environment available from a single vendor. 
Like the emulator, Intel’s software 

development system supports every aspect of 
the Intel386 architecture. 


Overlooked at times is the fact that a 
significant part of developing a system is 
making sure the code works. Intel languages 
and software debugger integrate seamlessly 
with the Intel886 emulator and provide the 
symbolics so important for efficient debugging. 
By using Intel software tools with the Intel386 
emulator the full power of Intel development 
solution can be utilized. 


The software development system offers a 
broad choice of languages with object code 
compatibility so performance can be 
maximized by using different languages for 
specialized, performance critical modules. 
Architectural extensions in the high-level 
languages allows hardware features such as 
interrupts, input/output, or flags to be 
controlled directly, avoiding the tediousness of 
coding assembly language routines. 


Intel’s software portfolio includes a unique, 
sophisticated, and very powerful system 
builder, which simplifies the generation of 
protected mode systems from simple flat model 
systems to the most complex paged multiple 
privelege level, multi-tasking systems. To 
further reduce the effort necessary to integrate 
software into the final target configuration, 
Intel tools produce ROM-able code directly 
from the development system. 


WORLDWIDE SERVICE, SUPPORT, AND 
TRAINING 


To augment its development tools, Intel offers 
a full array of seminars, classes, workshops, 
field application engineering expertise, hotline 
technical support, and on-site service. 


Intel also offers a Software Support contract 
which includes technical software information, 
automatic distributions of software and ~ 
documentation updates, iCOMMENTS 
publication, remote diagnostic software, and a 
development tools troubleshooting guide. 


Intel’s 90-day Hardware Support package 
includes technical hardware information, 
telephone support, warranty on parts, labor, 
material, and on-site hardware support. 


Intel Development Tools also offers a 30-day, 
money-back guarantee to customers who are 
not satisfied after purchasing any Intel 
development tool. 


ICETM-386 FAMILY SPECIFICATIONS AND 


REQUIREMENTS 


Unless otherwise noted, the following 
specifications apply to ICE-386 DX and 
ICE-386 SX. 


HOST SYSTEM REQUIREMENTS 


The user supplied host system can be either an 
IBM* PC/AT* or Personal System/2* Model 
60. Host system requirements to run the 
emulator include the following: 

e DOS version 3.3, 4.01 or 5.0 

¢ 640 KBytes of RAM in conventional memory 
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e 1 MByte of expanded memory (e.g., an 
Above™ board managed by a driver such as 
EMM.SYS, or an expanded memory manager 
such as QEMM* or 386MAX which conforms 
to the Lotus*/Intel/Microsoft* Expanded 
Memory Specification, version 4.0 or later) 

e¢ A 20 MB hard disk 

e A serial port or the National Instruments 
GPIB-PCII*, GPIB-PCIIA*, or MC-GPIB* 
board 

e A math coprocessor if either the optional 
time tag board is used or if a math 
coprocessor resides on the target system 
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ELECTRICAL 
CHARACTERISTICS 


100-120V or 220-240V selectable 
50-60 Hz : 

2 amps (AC max) @ 120V 

1 amp (AC max) @ 240V 


ENVIRONMENTAL 
CHARACTERISTICS 


Operating temperature: + 10°C to + 40°C 
(50°F to 104°F) 

Operating Humidity: Maximum of 85% 
relative humidity, 
non-condensing 


ICE™-386 FAMILY SPECIFICATIONS AND | 
REQUIREMENTS 


TESTED HOT SYSTEMS INCLUDE: 


e¢ IBM PC/AT (286) with MS-DOS 3.3 and an 
Intel Above Board with 1.5 MBytes of 
memory 

¢ IBM PC/AT with Intel Inboard 386 with MS- 
DOS 3.3 and 3 MBytes of memory with a 
QEMM* or 386Max* memory manager 

¢ Compaq* DESKPRO 386* with COMDOS 
3.31 and 3 MBytes of memory with QEMM or 
386MAX memory manager 

¢ Intel Sys 301 with MS-DOS 3.3 and 2 MBytes 
of memory with a QEMM, EMM, or 386Max 
memory manager 

e IBM PS/2 Model 80 with PC-DOS 4.01 and 2 
MBytes of memory with QEMM or 386Max 


memory manager 
Note: Future versions of ICE-386 Family emulators will 
use DOS extenders. Host systems will need at least 
a 386 SX or 386 DX based host with 4 MBytes of 
RAM. 


THE EMULATOR’S PHYSICAL CHARACTERISTICS 


Base Unit 
Processor Module 

Optional Isolation Board 
Power Supply | 

User Cable 

100-Pin Target-Adapter Cable 
88-Pin Target-Adapter Cable 
Serial Cable 
Optional Clips Pod 


ICETM-386 DX 
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ICET™-386 FAMILY SPECIFICATIONS AND 
REQUIREMENTS 


The Processor Module and Bus Isolation Board Dimensions (Continued) 


ICE™-386 SX and ICET.-376 
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ICET™-386 FAMILY SPECIFICATIONS AND 
REQUIREMENTS 


The Processor Module and Bus Isolation Board Dimensions (Continued) 
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ICE™-386 FAMILY SPECIFICATIONS AND 
REQUIREMENTS | 


386SXONCECBL Hinge Cable Adapter Dimensions 


Converter board IMP Cable 


Transmuter Wei Maa 


Customer's board .288 (vertical clearance 


| required) 
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AC Specifications With the Bus Isolation Board Installed 


Simba] Parmeter | nina | esis Note 


CLK2 period 

CLK2 high time 

CLK2 low time 

A2-A31 valid delay 

A2-A31 float delay 

BEO# -BE3#, LOCK # valid delay 
BEO# -BE3#, LOCK # float delay 
W/R#, M/IO#, D/C#, ADS# valid delay 
W/R#, M/IO#, D/C#, ADS# float delay 
DO-D31 write data valid delay 

DO0-D31 write data float delay 

HLDA valid delay 

NA# hold time 

BS16# hold time 

READY # hold time 

D0-D31 read setup time 

DO-D31 read hold time 

HOLD hold time 

RESET setup time 

RESET hold time 

NMI, INTR hold time 

PEREQ, ERROR#, BUSY # hold time 


ICET.386 DX 25/33 Emulator DC Specifications 


40 nS 

t2a Min+2nS 
t38b Min+ 2 nS 

t6 Min+ 3.5 nS 
t14 Min+ 5.5 nS 
t8 Min+ 3.5 nS 
t14 Min+ 5.5 nS 
t10 Min+3.5 nS 
t14 Min+ 5.5 nS 
t12 Min+ 4.5 nS 
7.5nS 

t14 Min=3 nS 
t16 Min+ 10.6 nS 
t18 Min+ 10.6 nS 
t20 Min+ 10.6 nS 
t21 Min+ 8.5 nS’ 
t22 Min+7.6nS 
t24 Min+ 10.6 nS 
t25 Min+ 2.1 nS 
t26 Min+ 2.1 nS 
t28 Min+ 10.6 nS 
t30 Min+ 10.6 nS 


Emulator Capacitance Specifications 


ay 


Input Capacitance 

CLK2 

READY #, NMI, BS16# 

HOLD, BUSY #, 
PEREQ, NA#, INTR, 
ERROR#, RESET 


Output or I/O Capacitance 
DO-D31 
A2-A31 
BEO # -BE3 # 
D/C# 
W/R# 
ADS#, M/IO# 
LOCK #, HLDA 


@ 2V 

@ 0.8v 
t6 Max+ 24.6nS |CL=120 pF 
t14 Max+ 32.6 nS 
t8 Max + 24.6 CL=75pF 
t14 Max + 32.6 
t10 Min + 24.6 CL=75 pF 
t14 Max + 32.6 
t12 Max + 20.6 CL= 120 pF 
41.6nS 
t14 Max+ 21.2nS 
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SPECIFICATIONS 


ICETM.386 DX 25/33 Emulator DC Specifications 
without the Bus Isolation Board Installed 


Input High Leakage Current 
A2-A31, BEO#-BE3#, DO-D31, HLDA, 
NMI, BS16# 
ADS#, M/IO#, LOCK#, READY # 
W/R#, D/C# 
CLK2 
RESET 


Input Low Leakage Current 


A2-A31, BEO#-BE3#, DO-D31 
HLDA, NMI, BS16# 

ADS#, M/IO#, LOCK #, READY# 
W/R# | 

D/C# 

CLK2 

RESET 


Note 1: Not tested. These specifications include the 80386 component and all additional emulator loading. 
Note 2: The target-adapter cable adds a propagation delay of 0.5 ns. 


ICET-386 SX or ICETM-386 20 MHz Emulator DC Specifications 
without the Bus Isolation Board Installed 


F Meet [OL  Dewientio ee 
Processor Module Supply Current 3386SX-Ic¢¢ + 940 mA 
RESET 


e Input High Leakage Current 
iin 
HDLA 


A23-A1, BLE#, BHE#, D/C#, HLDA 
D15-D0 

Note 1: This specification is the DC input loading of the emulator circuitry only and does not include any component leakage 

current. 


ADS#, M/IO#, LOCK #, READY #, ERROR# 
Note 2: This specification replaces the component specification for this signal. 


W/R# 
CLK2 
RESET 


Input Low Leakage Current 
A23-A1, BLE#, BHE#, D/C# 
D15-D0 
ADS#, M/IO#, LOCK #, READY #, ERROR# 
W/R# 
CLK2 
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SPECIFICATIONS 


ICETM.386 DX 25/33 Emulator DC Specifications 


with the Bus Isolation Board Installed 
[Item [| __ Description =| Min | = Max | 
|| PM-Igg + 475 mA 


BIB-Icc | Bus Isolation Board Supply Current 


Output Low Voltage (Io, = 48 mA) 


A2-A31, BEO#-BE3#, D/C# 
ADS# 

DO-D31, M/IO#, LOCK #, W/R#, 
HLDA (py, = 24 mA) 


Output High Voltage (Io = 3 mA) 
A2-A31, BEO#-BE3#, D/C# 

~ ADS# 

DO-D31, M/IO#, LOCK #, W/R#, 

HLDA (Ip, = 24mA) 


Input High Current 
CLK2, RESET 
READY # 


Input Low Current 
CLK2, RESET 
READY # 


Output Leakage Current 
A2-A31, BEO#-BE3#, D/C#, ADS# 
DO-D31, M/IO#, LOCK #, W/R# 


ic es a 
PM-Ioc + 350 mA 


BIB-Icc | Bus Isolation Board Supply Current a ot] 
Output Low Voltage (Io, = 48 mA) Le 


A23-A1, BLE#, BHE#, D/C, ADS# 0.5V 
D15-D0, M/IO#, LOCK #, W/R# 0.5V 
HLDA (Io, = 24 mA) 0.44V 


Output High Voltage (Io94 = 3 mA) 
A23-A1, BLE#, BHE#, D/C, ADS# 
D15-D0, M/IO#, LOCK #, W/R# 

HLDA (Ip, = 24 mA) 


Input High Current 
CLK2, RESET 


READY # 


Output Leakage Current 
A23-A1, BLE#, BHE#, D/C, ADS# 
D15-D0, M/IO#, LOCK #, W/R# 


Input Low Current 
CLK2, RESET 
READY # 
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ELECTRICAL SPECIFICATIONS 


The synchronization input lines must be valid 
for at least four CLK2 cycles as they are only 
sampled on every other cycle. These input lines 
are standard TTL inputs. The synchronization 
output lines are driven by TTL open collector 
outputs that have 4.7K-ohm pull-up resistors. 
The synchronization input and output signals 
on the optional clips pod are standard TTL 
input and outputs. 


PROCESSOR MODULE 
INTERFACE CONSIDERATIONS 


With the processor module directly attached to 
the target system without using the bus 
isolation board, the target system must meet 
the following requirements. 

e The user bus controller must only drive the 
data bus during a valid read cycle of the 
emulator processor or while the emulator 
processor is in a hold state (the emulator 
processor uses the data bus to communicate 
with the emulator hardware). 

Before driving the address bus, the user 
system must gain control by asserting HOLD 
and receiving HLDA. 

The user reset signal is disabled during the 
interrogation mode. It is enabled in 
emulation, but is delayed by 2 or 4 CLK2 
cycles. 

The user system must be able to drive one 
additional TTL load on all signals that go to 
the emulation processor. 


When the target system does not satisfy the 
first two restrictions, the bus isolation board is 
used to isolate the emulation processor from 
the target system. With the isolation board 
installed, the processor CLK2 is restricted to 
running at 25 MHz. 


The processor module drives its DC power from 
the target system through the Intel386 
component family socket. It requires 1500 mA, 
including the Intel386 DX component current 
or 1400 mA, including the Intel386 SX or 376 
component current. The isolation board 
requires an additional 475 mA for the 

Intel386 DX component.and 350 mA for the 
Intel386 SX or 376 components. 
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INTEL386 DX PROCESSOR 
INTERCONNECT . 


The processor must be socketed. The printed 
circuit board design should locate the processor 
socket at the physical ends of the printed 
circuit board traces that connect the processor 
to the other logic of the target system. This 
reduces transmission line noise. Additionally, 
if the target system is enclosed in a box, pin 
one of the processor socket should be oriented 
to make connecting the processor module or 
target-adapter cable (TAC) easier. 


The emulator uses the Intel386 DX 

microprocessor’s pins C7, E13, and F13. The 

Intel386 DX High Performance 32-Bit 

Microprocessor With Integrated Memory 

Management data sheet specifies these pins as 

“N/C” (no connect). If the target system uses 

any of these pins, you must do one of the 

following: 

e Use the bus isolation board 

e Use the hinge cable adapter 

e Build an adapter to disconnect pins C7, E13, 
and F13 (i.e., a socket with these pins 
removed). 


INTEL386 SX PROCESSOR 
INTERCONNECT 


The processor can be either socketed or 
surface-mount. Some examples of sockets 
which have been used include Textool 2-0100- 
07243-000 or AMP 821949-4 sockets. The 
standard ICE-386SX provides support for 
socketed components. To support surface- 
mount components, the optional 
386SXONCEKIT hinge cable adapter kit 
should be ordered. This kit includes an adapter 
that fits over a surface-mount Intel386 SX and 
tri-states its pins using ONCE mode. A 
transmuter, a new, more reliable surface- 
mounted PQFP adapter will be available for 
the ICE-386 SX in Q4, 1992. See the 
transmuter converter keep out diagram for | 
dimensions. 


The printed circuit board design should locate 
the processor socket at the physical ends of the 
printed circuit board traces that connect the 
processor to the other logic of the target 
system. This reduces transmission line noise. 
Additionally, if the target system is enclosed in 
a box, pin one of the processor socket should be 
oriented to make connecting the processor 
module or hinge cable adapter easier. 
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ORDERING INFORMATION 


IN-CIRCUIT EMULATOR OPTION 


IN-CIRCUIT EMULATOR ORDER CODES 


All In-Circuit Emulator codes include: control 
unit, power supply, processor module. Stand- 
Alone Self Test board, bus Isolation Board, 
either DOS or HP9000 host software and a 
serial interface cable. 


pICE386SX20D ICE-386SX In-Circuit 
Emulator for the 80386 SX 
component to 20 MHz. 


pICE386DX25DZ ICE-386DX In-Circuit 
Emulator for the 80386 DX 
component to 25 MHz. 


ICE3886DX33D ICE-386DX In-Circuit 
Emulator for the 80386 DX 
component to 33 MHz. 


IN-CIRCUIT EMULATOR CONVERSION 
KITS 


KBASECONC Converts ICE-486 to 
ICE-386SX or ICE-386DX. 


TOICE386SX20D Converts ICE-386DX 
to ICE-386SX 
20 MHz. 


TOICE386SX25D Converts ICE-386DX 
to ICE-386SX 
25 MHz. 


TOICE3886DX25D Converts ICE-386SX 
to ICE-386DX 
25 MHz. 


TOICE48633D Converts ICE-386SX 
or ICE-386DX to ICE-486 
33 MHz. 


ORDER CODES 


p88GAADAPT 


386SXONCECBL 


pICE3XXCPO 


pICE3XXTTB 


386SXONCE 
KIT 


Adaptor for ICE376 
emulator to support 88 pin 
PGA component packaging. 


ONCE (On-Circuit 
Emulation) hinge cable 
adapter for ICE-386 SX to 
support 100 pin PQFP 
component packaging in 
surface-mount. The 
standard ICE product 
includes a hinge cable 
adapter for socketed 
components. 


Clips Pod Option for 
ICE386SX 16 or 20 MHz, 
ICE386 25 MHz, and 
ICE386DX 33 MHz 
emulators. 


Time Tag Board Option for 


ICE386SX 16 or 20 MHz, 
ICE386 25 MHz, and 4 
ICE386DX 33 MHz 


emulators. 


Kit includes 100 pin PQFP 
386SXONCECBL adapter 
and SAST with 100 PIN 
PQFP dummy component. 


i3SXCONV100PQ Kit includes 100 pin PQFP 


transmuter adapter and 
SAST. 
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INCLUDING PARADIGM DEBUG/ICE WINDOWED 
INTERFACE 


PRODUCT OVERVIEW 


The Intel ICETM-186/188 family of In-Circuit Emulators deliver outstanding 16 MHz and 
20 MHz real-time emulation for the 80C186/80C188 family of microprocessors: 
80C186EB/C188EB, 80C186XL/C188XL, 80C186EA/C188EA, 80C186EC/C188EC, 
80C186/C188, and 80186/188. The emulator is a versatile and efficient tool for 
developing, debugging, and testing products designed with Intel microprocessors. 
Included with the emulator is the standard Intel Windowed Interface and the Paradigm 
DEBUG/ICE Interface (based on Borland’s Turbo Debugger), allowing you to choose the 
interface best suited for your needs. Both interfaces support Intel, Borland, and Microsoft 
languages including C+ + to meet your embedded design needs and accelerate your time 
to market. 


FEATURES 
e Reliable full speed emulation up to 16 e Source level debug with source code 
MHz and 20 MHz window, symbolic debug. and watch 
e One probe, jumper-configurable for 186 window operations 
or 188 support e Supports Intel, Borland, and Microsoft 
e Two powerful windowed human languages including C+ + 


interfaces with mouse support 


Paradigm DEBUG and Paradigm LOCATE are trademarks of Paradigm Systems. 
Turbo Debugger is a registered trademark of Borland International. 

Microsoft and MS-DOS are registered trademarks of Microsoft Corporation. 

Link and Locate + + is a registered trademark of Systems and Software. Inc. 


November 1992 
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e 512K or 1 MB of zero wait-state mapped 
memory 

e 4K frames dynamic trace buffer can be 
displayed without stopping emulation 

¢ Powerful GO command with two-level 
breakpoints. event counters and single 
stepping capability 

e 80C187 numberic coprocessor support 

e Emulation support for all Intel component 
packages | 

e High speed RS-232C and GPIB 
communication link 

e Stand Alone Self Test (SAST) unit for 
software development and self test 

e Complete Intel service and support 


PRODUCT HIGHLIGHTS 


e Superior Intel component bondout and 
advanced cable technology ensures accurate 
and reliable high speed emulation 

e Zero power consumption difference between 

using the emulator and the component 

Supports debugging target systems with 

80C187 numeric coprocessor 

Supports all Intel software products, 

including C, assembler, and PL/M. Also 

accepts Microsoft and Borland object code. 
including C+ +, when used in conjunction 
with either Paradigm Systems LOCATE or 

Systems and Software, Inc. LINK and 

LOCATE+ + : 

Paradigm DEBUG/ICE product includes 

Paradigm LOCATE, OMFCVT and 

TDCONVRT: everything necessary to 

support your embedded application 

Includes two powerful windowed human 

interfaces: the standard Intel interface and 

the Paradigm DEBUG/ICE interface, based 
on Borland’s Turbo Debugger 

Each windowed interface enables user to 

open multiple windows simul- taneously, 

providing source code, watch variables, 
memory, and trace information 

Display and modify all on-chip peripheral 

registers 

Powerful GO command permits precise 

emulation control through versatile event 

recognition, condi- tional constructs, and 
internal actions (e.g., full trace buffer, event 
counters) 

Set software breakpoints easily in source 


code, hardware breakpoints on execution and 


bus addresses; memory and I/O cycles 
Break and trace on address and/or data 
specification based on single value, range, or 
“don’t cares” 


¢ Flexible STEP command, enabling forward/ 
reverse stepping and into or over function 
calls 

e Define all or sections of map memory as 

Guarded, ICE, or User 

4K trace buffer collects both execution and 

data bus activity in real-time. Display either 

instructions, cycles, or both 

Stand Alone Self Test (SAST) Unit in 

conjunction with emulator map mem- ory 

facilitates early software debug- ging and 

emulator confidence testing 

512K and 1 MB zero wait-state memory 

modules can be used in place of target 

memory for code debugging 

e Programmable fastbreak for monitoring 

target system while in emulation 

Refresh, DMA, and HOLD/HOLDA cycles 

honored when emulator halted 

RS-232C serial link provides transfer rate up 

to 57.6 Kbytes per second. GPIB driver (in 

conjunction with a user supplied National 

Instruments (IEEE-488) GPIB 

communication board) provides parallel 

transfers at rates up to 115 Kbytes per 

second 

Logic analyzer support included via a 60-pin 

connector to emulator 

All component packages supported, either 

directly on the probe or through adapters 

World-wide service, support, and training 

available 


BENEFITS 


e Supports low power application needs. Probe 
draws low power current, supports true 
CMOS voltage input/output 

¢ Both the Intel and Paradigm windowed 

interfaces increase productivity for both 

expert and casual users. Pull-down menus, 
on-line help, and mouse support simplify 
debugging and speeds up learning curve 

Source code window automatically updated 

when emulator halts, high-lighting next 

instruction to be executed 

Software and hardware breakpoints may be 

set directly in the source code window to 

facilitate precise emulation control 

e Emulator can track user-defined program 
variables using the watch window. Emulator 
tracks the variable, not the user! 

e Intel interface offers ““C”-based macro 
commands to facilitate customized or 
repeated debug sessions. Extremely useful 
for automated manufacturing, testing and 
debugging 
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¢ Powerful trace collection and display 
commands allow user to collect and display 
only the trace information pertinent to the 
debug session; no unwanted trace data filling 
up trace buffer 

e Dynamic trace allows user to view trace 

buffer or modify trace conditions without 

stopping emulation 

Software developers may debug application 

code before target hardware is available 

using the Stand Alone Self Test (SAST) Unit 

with emulator map memory 

Early debugging of ROM memory simplified 

using emulator map memory. Memory 

addressable in 32 Kbyte increments. 

Supports debugging ROM-based applications 

over entire 1MB addressing range 

Mappable I/O ports, addressable in 4 Kbyte 

increments, enable user to debug suspect I/O 

behavior. PC resources allow data ‘input‘ 

from keyboard and data ‘output* to the 

screen 

e Source code window displays source code in 

original high-level language used to produce 

the object code. Simplifies and accelerates 

debug process ; 

Investigate privileged processor information 

during emulation using the Fastbreak 

feature (e.g., PCB, registers, target memory) 

e DRAM refresh signals continue even when 
emulator halted and ensures DRAM memory 
not lost or corrupted. Also permits emulation 
in cost-sensitive applications that do not 
include DRAM controllers 

e Continuous timer function while emulator 
halted allows emulator to respond to on-chip 
and external interrupts in real-time. Useful 
for critical applications where continuous 
interrupt-service is a requirement 

¢ Detailed timing of specific events possible 
using a logic analyzer connected to the 
emulator. An external sync signal can 
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trigger the logic analyzer, enabling complex 
event triggering 


SERVICE, SUPPORT, AND 
TRAINING 


e Intel offers full array of seminars, classes, 
workshops, field application engineering 
expertise, hotline technical support, and on- 
site service 

Software support contract available, 
providing technical software information, 
telephone support, automatic software and 
manual updates, ‘iComments‘ publication 
and a development tools Trouble-Shooting 
Guide 

90-day software warranty and one year 
hardware support package are standard. 
Includes technical hardware information, 
telephone support, warranty on parts, labor, 
material, and on-site hardware support ' 
Intel Development Tools offers a 30-day, 
money-back guarantee to customers who are 
dissatisfied with their Intel development tool 


SUMMARY 


The ICET-186/188 family of In-Circuit 
Emulators provide a versatile and efficient tool 
for developing, debugging, and testing products 
designed with the 80C186/80C188 family of 
micropro- cessors. The emulator includes 
numerous productivity boosting features to 
enable you to move your products to market as 
quickly as possible. Intel, the inventor of the 
80C186/80C188 family of micropro- cessors, 
offers the most complete line of development 
tools from a single vendor to meet all of your 
development needs for your embedded design. 


intel. 
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PHYSICAL DESCRIPTION AND 
CHARACTERISTICS 


For all the ICE-18x emulators the maximum 
probe power draw from the target is 90 mA 
(same as the component). 


ICE-18xEAXL 


Table 1. ICE-18xEAXL Physical Characteristics 


| Width | Height | Length 


Emulator Control Unit 


User Probe Adapter Cable 
Stand Alone Self Test 
Serial Cable 


ICE-18xEB: 


Table 2. ICE-18xEB Physical Characteristics 


Emulator Control Unit 
Power Supply 


Memory Module 

User Probe .O | 10.2] 0. 65 1. 6 
User Probe Adapter Cable 

Stand Alone Self Test 3 | 10.9} 0.60} 1.5 
Serial Cable 
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ICE-18xEC: 


Table 3. ICE-18xEC Physical Characteristics 


| Width | Height | Length 


Emulator Control Unit 

Power Supply 

Memory Module 

User Probe 

User Probe Adapter Cable 

Stand Alone Self Test ; F 
Serial Cable 144.0 | 366.0 


HOST SYSTEM REQUIREMENTS 


Paradigm IDI:BUGiICE 
Computer IBM PC, PS/2 or compatible, i386 IBM PC, PS/2 or compatible, i386 
recommended recommended 


MS-DOS/PC-DOS 3.3/5.0 MS-DOS/PC-DOS 3.0 or later 
520 Kbytes 384 Kbytes 


Expanded Memory | 1.5 MB() Recommended for optimal 
performance 


co a a a an ee enn eo 


Communication Serial Port (COM1 or COM2) Serial Port (COM1 or COM2) 
supporting at least 9600 Baud Rate supporting at least 9600 Baud Rate 
OR OR 
National Instruments GPIB-PCIIA National Instruments GPIB-PCIIA 
board board 


——— Not required 


Note 1: Above Board managed by EMM.sits driver recommended. otber memory managers conforming to the Lotus/Intel/ 
Microsoft Expanded Memory specifications. version 3.2 or later. arc available. 
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ICE18XEAXLP | 80C186XL/C188XL 68-pin PLCC. Includes Control Unit, probe, power 


80C186EA/C188EA supply. SAST, Intel and Paradigm interfaces and 
80C186/C188 PLCC to LCC adapter. Requires MEM512 or 
80186/188 MEM1MB memory option. 


ICE18XEAXLP20 | 80C186XL/C188XL 
(DOS) 80C186EA/C188EA 


68-pin PLCC Includes Control Unit, probe, power 
supply SAST, Intel and Paradigm interfaces. 
PLCC to LCC adapter and 512K Map Memory. 


ICE18XEBP | 80C186EB/C188EB 16 84-pin PLCC. Includes Control Unit, probe, power 
(DOS) supply, SAST and Intel and Paradigm interfaces. 
Requires MEM512 or MEM1MB memory option. 
84-pin PLCC includes Control Unit, probe, power 
supply, SAST and Intel and Paradigm interfaces 
and 512K Map Memory. 


ICE18XECQ 80C186EC/C188EC 6 100-pin QFP. Includes Control Unit, probe, power 
(DOS) supply, SAST, and Intel and Paradigm interfaces. 
Requires MEM512 or MEM1MB memory option. 


ICE18XEBP20 | 80C186EB/C188EB 
(DOS) 


Probe Component Speed Description 
(Host) Support (M iis 


Hz) 
UP18XEANLP | 80C186XL/C188NL 16 68-pin PLCC. Includes probe, SAST, Intel and 
(DOS) 80C186EA/C188EA Paradigm interfaces and PLCC to LCC adapter. 
80C186/C188 
80186/188 
16 
6 


UP18XEBP 80C186EB/C188EB 84-pin PLCC. Includes probe. SAST and Intel and 
(DOS) Paradigm Interfaces. | 

UP18XECQ 80C186EC/C188EC 1 100-pin QFP. Includes probe, SAST, and Intel and 
(DOS) Paradigm Interfaces. 


Description 
MEM512 512 KBytes | 512K Emulator Map Memory for ICE-18x Emulators 
MEM1MB 1 MByte 1 MB Emulator Map Memory for ICE-18x Emulators 
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PDICE18XKIT Paradigm Debug/ICE Software for old ICE186N, ICE188N, ICE18616N and 
(DOS) ICE18816N emulators. Based on Borland Turbo Debugger. Supports all 
Emulator Control Units. 

-  PDICE18XEBKIT Paradigm Debug/IcE Software for ICE18XEBP and ICE18XEBP20 

(DOS) emulators. Based on Borland Turbo Debugger. 
SWICE18XKITW Intel Windowed Human Interface for old ICE186N, ICE188N, ICE18616N 

(DOS) and ICE18816N emulators. Supports all Emulator Control Units. 

SWICE18XEAXLKIT‘) | Intel Windowed Human Interface for ICE1I8XEAXLP and 
(DOS) ICE18XEAXLP20 emulators. 

SWICE18XEBKIT) Intel Windowed Human Interface for ICE18XEBP and ICE18XEBP20 

(DOS) emulators. 


SWICE18XECKIT®) | Intel Windowed Human Interface for ICE18XECQ emulator. 
(DOS) 7 

SWICE18XDIAG() Emulator Confidence Tests for ALL ICE-18 and UP18x products. Supports 
(DOS) all Emulator Control Units. 


Note 1: Available as S/T update only. Call 1-800-874-6835. 


Emulator ~* 
Support 
ICEXEBONCE ICE18XEBP 84-pin PLCC ONCE adapter for On-Circuit Emulation. 
ICE18XEBP20 
ICEXEAXLONCE ICE18XEAXLP | 68-pin PLCC ONCE adapter for On-Circuit Emulation. 
ICE18XEAXL20 
ICEXLCC ICE18XEAXLP | Adapter to convert probe from 68-pin PLCC to 68-pin 
ICE18XEAXLP20 | LCC. 
ICEXPGA ICE18XEAXLP | Adapter to convert probe from 68-pin PLCC to 68-pin 
7 ICE18XEAXLP20 | PGA. 
I18XEBCONV80Q ICE18XEAXLP | Conversion kit to convert probe from 84-pin PLCC to 
ICE18XEAXLP20 | 80-pin QFP. 
I18XXLCONV80Q ICE18XEAXLP | Conversion kit to convert probe from 84-pin PLCC to 
ICE18XEAXLP20 | 68-pin PLCC to 80-pin QFP. 


I18XECCONV100PQ ICE18XECQ Conversion kit to convert probe from 100-pin QFP to 
100-pin PQFP. 


QI18XXLCONV80Q | ICE18XEAXL | EA 80-QFP to XL 80-QFP conversion kits. 
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Multitasking Source Level Debugger ; 


The DB86A ARTIC debugger from Intel is a powerful source-level debugger designed to 
support the development of multitasking applications targeted to run on the full family 
of IBM* ARTIC cards. The DB86A ARTIC debugger is hosted on an IBM PC/AT*, PS/2* 
or compatible computer running DOS or OS/2* (DOS compatibility box only). Using an 
RS2382 link to an IBM ARTIC card, the debugger contains control and monitoring 
capabilities for on-target software debugging. The DB86A debugger delivers an optimum 
debugging environment for application code generated by IBM C/2*, IBM MASM/2*, 
Microsoft C*, and Microsoft MASM*. 


The DB86A debugger features a contemporary windowed human interface, symbolic 
source level debug, tasking controls, extensive breakpoint modes, and flexible stepping 
capabilities. This multitasking debug environment boosts productivitiy by allowing you 
to focus efforts on finding bugs more quickly, and reducing time-to-market. 


DB86A Debugger Features 


e Menu-driven Windowed Human Extensive Breakpoint and Stepping 
Interface Capabilities 

e Source Level Debug with various Source Powerful Procedural Command 
Window and Watch Window Operations Language 


e Multitasking Debug Support e On-line Help Facility 
e High-level and Assembly Language e Built-in Assembler and Disassembler 
Symbolic Debugging e Memory and Register Manipulations 
e Intel Service and Support 
August 1992 


Order Number: 280927-002 | 4-35 
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Windowed Human Interface 


The DB86A Artic Debugger offers a windowed 
user interface that is easy for both experienced 
and new users. 


Pull-down menus provide a set of commonly 
used debug operations, shortening learning 
curves. Many debugging functions can be 
executed with a single key stroke. Custom 
debug commands and the command line 
interface offer experienced users increased 
efficiency. Multiple windows simultaneously 
display source code, watch variables, and 
registers. Source breakpoints support the 
point-and-shoot technique of debugging, or 
breakpoints can be easily set through the 
source window. When the debugger completes 
a breakpoint or stepping operation, the various 
windows are updated. The watch window can 
track up to six program variables. The on-line 
help facility provides command syntax and 
explanation as well as error descriptions. 


Event Monitor Capability 


DB86A provides many ways to monitor events. 
There are four conditional breakpoints, ten 
source breakpoints, ten temporary 
breakpoints, and ten passpoints. Each type of 
breakpoint meets different debugging needs. 
The stepping commands not only allow 
execution of one machine-level instruction or 
one high-level language statement at a time, 
they also permit stepping over or stepping 
through a procedure until it returns. 


Procedural Command Language 


The command language of the DB86A 
debugger provides control constructs, 
procedures, and debug variables allowing the 
user to extend and customize the functionality 
of the debugger. Control constructs (e.g. 
If...else, do...while) facilitate the grouping of a 
sequence of debugger commands and control 
the execution of the sequence. For debug 
sequences that are repeated frequently, the 
user can define debug procedures containing a 
sequence of debugger commands, control 
constructs, and debug variables. DB86A 
debugger comes with a set of predefined debug 
procedures that display various ARTIC system 
data structures such as interface blocks, task 
tables, and task control block tables. 


4-36 


Multitasking Debug Support 


The DB86A debugger delivers control and 
monitor capabilities to simplify multitasking 
debug. You can download multiple tasks to the 
target system, and easily select any task for 
viewing and debugging. 


Corresponding windows are automatically 
updated when a task hits a breakpoint. Tasks 
can be suspended and resumed. Breakpoints 
can be set for all, or for specific tasks. 
Qualifiers are provided with the debugger 
commands to facilitate multitasking debug. 


Symbolic Debug Capabilities 


The debugger makes full use of the symbolic 
and typing information passed by the code 
translators. Source code symbolics are enabled 
in debugging operations and displays. The 
debugger supports easy browsing through 
modules in each task. The Callstack feature 
creates a snapshot of the active call chain, and 
call stack browsing lets you navigate through 
the source code of the procedure call chain. 
Task memory and registers can be displayed 
and modified easily. An on-line assembler is 
provided for in-target code patching. 


Worldwide Service, Support, and 
Training 

To augment its development tools, Intel offers 
field application engineering expertise, hotline 
technical support, and on-site service. 


Intel also offers software support which 
includes technical software information, 
telephone support, automatic distributions of 
software and documentation updates, 
tCOMMENTS magazine, remote diagnostic 
software, and a development tools 
troubleshooting guide. 


Intel Development Tools also offers a 30-day, 
money-back guarantee to customers who are 
not satisfied after purchasing any Intel 
development tool. 


intl. 
| SPECIFICATIONS | 


Host System Requirements Target System Requirements 


IBM PC/AT or IBM PS/2 or fully compatible  ° One ARTIC RS232 serial port 
. . os ¢ 8 Kbytes free RAM on the target ARTIC 
computers with the following minimum Board for DBG6A. debug support tack 


configurations: bus 

¢ Minimum of 900Kbytes free harddisk space ° pipet ici one of the 
for DB86A : 

e 640Kbytes of RAM recommended; DB86A IBM Realtime Interface Coprocessor 
uses a minimum of 360Kbytes of RAM IBM Realtime Interface Coprocessor 

¢ A serial port (COM1 or COM2) . eer age ae 

¢ DOS V3.3 or later, OS/2 V1.2 (DOS Realtime Interface Coprocessor 
Compatibility Box Only) Multiport Model 2 


IBM X.25 Interface Coprocessor/2 
IBM Realtime Interface Coprocessor 
Multiport/2 

IBM Realtime Interface Coprocessor 
Portmaster/A 


¢ One floppy drive capable of reading 5.25” 
diskettes or 3.5” diskettes 
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ALABAMA 


Intel Corp. 

600 Boulevard South 
Suite 104-1 
Huntsville 35802 

Tel: (800) 628-8686 
FAX: (205) 883-3511 


ARIZONA 


tintel Corp. 

410 North 44th Street 
Suite 500 

Phoenix 85008 

Tel: (800) 628-8686 
FAX: (602) 244-0446 


CALIFORNIA 


Intel Corp. 

3550 Watt Avenue 
Suite 140 
Sacramento 95821 
Tel: (800) 628-8686 
FAX: (916) 488-1473 


tintel Corp. 

9655 Granite Ridge Dr. 
3rd Floor, Suite 4A 
San Diego 92123 

Tel: (800) 628-8686 
FAX: (619) 467-2460 


Intel Corp. 

1781 Fox Drive 

San Jose 95131 

Tel: (800) 628-8686 
FAX: (408) 441-9540 


*tintel Corp. 

1551 N. Tustin Avenue 
Suite 800 

Santa Ana 92701 

Tel: (800) 628-8686 
TWX: 910-595-1114 
FAX: (714) 541-9157 


tintel Corp. 

15260 Ventura Boulevard 
Suite 360 

Sherman Oaks 91403 
Tel: (800) 628-8686 

FAX: (818) 995-6624 


COLORADO 


*tintei Corp. 

600 S. Cherry St. 
Suite 700 

Denver 80222 

Tel: (800) 628-8686 
TWX: 910-931-2289 
FAX: (303) 322-8670 


CONNECTICUT 


tintel Corp. 

103 Mill Plain Road 
Danbury 06811 

Tel: (800) 628-8686 
FAX: (203) 794-0339 


FLORIDA 


tintel Corp. 

800 Fairway Drive 
Suite 160 

Deerfield Beach 33441 
Tel; (800) 628-8686 
FAX: (305) 421-2444 


Intel Corp. 

2250 Lucien Way 
Suite 100, Room 8 
Maitland 32751 

Tel: (800) 628-8686 
FAX: (407) 660-1283 


tSales and Service Office 
*Field Application Location 


GEORGIA 


tintel Corp. 

20 Technology Parkway 
Suite 150 : 
Norcross 30092 

Tel: (800) 628-8686 
FAX: (404) 605-9762 


IDAHO 
Intel Corp. 


9456 Fairview Ave., Suite C 


Boise 83704 
Tel: (800) 628-8686 
FAX: (208) 377-1052 


ILLINOIS 


*tintel Corp. 

Woodfield Corp. Center Ill 
300 N. Martingale Road 
Suite 400 

Schaumburg 60173 

Tel: (800) 628-8686 

FAX: (708) 706-9762 


INDIANA 


tintel Corp. 

8910 Purdue Road 
Suite 350 
Indianapolis 46268 
Tel: (800) 628-8686 
FAX: (317) 875-8938 


MARYLAND 


*tintel Corp. 

10010 Junction Dr. 

Suite 200 

Annapolis Junction 20701 
Tel: (800) 628-8686 

FAX: (410) 206-3678 


MASSACHUSETTS 


*tintel Corp. 

Westford Corp. Center 
5 Carlisle Road 

2nd Floor 

Westford 01886 

Tel: (800) 628-8686 
TWX: 710-343-6333 
FAX: (508) 692-7867 


MICHIGAN 


tintel Corp. 

7071 Orchard Lake Road 
Suite 100 

West Bloomfield 48322 
Tel: (800) 628-8686 

FAX: (313) 851-8770 


MINNESOTA 


tintel Corp. 

3500 W. 80th St. 
Suite 360 
Bloomington 55431 
Tel: (800) 628-8686 
TWX: 910-576-2867 
FAX: (612) 831-6497 


NEW JERSEY 


Intel Corp. 

2001 Route 46, Suite 310 
Parsippany 07054-1315 
Tel: (800) 628-8686 

FAX: (201) 402-4893 


*tintel Corp. 

Lincroft Office Center 
125 Half Mile Road 
Red Bank 07701 

Tel: (800) 628-8686 
FAX: (908) 747-0983 


NEW YORK 


*Intel Corp. 

850 Crosskeys Office Park 
Fairport 14450 

Tel: (800) 628-8686 

TWX: 510-253-7391 

FAX: (716) 223-2561 


tintel Corp. 

300 Westage Business Center 
Suite 230 

Fishkill 12524 

Tel: (800) 628-8686 

FAX: (914) 897-3125 


*tintel Corp. 

2950 Express Dr., South 
Suite 130 

Islandia 11722 


OHIO 


*Intel Corp. 

56 Milford Dr., Suite 205 
Hudson 44236 

Tel: (800) 628-8686 
FAX: (216) 528-1026 


*tintel Corp. 

3401 Park Center Drive 
Suite 220 

Dayton 45414 

Tel: (800) 628-8686 
TWX: 810-450-2528 
FAX: (513) 890-8658 


OKLAHOMA 


Intel cogs 

6801 N. Broadway 
Suite 115 

Oklahoma City 73162 
Tel: (800) 628-8686 
FAX: (405) 840-9819 


OREGON 


tintel Corp. 

15254 N.W. Greenbrier Pkwy. 
Building B 

Beaverton 97006 

Tel: (800) 628-8686 

TWX: 910-467-8741 

FAX: (503) 645-8181 


PENNSYLVANIA 


*tintel Corp. 

925 Harvest Drive 
Suite 200 

Blue Bell 19422 

Tel: (800) 628-8686 
FAX: (215) 641-0785 


SOUTH CAROLINA 


intel Corp. 

7403 Parklane Rd., Suite 3 
Columbia 29223 

Tel: (800) 628-8686 

FAX: (803) 788-7999 


Intel Corp. 

100 Executive Center Drive 
Suite 109, B183 

Greenville 29615 

Tel: (800) 628-8686 

FAX: (803) 297-3401 


TEXAS 


tintel Corp. 

8911 N. Capital of Texas Hwy. 
Suite 4230 

Austin 78759 

Tel: (800) 628-8686 

FAX: (512) 338-9335 


NORTH AMERICAN SALES OFFICES 


*tintel Corp. 

5000 Quorum Drive 
Suite 750 

Dallas 75240 

Tel: (800) 628-8686 


*tintel Corp. 

20515 SH 249 

Suite 401 

Houston 77070 

Tel: (800) 628-8686 

TWX: 910-881-2490 

FAX: (713) 988-3660 


UTAH 


tintel Corp. 

428 East 6400 South 
Suite 135 

Murray 84107 

Tel: (800) 628-8686 
FAX: (801) 268-1457 


WASHINGTON 


tintel Corp. 

2800 156th Avenue S.E. 
Suite 105 

Bellevue 98007 

Tel: (800) 628-8686 
FAX: (206) 746-4495 


WISCONSIN 


Intel Corp. 

400 N. Executive Dr. 
Suite 401 

Brookfield 53005 
Tel: (800) 628-8686 
FAX: (414) 789-2746 


CANADA 


BRITISH COLUMBIA 


Intel Semiconductor of 
Canada, Ltd. 

999 Canada Place 
Suite 404, #11 
Vancouver V6C 3E2 
Tel: (800) 628-8686 
FAX: (604) 844-2813 


ONTARIO 


tintel Semiconductor of 
Canada, Ltd. 

2650 Queensview Drive 
Suite 250 

Ottawa K2B 8H6 

Tel: (800) 628-8686 
FAX: (613) 820-5936 


tintel Semiconductor of 
Canada, Ltd. 

190 Attwell Drive 

Suite 500 

Rexdale M9W 6H8 

Tel: (800) 628-8686 
FAX: (416) 675-2438 


QUEBEC 


tintel Semiconductor of 
Canada, Ltd. 

1 Rue Holiday 

Suite 320 

Tour East 

Pt. Claire HOR 5N3 

Tel: (800) 628-8686 
FAX: 514-694-0064 


CG/SALE/1112 


intel. 


ALABAMA 


Arrow/Schweber Electronics 
1015 Henderson Road 
Huntsville 35806 

Tel: (205) 837-6955 

FAX: (205) 721-1581 


Hamilton Hallmark 

4890 University Square, #1 
Huntsville 35816 

Tel: (205) 837-8700 

FAX: (205) 830-2565 


MTI Systems 

4950 Corporate Dr., #120 
Huntsville 35805 

Tel: (205) 830-9526 

FAX: (205) 830-9557 


Pioneer Technologies Group 
4835 University Square, #5 
Huntsville 35805 | 

Tel: (205) 837-9300 

FAX: (205) 837-9358 


Wyle Laboratories 

7800 Governers Drive 
Tower Building, 2nd Floor 
Huntsville 35806 

Tel: (205) 830-1119 

FAX: (205) 830-1520 


ARIZONA 


Anthem Electronics 

1555 W. 10th Place, #101 
Tempe 85281 

Tel: (602) 966-6600 

FAX: (602) 966-4826 


Arrow/Schweber Electronics 
2415 W. Erie Drive 

Tempe 85282 

Tel: (602) 431-0030 

FAX: (602) 252-9109 


Avnet Computer 

1626 S. Edwards Drive 
Tempe 85281 

Tel: (602) 902-4600 
FAX: (602) 902-4640 


Hamilton Hallmark 
4637 S. 36th Place 
Phoenix 85040 

Tel: (602) 437-1200 
FAX: (602) 437-2348 


Wyle Laboratories 
4141 E. Raymond 
Phoenix 85040 

Tel: (602) 437-2088 
FAX: (602) 437-2124 


CALIFORNIA 


Anthem Electronics 
9131 Oakdale Ave. 
Chatsworth 91311 
Tel: (818) 775-1333 
FAX: (818) 775-1302 


Anthem Electronics 
1 Oldfield Drive 
Irvine 92718-2809 
Tel: (714) 768-4444 
FAX: (714) 768-6456 


Anthem Electronics 
580 Menlo Drive, #8 
Rocklin 95677 

Tel: (916) 624-9744 
FAX: (916) 624-9750 


Anthem Electronics 
9369 Carroll Park Drive 
San Diego 92121 

Tel: (619) 453-9005 
FAX: (619) 546-7893 


‘Anthem Electronics 
1160 Ridder Park Drive 
San Jose 95131 

Tel: (408) 452-2219 
FAX: (408) 441-4504 


Arrow Commercial Systems Group 
1502 Crocker Avenue 


Hayward 94544 

Tel: (510) 489-5371 

FAX: (510) 489-9393 

Arrow Commercial Systems Group 
14242 Chambers Road 

Tustin 92680 

Tel: (714) 544-0200 

FAX: (714) 731-8438 


Eee oe Reh 


~~ 


NORTH AMERICAN DISTRIBUTORS 


Arrow/Schweber Electronics 
26707 W. Agoura Road 
Calabasas 91302 

Tel: (818) 880-9686 

FAX: (818) 772-8930 


Arrow/Schweber Electronics 
48834 Kato Road, Suite 103 
Fremont 94538 

Tel: (510) 490-9477 


Arrow/Schweber Electronics 
6 Cromwell #100 

Irvine 92718 

Tel: (714) 838-5422 

FAX: (714) 454-4206 


Arrow/Schweber Electronics 
9511 Ridgehaven Court 
San Diego 92123 

Tel: (619) 565-4800 

FAX: (619) 279-8062 


Arrow/Schweber Electronics 
1180 Murphy Avenue 

San Jose 95131 

Tel: (408) 441-9700 

FAX: (408) 453-4810 


Avnet Computer 
3170 Pullman Street 
Costa Mesa 92626 
Tel: (714) 641-4150 
FAX: (714) 641-4170 


Avnet Computer 

1361B West 190th Street 
Gardena 90248 

Tel: (800) 426-7999 
FAX: (310) 327-5389 


Avnet Computer 

755 Sunrise Boulevard, #150 
Roseville 95661 

Tel: (916) 781-2521 

FAX: (916) 781-3819 


Avnet Computer 

1175 Bordeaux Drive, #A 
Sunnyvale 94089 

Tel: (408) 743-3454 

FAX: (408) 743-3348 


Avnet Computer 
21150 Califa Street 
Woodland Hills 91376 
Tel: (818) 594-8301 
FAX: (818) 594-8333 


Hamilton Hallmark 
3170 Pullman Street 
Costa Mesa 92626 
Tel: (714) 641-4100 
FAX: (714) 641-4122 


Hamilton Hallmark 

1175 Bordeaux Drive, #A 
Sunnyvale 94089 

Tel: (408) 435-3500 

FAX: (408) 745-6679 


Hamilton Hallmark 
4545 Viewridge Avenue 
San Diego 92123 

Tel: (619) 571-7540 
FAX: (619) 277-6136 


Hamilton Hallmark 
21150 Califa St. 
Woodland Hills 91367 
Tel: (818) 594-0404 
FAX: (818) 594-8234 


Hamilton Halimark 
580 Menlo Drive, #2 
Rocklin 95762 

Tel: (916) 624-9781 
FAX: (916) 961-0922 


Pioneer Standard 

5850 Canoga Bivd., #400 
Woodland Hills 91367 
Tel: (818) 883-4640 


Pioneer Standard 

217 Technology Dr., #110 
Irvine 92718 

Tel: (714) 753-5090 


Pioneer Technologies Group 
134 Rio Robles 

San Jose 95134 

Tel: (408) 954-9100 

FAX: (408) 954-9113 


Wyle Laboratories 
15370 Barranca Pkwy. 
Irvine 92713 

Tel: (714) 753-9953 
FAX: (714) 753-9877 


Wyle Laboratories 

15360 Barranca Pkwy., #200 
Irvine 92713 

Tel: (714) 753-9953 

FAX: (714) 753-9877 


Wyle Laboratories 

2951 Sunrise Bivd., #175 
Rancho Cordova 95742 
Tel: (916) 638-5282 

FAX: (916) 638-1491 


Wyle Laboratories 

9525 Chesapeake Drive 
San Diego 92123 

Tel: (619) 565-9171 
FAX: (619) 365-0512 


Wyle Laboratories 
3000 Bowers Avenue 
Santa Clara 95051 
Tel: (408) 727-2500 
FAX: (408) 727-5896 


Wyle Laboratories 
17872 Cowan Avenue 
Irvine 92714 

Tel: (714) 863-9953 
FAX: (714) 263-0473 


Wyle Laboratories 

26010 Mureau Road, #150 
Calabasas 91302 

Tel: (818) 880-9000 

FAX: (818) 880-5510 


Zeus Arrow Electronics 
6276 San Ignacio Ave., #E 
San Jose 95119 

Tel: (408) 629-4789 

FAX: (408) 629-4792 


Zeus Arrow Electronics 
22700 Savi Ranch Pkwy. 
Yorba Linda 92687-4613 
Tel: (714) 921-9000 
FAX: (714) 921-2715 


COLORADO 


Anthem Electronics 

373 Inverness Drive South 
Englewood 80112 

Tel: (303) 790-4500 

FAX: (303) 790-4532 


Arrow/Schweber Electronics 
61 Inverness Dr. East, #105 
Englewood 80112 

Tel: (303) 799-0258 

FAX: (303) 373-5760 


Hamilton Hallmark 

12503 E. Euclid Drive, #20 
Englewood 80111 

Tel: (303) 790-1662 

FAX: (303) 790-4991 


Hamilton Halimark 

710 Wooten Road, #102 
Colorado Springs 80915 
Tel: (719) 637-0055 
FAX: (719) 637-0088 


Wyle Laboratories 
451 E. 124th Avenue 
Thornton 80241 

Tel: (303) 457-9953 
FAX: (303) 457-4831 


CONNECTICUT 


Anthem Electronics 

61 Mattatuck Heights Road 
Waterburg 06705 

Tel: (203) 575-1575 

FAX: (203) 596-3232 


Arrow/Schweber Electronics 
12 Beaumont Road 
Wallingford 06492 

Tel: (203) 265-7741 

FAX: (203) 265-7988 


Avnet Computer 

55 Federal Road, #103 
Danbury 06810 

Tel: (203) 797-2880 
FAX: (203) 791-9050 


Hamilton Hallmark 

125 Commerce Court, Unit 6 
Cheshire 06410 

Tel: (203) 271-2844 

FAX: (203) 272-1704 


Pioneer Standard 

2 Trap Falls Road 
Shelton 06484 

Tel: (203) 929-5600 


FLORIDA 


Anthem Electronics 

598 South Northlake Bivd., #1024 
Altamonte Springs 32701 

Tel: (813) 797- 

FAX: (813) 796-4880 


Arrow/Schweber Electronics 
400 Fairway Drive, #102 
Deerfield Beach 33441 

Tel: (305) 429-8200 

FAX: (305) 428-3991 


Arrow/Schweber Electronics 
37 Skyline Drive, #3101 
Lake Mary 32746 

Tel: (407) 333-9300 

FAX: (407) 333-9320 


Avnet Computer 

3343 W. Commercial Boulevard 
Bidg. C/D, Suite 107 

Ft. Lauderdale 33309 

Tel: (305) 730-9110 

FAX: (305) 730-0368 


Avnet Computer 

3247 Tech Drive North 
St. Petersburg 33716 
Tel: (813) 573-5524 
FAX: (813) 572-4324 


Hamilton Hallmark 

3350 N.W. 53rd St., 4105-107 
Ft. Lauderdale 33309 

Tel: (305) 484-5482 

FAX: (305) 484-2995 


Hamilton Halimark 
10491 72nd St. North 
Largo 34647 

Tel: (813) 541-7440 
FAX: (813) 544-4394 


Hamilton Hallmark 

7079 University Boulevard 
Winter Park 32792 

Tel: (407) 657-3300 

FAX: (407) 678-4414 


Pioneer Technologies Group 
337 Northlake Bivd., #1000 
Alta Monte Springs 32701 
Tel: (407) 834-9090 

FAX: (407) 834-0865 


Pioneer Technologies Group 
674 S. Military Trail 

Deerfield Beach 33442 

Tel: (305) 428-8877 

FAX: (305) 481-2950 


Pioneer Technologies Group 
8031-2 Phillips Highway 
Jacksonville 32256 

Tel: (904) 730-0065 


Wyle Laboratories 
1000 112 Circle North 
St. Petersburg 33716 
Tel: (813) -3400 
FAX: (813) 579-1518 


GEORGIA 


Arrow Commercial Systems Group 
3400 C. Corporate Way 

Duluth 30136 

Tel: (404) 623-8825 

FAX: (404) 623-8802 


Arrow/Schweber Electronics 
4250 E. Rivergreen Pkwy., #E 
Duluth 30136 

Tel: (404) 497-1300 

FAX: (404) 476-1493 


Avnet Computer 

3425 Corporate Way, #G 
Duluth 30136 

Tel: (404) 623-5452 

FAX: (404) 476-0125 


Hamilton Hallmark 

3425 Corporate Way, #G & #A 
Duluth 30136 

Tel: (404) 623-5475 

FAX: (404) 623-5490 


Pioneer Technologies Group 
4250 C. Rivergreen Parkway 
Duluth 30136 

Tel: (404) 623-1003 

FAX: (404) 623-0665 


Wyle Laboratories 

6025 The Corners Pkwy., #111 
Norcross 30092 

Tel: (404) 441-9045 

FAX: (404) 441-9086 


ILLINOIS 


Anthem Electronics 

1300 Remington Road, Suite A 
Schaumberg 60173 

Tel: (708) 200 

FAX: (708) 885-0480 


Arrow/Schweber Electronics 
1140 W. Thorndale Rd. 
Itasca 60143 

Tel: (708) 250-0500 


Avnet Computer 

1124 Thorndale Avenue 
Bensenville 60106 

Tel: (708) 860-8572 
FAX: (708) 773-7976 


Hamilton Halimark 
1130 Thorndale Avenue 
Bensenville 60106 

Tel: (708) 860-7780 
FAX: (708) 860-8530 


MTI Systems 

1140 W. Thorndale Avenue 
Itasca 60143 

Tel: (708) 250-8222 

FAX: (708) 250-8275 


Pioneer Standard 

2171 Executive Dr., #200 
Addison 60101 

Tel: (708) 495-9680 

FAX: (708) 495-9831 


Wyle Laboratories 

2055 Army Trail Road, #140 
Addison 60101 

Tel: (800) 853-9953 

FAX: (708) 620-1610 


INDIANA 


Arrow/Schweber Electronics 
7108 Lakeview Parkway West Dr. 


‘Indianapolis 46268 


Tel: (317) 299-2071 
FAX: (317) 299-2379 


Avnet Computer 
485 Gradle Drive 
Carmel 46032 

Tel: (317) 575-8029 
FAX: (317) 844-4964 


Hamilton Hallmark 
4275 W. 96th 
Indianapolis 46268 


. Tel: (817) 872-8875 


FAX: (317) 876-7165 


Pioneer Standard 

9350 Priority Way West Dr. 
Indianapolis 46250 

Tel: (317) 573-0880 

FAX: (317) 573-0979 


CG/SALE/111293 


intel. 
NORTH AM 


ERICAN DISTRIBUTORS (Contd.) 


KANSAS 


Arrow/Schweber Electronics 
9801 Legler Road 

Lenexa 66219 

Tel: (913) 541-9542 

FAX: (913) 541-0328 


Avnet Computer 
15313 W. 95th Street 
Lenexa 61219 

Tel: (913) 541-7989 
FAX: (913) 541-7904 


Hamilton Hallmark 
10809 Lakeview Avenue 
Lenexa 66215 

Tel: (913) 888-4747 
FAX: (913) 888-0523 


KENTUCKY 


Hamilton Hallmark 
1847 Mercer Road, #G 
Lexington 40511 

Tel: (800) 235-6039 
FAX: (606) 288-4936 


MARYLAND 


Anthem Electronics 

7168A Columbia Gateway Drive 
Columbia 21046 

Tel: (410) 995-6640 

FAX: (410) 290-9862 


Arrow Commercial Systems Group 
200 Perry Parkway 

Gaithersburg 20877 

Tel: (301) 670-1600 

FAX: (301) 670-0188 


Arrow/Schweber Electronics 
9800J Patuxent Woods Dr. 
Columbia 21046 

Tel: (301) 596-7800 

FAX: (301) 995-6201 


Avnet Computer 

7172 Columbia Gateway Dr., #G 
Columbia 21045 

Tel: (301) 995-3571 

FAX: (301) 995-3515 


Hamilton Hallmark 

10240 Old Columbia Road 
Columbia 21046 

Tel: (410) 988-9800 

FAX: (410) 381-2036 


North Atlantic Industries 
Systems Division 

7125 River Wood Dr. 

Columbia 21046 

Tel: (301) 312-5800 

FAX: (301) 312-5850 


Pioneer Technologies Group 
15810 Gaither Road 
Gaithersburg 20877 

Tel: (301) 921-0660 

FAX: (301) 670-6746 


Wyle Laboratories 

7180 Columbia Gateway Dr. 
Columbia 21046 

Tel: (410) 312-4844 

FAX: (410) 312-4953 


MASSACHUSETTS 


Anthem Electronics 
36 Jonspin Road 
Wilmington 01887 
Tel: (508) 657-5170 
FAX: (508) 657-6008 


Arrow/Schweber Electronics 
25 Upton Dr. 

Wilmington 01887 

Tel: (508) 658-0900 

FAX: (508) 694-1754 


Avnet Computer 

10 D Centennial Drive 
Peabody 01960 

Tel: (508) 532-9886 
FAX: (508) 532-9660 


Hamilton Hallmark 

10 D Centennial Drive 
Bagh 01960 

Tel: (508) 531-7430 
FAX: (508) 532-9802 


Pioneer Standard 
44 Hartwell Avenue 
Lexington 02173 
Tel: (617) 861-9200 
FAX: (617) 863-1547 


Wyle Laboratories 
15 Third Avenue 
Burlington 01803 
Tel: (617) 272-7300 
FAX: (617) 272-6809 


MICHIGAN 


Arrow/Schweber Electronics 
19880 Haggerty Road 
Livonia 48152 

Tel: (800) 231-7902 

FAX: (313) 462-2686 


Avnet Computer 

2876 28th Street, S.W., #5 
Grandville 49418 

Tel: (616) 531-9607 

FAX: (616) 531-0059 


Avnet Computer 


41650 Garden Brook Rd. #120 


Novi 48375 
Tel: (313) 347-1820 
FAX: (313) 347-4067 


Hamilton Hallmark 


44191 Plymouth Oaks Bivd., #1300 


Plymouth 48170 
Tel: (313) 416-5800 
FAX: (313) 416-5811 


Hamilton Hallmark 


41650 Garden Brook Rd., #100 


Novi 49418 
Tel: (313) 347-4271 
FAX: (313) 347-4021 


Pioneer Standard 
4505 Broadmoor S.E. 
Grand Rapids 49512 
Tel: (616) 698-1800 
FAX: (616) 698-1831 


Pioneer Standard 
13485 Stamford 
Livonia 48150 

Tel: (313) 525-1800 
FAX: (313) 427-3720 


MINNESOTA 


Anthem Electronics 

7646 Golden Triangle Drive 
Eden Prairie 55344 

Tel: (612) 944-5454 

FAX: (612) 944-3045 


Arrow/Schweber Electronics 
10100 Viking Drive, #100 
Eden Prairie 55344 

Tel: (612) 941-5280 

FAX: (612) 942-7803 


Avnet Computer 

10000. West 76th Street 
Eden Prairie 55344 
Tel: (612) 829-0025 
FAX: (612) 944-2781 


Hamilton Hallmark 


9401 James Ave South, #140 


Bloomington 55431 
Tel: (612) 881-2600 
FAX: (612) 881-9461 


Pioneer Standard 

7625 Golden Triange Dr., #G 
Eden Prairie 55344 

Tel: (612) 944-3355 

FAX: (612) 944-3794 


Wyle Laboratories 
1325 E. 79th Street, #1 
Bloomington 55425 
Tel: (612) 853-2280 
FAX: (612) 853-2298 


>? 


MISSOURI 


Arrow/Schweber Electronics 
2380 Schuetz Road 

St. Louis 63141 

Tel: (314) 567-6888 

FAX: (314) 567-1164 


Avnet Computer 

741 Goddard Avenue 
Chesterfield 63005 
Tel: (314) 537-2725 
FAX: (314) 537-4248 


Hamilton Hallmark 
3783 Rider Trail South 
Earth City 63045 

Tel: (314) 291-5350 
FAX: (314) 291-0362 


NEW HAMPSHIRE 


Avnet Computer 

2 Executive Park Drive 
Bedford 03102 

Tel: (800) 442-8638 
FAX: (603) 624-2402 


NEW JERSEY 


Anthem Electronics 

26 Chapin Road, Unit K 
Pine Brook 07058 

Tel: (201) 227-7960 
FAX: (201) 227-9246 


Arrow/Schweber Electronics 
4 East Stow Rd., Unit 11 
Marlton 08053 

Tel: (609) 596-8000 

FAX: (609) 596-9632 


Arrow/Schweber Electronics 
43 Route 46 East 

Pine Brook 07058 

Tel: (201) 227-7880 

FAX: (201) 538-4962 


Avnet Computer 

1-B Keystone Ave., Bldg. 36 
Cherry Hill 08003 

Tel: (609) 424-8961 

FAX: (609) 751-2502 


Hamilton Hallmark 

1 Keystone Ave., Bidg. 36 
Cherry Hill 08003 

Tel: (609) 424-0110 

FAX: (609) 751-2552 


Hamilton Hallmark 

10 Lanidex Plaza West 
Parsippani 07054 

Tel: (201) 515-5300 
FAX: (201) 515-1601 


MTI Systems 

43 Route 46 East 
Pinebrook 07058 
Tel: (201) 882-8780 
FAX: (201) 539-6430 


Pioneer Standard 
14-A Madison Rd. 
Fairfield 07006 

Tel: (201) 575-3510 
FAX: (201) 575-3454 


Wyle Laboratories 

20 Chapin Road, Bidg. 10-13 
Pinebrook 07058 

Tel: (201) 882-8358 

FAX: (201) 882-9109 


NEW MEXICO 


Alliance Electronics, Inc. 
10510 Research Ave. 
Albuquerque 87123 

Tel: (505) 292-3360 
FAX: (505) 275-6392 


Avnet Computer 
7801 Academy Rd. 
Bidg. 1, Suite 204 
Albuquerque 87109 
Tel: (505) 828-9725 
FAX: (505) 828-0360 


NEW YORK 


Anthem Electronics 
47 Mall Drive 
Commack 11725 
Tel: (516) 864-6600 
FAX: (516) 493-2244 


Arrow/Schweber Electronics 
3375 Brighton Henrietta 
Townline Rd. 

Rochester 14623 

Tel: (716) 427-0300 

FAX: (716) 427-0735 


Arrow/Schweber Electronics 
20 Oser Avenue 
Hauppauge 11788 

Tel: (516) 231-1000 

FAX: (516) 231-1072 


Avnet Computer 
933 Motor Parkway 
Lag ea 11788 
Tel: (516) 434-7443 
FAX: (516) 434-7426 


Avnet Computer 
2060 Townline Rd. 
Rochester 14623 
Tel: (716) 272-9110 
FAX: (716) 272-9685 


Hamilton Hallmark 
933 Motor Parkway 
Hauppauge 11788 
Tel: (516) 434-7470 
FAX: (516) 434-7491 


Hamilton Hallmark 
1057 E. Henrietta Road 
Rochester 14623 

Tel: (716) 475-9130 
FAX: (716) 475-9119 


Hamilton Halimark 


3075 Veterans Memorial Hwy. 


Ronkonkoma 11779 
Tel: (516) 737-0600 
FAX: (516) 737-0838 


MTI Systems 

1 Penn Plaza 

250 W. 34th Street 
New York 10119 
Tel: (212) 643-1280 
FAX: (212) 643-1288 


Pioneer Standard 
68 Corporate Drive 
Binghamton 13904 
Tel: (607) 722-9300 
FAX: (607) 722-9562 


Pioneer Standard 

60 Crossway Park West 
Woodbury, 
Tel: (516) 921-8700 
FAX: (516) 921-2143 


Pioneer Standard 
840 Fairport Park 
Fairport 14450 

Tel: (716) 381-7070 
FAX: (716) 381-5955 


Zeus Arrow Electronics 
100 Midland Avenue 
Port Chester 10573 
Tel: (914) 937-7400 
FAX: (914) 937-2553 


NORTH CAROLINA 


Arrow/Schweber Electronics 
5240 Greensdairy Road 
Raleigh 27604 

Tel: (919) 876-3132 

FAX: (919) 878-9517 


Avnet Computer 

2725 Millbrook Rd., #123 
Raleigh 27604 

Tel: (919) 790-1735 

FAX: (919) 872-4972 


Hamilton Hallmark 

5234 Greens Dairy Road 
Raleigh 27604 

Tel: (919) 878-0819 
FAX: (919) 878-8729 


Island 11797 


Pioneer Technologies Group 
2200 Gateway Ctr. Blvd, #215 
Morrisville 27: 

Tel: (919) 460-1530 

FAX: (919) 460-1540 


OHIO 


Arrow Commercial Systems Grout 
284 Cramer Creek Court 

Dublin 43017 

Tel: (614) 889-9347 

FAX: (614) 889-9680 


Arrow/Schweber Electronics 
6573 Cochran Road, #E 
Solon 44139 

Tel: (216) 248-3990 

FAX: (216) 248-1106 


Arrow/Schweber Electronics 
8200 Washington Village Dr. 
Centerville 45458 

Tel: (513) 435-5563 

FAX: (513) 435-2049 


Avnet Computer 

7764 Washin aor Village Dr. 
Dayton 4545 

Tel: (513) 439-6756 

FAX: (513) 439-6719 


Avnet Computer 

30325 Bainbridge Rd., Bidg. A 
Solon 44139 

Tel: (216) 349-2505 

FAX: (216) 349-1894 


Hamilton Hallmark 

7760 Washington Village Dr. 
Dayton 45459 

Tel: (513) 439-6735 

FAX: (513) 439-6711 


Hamilton Hallmark 
5821 Harper Road 
Solon 44139 

Tel: (216) 498-1100 


FAX: (216) 248-4803 


Hamilton Halimark 

777 Dearborn Park Lane, #L 
Worthington 43085 

Tel: (614) 888-3313 

FAX: (614) 888-0767 


MTI Systems 

23404 Commerce Park Rd, 
Beachwood 44122 

Tel: (216) 464-6688 

FAX: (216) 464-3564 


Pioneer Standard 

4433 Interpoint Boulevard 
Dayton 45424 

Tel: (513) 236-9900 

FAX: (513) 236-8133 


Pioneer Standard 
4800 E. 131st Street 
Cleveland 44105 
Tel: (216) 587-3600 
FAX: (216) 663-1004 


OKLAHOMA 


Arrow/Schweber Electronics 
12101 E. 51st Street, #106 
Tulsa 74146 

Tel: (918) 252-7537 \ 
FAX: (918) 254-0917 ' 


Hamilton Hallmark 

5411S. 125th E. Ave., #305 
Tulsa 74146 

Tel: (918) 254-6110 

FAX: (918) 254-6207 


Pioneer Standard 

9717 E. 42nd St., #105 
Tulsa 74146 

Tel: (918) 665-7840 
FAX: (918) 665-1891 


CG/SALE/111% 


~ OREGON 


Almac Arrow Electronics 
1885 N.W. 169th Place 
Beaverton 97006 

Tel: (503) 629-8090 
FAX: (503) 645-0611 


Anthem Electronics 
9090 S.W. Gemini Drive 
Beaverton 97005 

Tel: (503) 643-1114 
FAX: (503) 626-7928 


Avnet Computer 


9750 Southwest Nimbus Ave. 


Beaverton 97005 
Tel: (503) 627-0900 
FAX: (502) 526-6242 


Hamilton Hallmark 
9750 S.W. Nimbus Ave. 
Beaverton 97005 

Tel: (503) 526-6200 
FAX: (503) 641-5939 


Wyle Laboratories 
9640 Sunshine Court 
Bldg. G, Suite 200 
Beaverton 97005 
Tel: (503) 643-7900 
FAX: (503) 646-5466 


PENNSYLVANIA 


Anthem Electronics 

355 Business Center Dr. 
Horsham 19044 

Tel: (215) 443-5150 
FAX: (215) 675-9875 


Avnet Computer 

213 Executive Drive, #320 
Mars 16046 

Tel: (412) 772-1888 

FAX: (412) 772-1890 


Pioneer Technologies Group 
259 Kappa Drive 

Pittsburgh 15238 

Tel: (412) 782-2300 

FAX: (412) 963-8255 


Pioneer Technologies Group 
500 Enterprise Road 

Keith Valley Business Center 
Horsham 19044 

Tel: (713) 530-4700 


Wyle Laboratories 

1 Eves Drive, #111 
Marlton 08053-3185 
Tel: (609) 985-7953 
FAX: (609) 985-8757 


TEXAS 


Anthem Electronics 

651 N. Plano Road, #401 
Richardson 75081 

Tel: (214) 238-7100 

FAX: (214) 238-0237 


Arrow/Schweber Electronics 
11500 Metric Bivd., #160 
Austin 78758 

Tel: (512) 835-4180 

FAX: (512) 832-5921 


Arrow/Schweber Electronics 
3220 Commander Dr. 
Carrollton 75006 

Tel: (214) 380-6464 

FAX: (214) 248-7208 


Arrow/Schweber Electronics 
10899 Kinghurst Dr., #100 
Houston 77099 

Tel: (713) 530-4700 


Avnet Computer 

4004 Beltline, Suite 200 
Dallas 75244 

Tel: (214) 308-8181 
FAX: (214) 308-8129 


Avnet Computer 

1235 North Loop West, #525 
Houston 77008 

Tel: (713) 867-8572 

FAX: (713) 861-6851 


Hamilton Hallmark 
12211 Technology Blvd. 
Austin 78727 

Tel: (512) 258-8848 
FAX: (512) 258-3777 


Hamilton Hallmark 
11420 Page Mill Road 
Dallas 75243 

Tel: (214) 553-4300 
FAX: (214) 553-4395 


Hamilton Hallmark 
8000 Westglen 
Houston 77063 

Tel: (713) 781-6100 
FAX: (713) 953-8420 


Pioneer Standard 
1826-D Kramer Lane 
Austin 78758 

Tel: (512) 835-4000 
FAX: (512) 835-9829 


Pioneer Standard 
13765 Beta Road 
Dallas 75244 

Tel: (214) 263-3168 
FAX: (214) 490-6419 


Pioneer Standard 

10530 Rockley Road, #100 
Houston 77099 

Tel: (713) 495-4700 

FAX: (713) 495-5642 


Wyle Laboratories 

1810 Greenville Avenue 
Richardson 75081 

Tel: (214) 235-9953 
FAX: (214) 644-5064 


Wyle Laboratories 

4030 West Braker Lane, #330 
Austin 78758 

Tel: (512) 345-8853 

FAX: (512) 345-9330 


Wyle Laboratories 

11001 South Wilcrest, #100 
Houston 77099 

Tel: (713) 879-9953 

FAX: (713) 879-6540 


UTAH 


Anthem Electronics 
1279 West 2200 South 
Salt Lake City 84119 
Tel: (801) 973-8555 
FAX: (801) 973-8909 


Arrow/Schweber Electronics 
1946 W. Parkway Blvd. 

Salt Lake City 84119 

Tel: (801) 973-6913 

FAX: (801) 972-0200 


Avnet Computer 

1100 E. 6600 South, #150 
Salt Lake City 84121 

Tel: (801) 266-1115 

FAX: (801) 266-0362 


Hamilton Hallmark 

1100 East 6600 South, #120 
Salt Lake City 84121 

Tel: (801) 266-2022 

FAX: (801) 263-0104 


Wyle Laboratories 

1325 West 2200 South, #E 
West Valley 84119 

Tel: (801) 974-9953 

FAX: (801) 972-2524 


WASHINGTON 


Almac Arrow Electronics 
14360 S.E. Eastgate Way 
Bellevue 98007 

Tel: (206) 643-9992 

FAX: (206) 643-9709 


Anthem Electronics 

19017 - 120th Ave., N.E. #102 
Bothell 98011 

Tel: (206) 483-1700 

FAX: (206) 486-0571 


Avnet Computer 
17761 N.E. 78th Place 
Redmond 98052 

Tel: (206) 867-0160 
FAX: (206) 867-0161 


Hamilton Hallmark 
8630 154th Avenue 
Redmond 98052 
Tel: (206) 881-6697 
FAX: (206) 867-0159 


Wyle Laboratories 
15385 N.E. 90th Street 
Redmond 98052 

Tel: (206) 881-1150 
FAX: (206) 881-1567 


WISCONSIN 


Arrow/Schweber Electronics 
200 N. Patrick, #100 
Brookfield 53045 

Tel: (414) 792-0150 

FAX: (414) 792-0156 


Avnet Computer 

20875 Crossroads Circle, #400 
Waukesha 53186 

Tel: (414) 784-8205 

FAX: (414) 784-6006 


Hamilton Halimark 
2440 S. 179th Street 
New Berlin 53146 
Tel: (414) 797-7844 
FAX: (414) 797-9259 


Pioneer Standard 

120 Bishop Way #163 
Brookfield 53005 

Tel: (414) 784-3480 
FAX: (414) 780-3613 


Wyle Laboratories 

W226 N555 Eastmound Drive 
Waukesha 53186 

Tel: (414) 521-9333 

FAX: (414) 521-9498 


ALASKA 


Avnet Computer 

1400 West Benson Bivd., #400 
Anchorage 99503 

Tel: (907) 274-9899 

FAX: (907) 277-2639 


CANADA 


ALBERTA 


Avnet Computer 

2816 21st Street Northeast 
Calgary T2E 622 

Tel: (403) 291-3284 

FAX: (403) 250-1591 


Zentronics 

6815 8th Street N.E., #100 
Calgary T2E 7H 

Tel: (403) 295-8838 

FAX: (403) 295-8714 


BRITISH COLUMBIA 


Almac Arrow Electronics 
8544 Baxter Place 
Burnaby V5A 4T8 

Tel: (604) 421-2333 
FAX: (604) 421-5030 


Hamilton Hallmark 

8610 Commerce Court 
Burnaby V5A 4N6 

Tel: (604) 420-4101 

FAX: (604) 420-5376 * 


Zentronics 

11400 Bridgeport Rd., #108 
Richmond V6X 1T2 

Tel: (604) 273-5575 

FAX: (604) 273-2413 


ONTARIO 


Arrow/Schweber Electronics 
1093 Meyerside, Unit 2 
Mississauga L5T 1M4 

Tel: (416) 670-7769 

FAX: (416) 670-7781 


Arrow/Schweber Electronics 
36 Antares Dr., Unit 100 
Nepean K2E 7W5 

Tel: (613) 226-6903 

FAX: (613) 723-2018 


NORTH AMERICAN DISTRIBUTORS (Contd.) 


Avnet Computer 


Canada System Engineering Group 


151 Superior Bivd. 
Mississuaga L5T 2L1 
Tel: (416) 795-3835 
FAX: (416) 677-5091 


Avnet Computer 
190 Colonade Road 
Nepean K2E 7J5 
Tel: (613) 727-2000 
FAX: (613) 226-1184 


Hamilton Hallmark 

151 Superior Bivd., Unit 1-6 
Mississauga L5T 2L1 

Tel: (416) 564-6060 

FAX: (416) 564-6033 


Hamilton Hallmark 
190 Colonade Road 
Nepean K2E 7J5 
Tel: (613) 226-1700 
FAX: (613) 226-1184 


Zentronics 

5600 Keaton Crescent, #1 
Mississauga L5R 3S5 

Tel: (416) 507-2600 

FAX: (416) 507-2831 


Zentronics 

155 Colonnade Rd., South 
#17 

Nepean K2E 7K1 

Tel: (613) 226-8840 

FAX: (613) 226-6352 


QUEBEC 


Arrow/Schweber Electronics 
1100 St. Regis Bivd. 

Dorval H9P 2T5 

Tel: (514) 421-7411 

FAX: (514) 421-7430 


Arrow/Schweber Electronics 
500 Boul. St.-Jean-Baptiste Ave. 
Quebec H2E 5R9 

Tel: (418) 871-7500 

FAX: (418) 871-6816 


Avnet Computer 
2795 Reu Halpern 
St. Laurent H4S 1P8 
Tel: (514) 335-2483 
FAX: (514) 335-2481 


Hamilton Hallmark 
7575 Transcanada Highway 
600 , 


# 

St. Laurent H4T 2V6 
Tel: (514) 335-1000 
FAX: (514) 335-2481 


Zentronics 

520 McCaffrey 

St. Laurent H4T 1N3 
Tel: (514) 737-9700 

FAX: (514) 737-5212 


CG/SALE/111293 


intel. 


Intel Finland OY 
Ruosilantie 2 

00390 Helsinki 

Tel: (358) 0 544 644 
FAX: (358) 0 544 030 


FRANCE 


Intel Corporation S.A.R.L. 
1, Rue Edison-BP 303 
i St. Quentin-en-Yvelines 


Cc 
Tel: (33) (1) 30 57 70 00 
FAX: (33) (1) 30 64 60 32 


EUROPEAN SALES OFFICES 


GERMANY 


Intel GmbH 

Dornacher Strasse 1 

85622 Feldkirchen/Muenchen 
Tel: (49) 089/90992-0 

FAX: (49) 089/9043948 


ISRAEL 
Intel Semiconductor Ltd. 


Atidim Industrial Park-Neve Sharet 


P.O. Box 43202 
Tel-Aviv 61430 

Tel: (972) 03 498080 
FAX: (972) 03 491870 


ITALY 


Intel Corporation Italia S.p.A. 
Milanofiori Palazzo E 

20094 As 

Milano 

Tel: (39) (2) 575441 

FAX: (39) (2) 3498464 


NETHERLANDS 


Intel Semiconductor B.V. 
Postbus 84130 

3009 CC Rotterdam 

Tel: (31) 10 407 11 11 
FAX: (31) 10 455 4688 


RUSSIA 


Intel Tecnogt Inc. 


Tel: 007-095-4439785 
FAX: 007-095-4459420 
TLX: 612092 smail su. 


SPAIN 


Intel Iberia S.A. 
Zubaran, 28 

28010 Madrid 

Tel: (34) (1) 308 2552 
FAX: (34) (1) 410 7570 


SWEDEN 


Intel Sweden A.B. 
Dalvagen 24 

171 Soina 

Tel: (46) 8 705 5600 
FAX: (46) 8 278085 


UNITED KINGDOM 


intel Corporation (U.K.) Ltd. 
Pipers Way 

Swindon, Wiltshire SN3 1RJ 
Tel: (44) (0793) 696000 
FAX: (44) (0793) 641440 


EUROPEAN DISTRIBUTORS/REPRESENTATIVES 


AUSTRIA 


t*Elbatex GmbH 
Eitner: e 6 

A-1231 Wien 

Tel: (43) 1816020 
FAX: (43) 181652141 


tSpoerle Electronic 
Heiligenst. Str. 62 
A-1190 Wien 

Tel: (43) 1 318 72 700 
FAX: (43) 1 369 22 73 


BELGIUM 


t*lnelco Distribution 

Avenue des Croix de Guerre 94 
1120 Bruxelles 

Tel: (32) 2 244 2811 

FAX: (32) 2 216 3304 


*Diode Belgium 

Keiberg Il, Minervastraat, 14/B2 
1930 entem 

Tel: (32) 2 725 46 60 

FAX: (32) 2 725 45 11 


DENMARK 


*Avnet Nortec A/S 
Transformervej 17 
DK-2730 Herlev 

Tel: (45) 4284 2000 
FAX: (45) 4492 1552 


t*ITT Multikomponent AS 
Naverland 29 

DK-2600 Glostrup 

Tel: (45) 4245 6645 

FAX: (45) 4245 7624 


FINLAND 


t*OY Fintronic AB 
ntitie, 3 
02230 Espoo 
Tel: (358) 0 887 331 
FAX: (358) 0 887 33 343 


FRANCE 


*Arrow Electronique 
73-79 Rue des Solets 
Silic 585 

94663 Rungis Cedex 
Tel: (33) (1) 4978 4978 
FAX: (33) (1) 4978 0596 


*Avnet 

79, rue Pierre Semard 
92322 Chatillon 

Tel: (33) (1) 4965 2500 
FAX: (33) (1) 4965 2769 


tMetrologie 

Tour d’Asnieres 

4, Avenue Laurent Cely 
92606 Asnieres Cedex 

Tel: (33) (1) 4080 9000 
FAX: (33) (1) 4791 0561 


*Tekelec 

Cite des Bruyeres 

5, Rue Carie Vernet-BP 2 
92310 Sevres 

Tel: (33) (1) 4623 2425 
FAX: (33) (1) 4507 2191 


*Components 
tSystems 


GERMANY 


ng 

Pepe pall 

Tel: (49) 89 45110-01 
FAX: (49) 89 45110129 


*Jermyn GmbH 

Im Dachsstueck 9 
65549 Limburg 

Tel: (49) 6431 5080 
FAX: (49) 6431 508289 


tMetroiogie GmbH 
Steinerstrasse 15 
81369 Muenchen 

Tel: (49) 89 724470 
FAX: (49) 89 72447111 


*Proelectron Vertriebs GmbH 
Max-Planck-Strasse 1-3 
63303 Dreieich 

Tel: (49) 6103 304343 

FAX: (49) 6103 304425 


tRein Elektronik GmbH 
Loetscher Weg 66 
41303 Nett 

Tel: (49) 2153 7330 
FAX: (49) 2153 733513 


GREECE 


tErgodata 
Aigiroupoleos 2A 

176 76 Kalithea 
Tel: (30) 1 95 10 922 
FAX: (30) 1 95 93 160 


*Pouliadis Associates nig 3 
Aristotelous St. 3/Sygrou Av. 150 
Athens 17671 

Tel: (30) 1 924 2072 

FAX: (30) 1 924 1066 


IRELAND 


t*Micro Marketing 
Taney Hall 

Eglinton Terrace 
Dundrum 

Dublin 14 

Tel: (353) (1) 298 9400 
FAX: (353) (1) 298 9828 


ISRAEL 


t*Eastronics Limited 
Rozanis 11 

P.O.B. 39300 

Tel Baruch 

Tel-Aviv 61392 

Tel: (972) 3 6458 777 
FAX: (972) 3 6458 666 


ITALY 


*Intesi Div. Della Deutsche 
Divisione ITT Industries GmbH 
P.|. 06550110156 

Milanofiori Palazzo e5 

20094 Assago (Milano) 

Tel: (39) 2 824701 

FAX: (39) 2 8242631 


*Lasi Elettronica 

P.1. 00839000155 

Viale Fulvio Testi, N.280 
20126 Milano 

Tel: (39) 2 661431 

FAX: (39) 2 66101385 


tOmnilogic Telcom 
Via Lorenteggio 270/A 
20152 Milano 

Tel: (39) 2 48302640 
FAX: (39) 2 43802010 


NETHERLANDS 


+tDatelcom B.V. 
Meidoornkade 22 
3993 AE Houten 

Tel: (31) 3403 57222 
FAX: (31) 3403 57220 


*Diode Components 
Coltbaan 17 


3439 NG Nieuwegein 
Tel: (31) 3402 9 12 34 
FAX: (31) 3402 3 59 24 


Mal en pee 
nergieweg 

2627 AP Delft 

Tel: (31) 15 609 906 
FAX: (31) 15 619 194 


NORWAY 


*Avnet Nortec A/S 
Postboks 123 
N-1364 Hvalstad 
Tel: (47) 284 6210 
FAX: (47) 284 6545 


tComputer System Integration A/S 
Postbox 198 


_ Tel: (47) 45 411 


FAX: (47) 638 45 310 


PORTUGAL 


*ATD Electronica LDA 
Edificio Altejo 

Rua 3 piso 5-sala 505 
Urbanizacao de Matinha 
1900 Lisboa 

Tel: (351) (1) 858 0191 /2 
FAX: (351) (1) 858 7841 


tMetrologia Iberica Portugal 

Rua Dr. Faria de Vasconcelos 3A 
1900 Lisboa 

Tel: (351) (1) 847 2202 

FAX: (351) (1) 847 2197 


SOUTH AFRICA 


T*EBE 

PO Box 912-1222 
Silverton 0127 

178 Erasmus Street 
Meyerspark 

Pretoria 0184 

Tel: (27) 12 803 7680-93 
FAX: (27) 12 803 8294 


SPAIN 
*ATD Electronica 


Avenue de la Industria, 32, 2B 


28100 Alcobendas 
Madrid 

Tel: (34) (1) 661 6551 
FAX: (34) (1) 661 6300 


tMetrologia Iberica 
Avda. Industria, 32-2 
28100 Alcobendas 
Madrid 

Tel: (34) (1) 661 1142 
FAX: (34) (1) 661 5755 


SWEDEN 
tAvnet Computer AB 
Box 184 


S-123 23 Farsta 
Tel: (46) 8 705 18 00 
FAX: (46) 8 735 2373 


*Avnet Nortec AB 
Box 1830 

S-171 27 Soina 
Tel: (46) 8705 1800 
FAX: (46) 883 6918 


*ITT Multikomponent AB 


Ankdammsgatan 32 
Box 1330 

S-171 26 Soina 

Tel: (46) 8 830020 
FAX: (46) 8 27 13 03 


SWITZERLAND 


tElbatex AG 

Hardstr. 7 

CH-5430 Wettingen 
Tel: (41) 56 27 50 00 
FAX: (41) 27 19 24 


tFabrimex AG 
Kirchenweg 5 
CH-8032 Zurich 

Tel: (41) 1 386 86 86 
FAX: (41) 1 383 23 79 


tiIMIC Microcomputer 
Zurichstrasse 
CH-8185 Winkel-Ruti 
Tel: (41) (1) 8620055 
FAX: (41) (1) 8620266 


t*Industrade AG 
Hertistrasse 31 
CH-8304 Wallisellen 
Tel: (41) (1) 8328111 
FAX: (41) (1) 8307550 


TURKEY 


*Empa Electronic 
Florya Is Merkezi 
Besyol Londra Asfalti 
0 Florya Istanbul 
Tel: (90) (1) 599 3050 
FAX: (90) (1) 599 3061 


UNITED KINGDOM 


*Arrow Electronics 

St. Martins Business Centre 
Cambridge Road 

Bedford - MK42 OLF 

Tel: (44) 234 270272 

FAX: (44) 234 211434 


*Avnet EMG Ltd. 

Jubilee House 

Jubilee Road 

Letchworth 

Hertsfordshire - SG6 1QH 
Tel: (44) 462 488 500 
FAX: (44) 462 488 567 


*Bytech Components 
12a Cedarwood 
Chineham Business Park 
4 Crockford Lane 
Basingstoke 

Hants RG12 1RW 

Tel: (44) 256 707 107 
FAX: (44) 256 707 162 


tBytech Systems 

5 the Sterling Centre 
Eastern Roa 

Bracknell 

Berks - RG12 2PW 
Tel: (44) 344 55 333 
FAX: (44) 344 867 270 


*Datrontech 

42-44 Birchett Road 
Aldershot 

Hants —GU11 1LU 
Tel: (44) 252 313155 
FAX: (44) 252 341939 


*Jermyn Electronics 
Vestry Estate 

Otford Road 
Sevenoaks 

Kent TN14 5EU 

Tel: (44) 732 743 743 
FAX: (44) 732 451 251 


tMetrologie VA 
Rapid House 
oa wens 
ig combe 
Bucks - HP11 2E 
Tel: (44) 494 526 271 
FAX: (44) 494 421 860 


*MMD/Rapid Ltd. 
Rapid Silicon 

3 Bennet Court 
Bennet Road 

Reading 

Berks - RG2 0QX 

Tel: (44) 734 750 697 
FAX: (44) 734 313 255 


CG/SALE/11 12s 


intel. 


AUSTRALIA 


Intel Australia Pty. Ltd. 

Unit 13 

Allambie Grove Business Park 
25 Frenchs Forest Road East 
Frenchs Forest, NSW, 2086 
Sydney 

Tel: 61-2-975-3300 

FAX: 61-2-975-3375 


Intel Australia Pty. Ltd. 
711 High Street 

1st Floor 

East Kw. Vic., 3102 
Melbourne 

Tel: 61-3-810-2141 
FAX: 61-3-819 7200 


BRAZIL 


Intel Semicondutores do Brasil 
Rua Florida, 1703-2 and CJ.22 
CEP 04565-001 Sao Paulo 

SP Brazil 

Tel: 55-11-530-2296 

FAX: 55-11-531-5765 


CHINA/HONG KONG 


Intel PRC Corporation 

Room 517-518 

China World Tower 

1 Jian Guo Men Wai Avenue 
Beijing 100004 

Republic of China 

Tel: 861-505-0386 

FAX: 861-505-0383 


Sa 


INTERNATIONAL SALES OFFICES 


Intel Semiconductor Ltd.* 
32/F Two Pacific Place 
88 Queensway 

Central 

Hong Kong 

Tel: (852) 844-4555 

FAX: (852) 868-1989 


INDIA 


Intel Asia Electronics, Inc. 
4/2, Samrah Plaza 

St. Mark’s Road 

Bangalore 560001 

Tel: 91-80-215065 

FAX: 91-80-215067 

TLX: 953-845-2646 INTL IN 


JAPAN 


Intel Japan K.K. 

5-6 Tokodai, Tsukuba-shi 
Ibaraki, 300-26 

Tel: 0298-47-8511 

FAX: 0298-47-8450 


Intel Japan K.K.* 
Hachioji ON Bidg. 
4-7-14 Myojin-machi 
Hachioji-shi, a 192 
Tel: 0426-48-87 

FAX: 0426-48- S775 


Intel Japan K.K.* 
Kawa-asa Bidg. 

2-11-5 Shin-Yokohama 
Kohoku-ku, Yokohama-shi 
Kanagawa, 222 

Tel: 045-474-7660 

FAX: 045-471-4394 


Intel Japan K.K.* 
Ryokuchi-Eki Bidg. 

2-4-1 Terauchi 
Toyonaka-shi, Osaka 560 
Tel: 06-863-1091 

FAX: 06-863-1084 


Intel Japan K.K. 
Shinmaru Bidg. 

1-5-1 Marunouchi 
Chiyoda-ku, Tokyo 100 
Tel: 03-3201-3621 

FAX: 03-3201 -6850 


Intel Japan K.K.* 

TK Gotanda Bidg. 9F 
8-3-6 Nishi Gotanda 
Shinagawa, Tokyo 141 
Tel: 03-3493-6081 
FAX: 03-3493-5951 


KOREA 


Intel Korea, Ltd. 

16th Floor, Life Bldg. 

61 Yoido-dong, Youngdeungpo-Ku 
Seoul 150-010 

Tel: (2) 784-8186 

FAX: (2) 784-8096 


MEXICO 


Intel Tecnologia de Mexico 
S.A. de C.V. 

Av. Mexico No. 2798-9B, S.H. 
44680 Guadalajara, Jal. 

Tel: 011-523-640-1259 

FAX: 011-523-642-7661 


SINGAPORE 


Intel Singapore ee Ltd. 
101 Thomson Road #08 

United Square 

Singapore 1130 

Tel: (65) 250-7811 

FAX: (65) 250-9256 


TAIWAN 


Intel Technology Far East Ltd. 

Taiwan Branch 

8th Floor, No. 205 

Bank Tower Bidg. 

Tung Hua N. Road 

Taipei 

Tel: 886-2-5144200 

FAX: 886-2-717-2455 
886-2-719-6184 


INTERNATIONAL DISTRIBUTORS/REPRESENTATIVES 


ARGENTINA 


Dafsys Consulting S.A. 
Chacabuco, 90-6 Piso 
1069-Buenos Aires 

Tel. & FAX: 54.1334.1871 


AUSTRALIA 


NJS Electronics Australia 
1A/37 Ricketts Road 
Mount Waverley, VIC 3149 
Tel: 61-3-558-9868 

FAX: 61-3-558-9929 


NSD-Australia 

205 Middleborough Rd. 
Box Hill, Victoria 3128 
Tel: 03 8900970 

FAX: 03 8990819 


BRAZIL 


Hitech 

Luis Carlos Berrini, 801 CJ121 
04571, Sao Paulo, SP Brazil 
Tel: 5511-536-0355 

FAX: 5511-240-2650 


Microlinear 

Avenida Wilhelm Winter, 345 
Distrito Industrial - Jundiai, SP 
13213-000 

Tel: 5511-732-6111 

FAX: 5511-732-2892. 


CHILE 


Sisteco 

Vecinal 40 —Las Condes 
Santiago 

Tel: 562-234-1644 

FAX: 562-233-9895 


CHINA/HONG KONG 


Novel Precision Machinery Co., Ltd. 


Room 728 Trade Square 
681 Cheung Sha Wan Road 
Kowloon, Hong Kong 

Tel: (852) 360-8999 

TWX: 32032 NVTNL HX 
FAX: (852) 725-3695 


*Field Application Location 


GUATEMALA 


Abinitio 

11 Calle 2—Zona 9 
Guatemala City 
Tel: 5022-32-4104 
FAX: 5022-32-4123 


INDIA 


Priya International Limited 

D-6, Il Floor 

Devatha Plaza 

131/132 Residency Rd. 
Bangalore 560 025 

Tel: 91-80-214027, 91 SO2TASES 
FAX: 91-80-214105 


Priya International Limited 

Apeejay House, 4th Floor 

130 Apolio Street 

Bombay 400 023 

Tel: 91-22-2660949, 91-22-2665822 


Priya International Limited 

Flat No. 8, 10th Floor 

Akashdeep Building 

Barakhamba Rd. 

New Delhi 110 001 

Tel: 91-11-3314512, 91-11-3310413 
FAX: 91-11-3719107 


Priya International Limited 

5-J, Century Plaza 

560-562 Mount Road, Teynampet 
Madras 600 018 

Tel: 91-44-451031, 91-44-451597 
FAX: 91-44-813549 


Priya International Limited 

No. 10, ll Floor, Minerva House 

94 Sarojini Devi Rd. 

Secunderabad 500 003 

Tel: 91-842-813120, 91-842-813549 


Priya International Limited 

Lords, Ill Floor 

7/1 Lord Sinha Road 

Calcutta 700 071 

Tel: 91-33-222378, 91-33-222379 
FAX: 91-33-224884 


SES i aie & Technologies 
Pvt. Ltd. 


11/18, SNS Chambers 

239 Palace Upper Orchards 
Sankey Road, Sadashivanagar 
Bangalore 560 080 

Tel: 91-812-348481 

FAX: 91-812-343685 


SES Computers & Technologies 
Pvt. Ltd. 

Arvind Chambers 

194, Andheri-Kurla Road 

Andheri (East) 

Bombay 400 069 

Tel: 91-22-6341584, 91-22-6341667 

FAX: 91-22-4937524 


SES Computers & Technologies 
Pvt. Ltd. 


605-A, Ansal Chambers II 
No. 6, Bhikaji Camaplace 
New Delhi 110 066 

Tel: 91-11-6881663 

FAX: 91-11-6840471 


JAMAICA 


MC Systems 

10-12 Grenada Crescent 
Kingston 5 

Tel: (809) 926-0104 
FAX: (809) 929-5678 


JAPAN 


Asahi Electronics Co. Ltd. 
KMM Bidg. 2-14-1 Asano 
Kokurakita-ku 
Kitakyushu-shi 802 

Tel: 093-511-6471 

FAX: 093-551-7861 


Dia Semicon Systems, Inc. 

Flower Hill Shinmachi Higashi-kan 
1-23 Shinmachi, Setagaya-ku 
Tokyo 154 

Tel: 03-3439-1600 

FAX: 03-3439-1601 


Okaya Koki 

2-4-18 Sakae 

Naka-ku, Nagoya-shi 460 
Tel: 052-204-8315 

FAX: 052-204-8380 


Ryoyo Electro Corp. 
Konwa Bidg. 
1-12-22 Tsukiji 
Chuo-ku, Tokyo 104 
Tel: 03-3546-5011 
FAX: 03-3546-5044 


KOREA 


Samsung Electronics 

Samsung Main Bidg. 

150 Taepyung-Ro-2KA, Chung-Ku 
Seoul 100-10 

C.P.0. Box 8780 

Tel: (822) 751-3680 

TWX: KORSST K 27970 

FAX: (822) 753-9065 


Tong Baek Electronic Co., Ltd. 
16-58 Hangang-ro 3-ga 
Yongsan-gu, Seoul 

Tel: 82-2-715-6623 

FAX: 82-2-715-9374 


SAUDI ARABIA 


AAE Systems, Inc. 
642 N. Pastoria Ave. 
Sunnyvale, CA 94086 
U.S.A. 


Tel: (408) 732-1710 
FAX: (408) 732-3095 
TLX: 494-3405 AAE SYS 


SINGAPORE 


Electronic Resources Pte, Ltd. 
17 Harvey Road 

#03-01 Singapore 1336 

Tel: (65) 283-0888 

TWX: RS 56541 ERS 

FAX: (65) 289-5327 


SOUTH AFRICA 


Electronic Building Elements 
178 Erasmus St. 

(off Watermeyet St.) 
Meyerspark, Pretoria, 0184 
Tel: 011-2712-803-7680 
FAX: 011-2712-803-8294 


TAIWAN 


Micro Electronics Corporation 
12th Floor, Section 3 

285 Nanking East Road 
Taipei, R.O.C. 

Tel: (886) 2-7198419 

FAX: (886) 2-7197916 


Acer Sertek Inc. 

15th Floor, Section 2 
Chien Kuo North Rd. 
Taipei 18479 R.O.C. 
Tel: 886-2-501-0055 
TWX: 23756 SERTEK 
FAX: (886) 2-5012521 


URUGUAY 


Interfase 

Bivr. Espana 2094 

11200 Montevideo 
Tel: 5982-49-4600 

FAX: 5982-49-3040 


VENEZUELA 


Unixel C.A. 

4 Transversal de Monte Cristo 
Edf. AXXA, Piso 1, of. 1&2 
Centro Empresarial Boleita 
Caracas 

Tel: 582-238-7749 

FAX: 582-238-1816 
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ALABAMA 


Birmingham 
Huntsville 


ALASKA 
Anchorage 


ARIZONA 


Phoenix* 
Tucson 


ARKANSAS 
Little Rock 


CALIFORNIA 


Bakersfield 
Brea 

Carson* 
Fresno 
Livermore 

Mar Del Rey 
Ontario* 
Orange 
Sacramento* 
San Diego* 
San Francisco* 
Santa Clara* 
Ventura 
Sunnyvale 
Walnut Creek* 
Woodland Hills* 


COLORADO 


Colorado Springs 
Denver 
Englewood* 


CONNECTICUT 
Glastonbury* 


DELAWARE 
New Castle 


FLORIDA 


Ft. Lauderdale 
Heathrow 
Jacksonville 
Melbourne 
Pensacola 
Tampa 

West Palm Beach 


ARIZONA 


Computervision Customer 


Education 

2401 W. Behrend Dr., 
Phoenix 85027 

Tel: 1-800-234-8806 


MINNESOTA 


3500 W. 80th Street 
Suite 360 

Bloomington 55431 
Tel: (612) 835-6722 


*Carry-in locations 


Suite 17 


NORTH AMERICAN SERVICE OFFICES 
COMPUTERVISION 
Intel Corporation’s North American Preferred Service Provider 


Central Dispatch: 1-800-876-SERV (1-800-876-7378) 


GEORGIA 


Atlanta* 
Savannah 
West Robbins 


HAWAII 
Honolulu 


ILLINOIS 
Buffalo* 
Calumer City 
Chicago 
Lansing 
Oak Brook 

INDIANA 


Carmel* 
Ft. Wayne 


KANSAS 
Overland Park* 
Wichita 

KENTUCKY 
Lexington 


Louisville 
Madisonville 


LOUISIANA 


Baton Rouge 
Metarie 


MAINE 


Brunswick 


MARYLAND 


Frederick 
Linthicum* 
Rockville* 


MASSACHUSETTS 


Boston* 
Natick* 
Norton* 
Springfield 


CUSTOMER TRAINING CENTERS 


ILLINOIS 


Computervision Customer 


Education 


1 Oakbrook Terrace 


Suite 600 
Oakbrook 60181 


Tel: 1-800-234-8806 


SYSTEMS ENGINEERING OFFICES 


NEW YORK 


2950 Expressway Dr., South 


Islandia 11722 


Tel: (506) 231-3300 


MICHIGAN 


Ann Harbor 
Benton Harbor 
Flint 

Grand Rapids* 
Leslie 

Livonia* 

St. Joseph 
Troy* 


MINNESOTA 


Bloomington* 
Deluth 


MISSOURI 


Springfield 
St. Louis* 


NEVADA 


Minden 
Las Vegas 
Reno 


NEW HAMSHIRE 
Manchester* 


NEW JERSEY 


Edison* 
Hamton Town* 
Parsippany* 


NEW MEXICO 
Albuquerque 


NEW YORK 


Albany* 
Amherst* 
Dewitt* 
Fairport* 
Farmingdale* 
New York City* 


NORTH CAROLINA 


Brevard 
Charlotte 
Greensboro 
Haveluch 
Raleigh 
Wilmington 


MASSACHUSETTS 


Computervision Customer 
Education 

11 Oak Park Drive 
Bedford 01730 

Tel: 1-800-234-8806 


NORTH DAKOTA 
Bismark 


OHIO 


Cincinnati* 
Columbus 
Dayton 
Independence* 
Middle Heights* 
Toledo* 


OREGON 
Beaverton* 


PENNSYLVANIA 


Bala Cynwyd* 
Cams Lite 
East Erie 
Pittsburgh* 
Wayne* 


SOUTH CAROLINA 


Charleston 
Cherry Point 
Columbia 
Fountain Inn 


SOUTH DAKOTA 
Sioux Falls 


TENNESSEE 


Bartlett 
Chattanooga 
Knoxville 
Nashville 


TEXAS 


Austin 

Bay City 
Beaumont 
Canyon 
College Station 
Houston* 
Irving* 

San Antonio 
Tyler 


UTAH 
Salt Lake City* 


WASHINGTON 


WEST VIRGINIA 


Vancouver, BC* 


WASHINGTON D.C.* 
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>= 


Microprocessors: Volume I 


The Intel386" SX and DX CPU-based systems are the choices for 
budget conscious users and for factory control systems and medical 
instruments in the embedded market. 


This handbook contains extensive information on the Intel386" 
microprocessor family, numeric coprocessors, cache and memory 
controllers, floppy and hard disk controllers, and development tools 
for the Intel386, 80286, 80C186 and 8086 microprocessors. 


The data sheets and application notes contained in this handbook 
provide comprehensive charts, diagrams, instructions, and hardware 
information for leading 32-bit system development. 
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